last executing test programs: 4m11.5235924s ago: executing program 32 (id=845): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='-', 0x1}], 0x1}}], 0x1, 0x4000000) 3m52.318363248s ago: executing program 33 (id=1285): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, 0x0, 0x0) 3m27.193925486s ago: executing program 34 (id=1898): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000240)={0xfffffffa, 0x80000001}, 0x8) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) close(r0) 3m18.663029207s ago: executing program 35 (id=2099): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) io_setup(0x239f, &(0x7f0000000380)=0x0) r1 = eventfd2(0x5, 0x1) io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x0, 0x800002, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x8000000, 0x1, 0x9841, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 3m10.459460998s ago: executing program 36 (id=2264): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000400)={0x0, 0xd386, 0x0, 0x3, 0x7f}, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001300)=""/115) 3m1.308580215s ago: executing program 37 (id=2143): fsopen(0x0, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x12, 0x4, 0x8, 0x1}, 0x50) mknod$loop(0x0, 0x800, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xeeda3cec741b98db}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x100b, &(0x7f0000003500)=""/4107, 0x0, 0xd}, 0x94) 2m53.507068176s ago: executing program 38 (id=2508): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4606ff78b3050000000000000002003e00cd000000c9030000000000004000000000000000ea0200000000000002000100050038000101"], 0x178) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m43.246448403s ago: executing program 0 (id=2703): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) 2m43.130452276s ago: executing program 0 (id=2705): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e2, &(0x7f0000000000)) 2m41.058419452s ago: executing program 0 (id=2773): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) fchdir(r0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) 2m41.029322253s ago: executing program 0 (id=2775): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x300000, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f0000000000)='./bus\x00', 0x20000, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) 2m41.001650284s ago: executing program 0 (id=2776): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0xffffffff80000002) write(r0, 0x0, 0x0) 2m40.919036706s ago: executing program 0 (id=2780): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_io_uring_setup(0x1ae8, &(0x7f0000000140)={0x0, 0x6c4e, 0x80, 0x3, 0x1fb}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 2m40.918943095s ago: executing program 39 (id=2780): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_io_uring_setup(0x1ae8, &(0x7f0000000140)={0x0, 0x6c4e, 0x80, 0x3, 0x1fb}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 2m11.415174012s ago: executing program 6 (id=3606): bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000002000000000000100000008000000000a00000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a00000000000000000000008040"], 0xfc}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 2m11.347281734s ago: executing program 6 (id=3607): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x10000, &(0x7f00000003c0)={[{@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0xca}}, {@quota}, {@bsdgroups}, {@dioread_nolock}]}, 0x1, 0x50a, &(0x7f0000000e80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000180)={@desc={0x1, 0x0, @desc4}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 2m11.063207932s ago: executing program 6 (id=3609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 2m9.962132822s ago: executing program 6 (id=3613): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$eJzs3c9vHFcdAPDvrL2Okzi1CxygUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQbM7G5v1rL0xa2+8/nykybw3v77f5/iNZ2afZgM4t56PiDci4sM0TV+KiNl8eSmfotWZsu3ef/jucjYlkaZv/S2JJF+WbZamado95uV8t+mI+NpXIr6Z7As4nc93dm8v1eu1zbxaba7fqW7t7F5fW19ara3WNhYW5l9dfG3xlcUbQ2nnlYh4/Ut/+v53fvrl13/52Xf+ePMv176VpTWTr++24xgmD1vZaXr5wnTPDpvHDPYkytpT/iCvXBxsn3snmRAAAH1l1/gfiYhPRcRLMRsTh1/OAgAAAGdQ+oWZ+CDpfH5XYKrPcgAAAOAMKbXHwCalSj4WYCZKpUqlM4b3Y3GpVG9sNT9zq7G9sdIZKzsX5dKttXrtRj5WeC7KSVafb5f36i/31Bci4umI+N7sxXa9styor4z64QcAAACcE5d77v//Odu5/z9ccjrJAQAAAMMzN+oEAAAAgBPn/h8AAADGWnnUCQAAAAAn7qtvvplNaff7r1fe3tm+3Xj7+kpt63ZlfXu5stzYvFNZbTRW2+/sWz/qePVG487nYmP7brVZ22pWr+zs3lxvbG80b67F9Kk0CAAAADjg6U/e/30SEa3PX2xPmalRJwWcislHpe47PQt6/x+e6szfO6WkgFMxMcA2710oXu46Ac62yd4Fffo6MH6M/weO+kaPvoN3ftOZlYacDwAAMHxXP3Hcz/9bLvnhjNOJ4fzq+fw/nR1VIsCpaz/3H3Qgj4sFGCvlgUYAAuPs//38/2hp+lgJAQAAQzfTnpJSJX+8NxOlUqUScaX9tYDl5NZavXYjIp6KiN/Nli9k9fn2nsmR9wwAAAAAAAAAAAAAAAAAAAAAAAAAQEeaJpECAAAAYy2i9OfkV513+V+dfXGm9/nAVPLv9lcCT0XEOz966wd3l5rNzfls+d8fLW/+MF/+8iieYAAAAAC9uvfp7fm/Rp0NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOPm/YfvLnenATa/OKy4f/1iRMwVxZ+M6fZ8OsoRcekfSUzu2y+JiIkhxG/di4iPF8VPsrQehSyKP4wfQute0krbCuPHXP5TKIp/eQjx4Ty7n51/3ijq/6V4vj0v7n+TEf9TP67+5794dP6b6NP/rwwY45kHP6/2jX8v4pnJ4vNfN37SJ/4LA0Uvxze+vrvbb23644ir3b8/7TPe/gh7pWpz/U51a2f3+tr60mpttbaxsDD/6uJri68s3qjeWqvX8n8LY3z32V98eFj7LxX+/UvybPq3/8WC400U5P+fB3cffrRbaR2Mf+2Fgvi//km+xcH4pTzOp/Nytv5qt9zqlPd77me/fe6w9q/stb/8OP//1/odtNeBjvLsYL86AMCJ2NrZvb1Ur9c2x7aQ3aU/AWkcpzAVT0Qa41v4dlZ4MKwDpmmaZn2qYNX9iBjkOEkMuaWl4nz2Cn3PAKM+MwEAAMO2d9E/6kwAAAAAAAAAAAAAAAAAAADg/DqNt6z1xtx7BXIyjFdoAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMxX8DAAD//0tG3AI=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x24000894) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) file_getattr(r0, 0x0, &(0x7f0000000040), 0x64, 0x1000) 2m9.679414339s ago: executing program 6 (id=3615): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x4e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f00000004c0)=ANY=[], 0x0) 2m9.402643117s ago: executing program 6 (id=3617): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r1, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) 2m9.324098259s ago: executing program 40 (id=3617): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r1, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) 27.170760187s ago: executing program 1 (id=5668): setreuid(0x0, 0xee00) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r1, 0x9) readv(r0, &(0x7f0000000900)=[{&(0x7f0000000780)=""/148, 0x94}], 0x1) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 27.06799229s ago: executing program 1 (id=5671): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400200000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) 27.016831331s ago: executing program 1 (id=5673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) sendmsg$inet(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000180)="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", 0xd21}, {0x0}], 0x2}, 0x4) 26.917551484s ago: executing program 1 (id=5677): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000340)='./file0/../file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f00000003c0)='./bus\x00', &(0x7f00000000c0)='./file0\x00') 26.916839034s ago: executing program 1 (id=5678): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003101a08, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee01) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x103900, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) 26.252370682s ago: executing program 4 (id=5698): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x50) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x1}, 0x2002, 0x1000, 0x7, 0x7, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x10) 26.175152704s ago: executing program 1 (id=5699): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$sock(0xffffffffffffffff, &(0x7f0000004280)={0x0, 0x0, 0x0}, 0x400000c) cachestat(r0, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0) 26.167815754s ago: executing program 41 (id=5699): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$sock(0xffffffffffffffff, &(0x7f0000004280)={0x0, 0x0, 0x0}, 0x400000c) cachestat(r0, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0) 26.156384264s ago: executing program 4 (id=5701): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x0, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0xffffffffffffffff, 0x24000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x20, 0xc, 0x100, 0x6, 0x0, 0xffffffec, 0x0}) 26.019109398s ago: executing program 4 (id=5703): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 25.97178317s ago: executing program 4 (id=5705): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) 25.905700211s ago: executing program 4 (id=5707): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x20, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 25.21121261s ago: executing program 4 (id=5711): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x54, r2, 0x1, 0x1070bd28, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 25.155802011s ago: executing program 42 (id=5711): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x54, r2, 0x1, 0x1070bd28, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 24.785561362s ago: executing program 9 (id=5716): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) process_vm_readv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/55, 0x7ffff00a}, {&(0x7f0000006180)=""/152, 0x98}], 0x11, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/96, 0x7ffff04d}], 0x286, 0x0) 23.777760448s ago: executing program 9 (id=5723): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0xfffffd12) 23.579723103s ago: executing program 9 (id=5724): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 22.882435822s ago: executing program 9 (id=5728): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1000, 0x2, 0xfff7ff81, 0x5, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2050061, &(0x7f0000000bc0)) 22.405299655s ago: executing program 9 (id=5733): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0xfd}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 10.7550106s ago: executing program 9 (id=5891): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 10.730705831s ago: executing program 43 (id=5891): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 6.645470991s ago: executing program 2 (id=5944): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRESHEX], 0x1, 0x122e, &(0x7f0000002580)="$eJzs3MFrHFUcB/BftqlZU5tErdX2oA+9eBqaHDwJEiQFyYJSG6EVhCmZ6JJxN2SWwIoYe/Lq0b9BPHpTxH8gV/8Cb7mIpxzEEXZSk60NmlqyRT+fy/zIb76Z99hl4S3v7f7rX368uVFlG/kgWlNT0dqKSAcpUrTinhdXm+ut26vLnc7KjZSuL99cfC2lNPfSD+9/+s3LPw4uvPft3Hczsbfwwf4vSz/vXd67sv/7zY+6VepWqdcfpDzd6fcH+Z2ySOvdajNL6Z2yyKsidXtVsT3W3yj7W1vDlPfWL85ubRdVlfLeMG0WwzTop8H2MOUf5t1eyrIsXZwNTnT+729Z+/qgrr+PqOvz8UTUdV0/GbMxFU/FxZiLzyPi6Xgmno1L8Vxcjufjhbgyuusshg8AAAAAAAAAAAAAAAAAAAD/Hwej0/zj5/8vHJ7/n48F5/8BAAAAAAAAAAAAAAAAAADgDLx76/bqcqezciOldkT5xc7azlpzbfrLG9GNMoq4FvPxW4xO/zea+vpbnZVraeRcROwe5nd31s6N5xdHPydwmJ8e9e7lF5t8irvlsfxMzDb5dkQUsRTzcenY89tH+aUH5tvx6ivHnp/FfL0b0Y8y1kfPPsp/tpjSm2937stfHd0HAAAA/wVZ+tPC+Pq3Wb9n2Un9Jn+K7wfuW19Px9Xpyc6diGr4yWZelsX2eNH+y18mVsw8HsM4TdH6N/GZOLHVGmt99VPEpGf6WBTtw/fyo/iHU5OfzkMUdx/J3MeLCX8wcSaOXvRJjwQAAAAAAAAAAIDT+Cf7AX+Nh95FOB0P2Fn2xmSmCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MEOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoQIAAP//uXHE5A==") truncate(&(0x7f0000000000)='./file2\x00', 0x881bfd) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000037c0)=""/4096, &(0x7f00000047c0)=0x1000) 5.281209918s ago: executing program 2 (id=5959): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002440)=@newlink={0x38, 0x10, 0x437, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r0, &(0x7f00000003c0)="5581861d51d793615d9eaf27000000000000", 0x12, 0x24008884, &(0x7f0000000100)={0x11, 0x8100, r2, 0x1, 0xe9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) 4.302524034s ago: executing program 2 (id=5973): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x0, 0x5b, 0x0, 0x0, 0x5, 0x60000000, 0x0, 0xffffff44, 0x0, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffb9) io_uring_enter(r1, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 4.202643667s ago: executing program 2 (id=5966): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x218002, &(0x7f0000000080)={[{@data_err_ignore}, {@errors_remount}, {@sysvgroups}, {@nolazytime}, {@nodioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file1\x00', 0x4027e, 0xe7) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 3.922866454s ago: executing program 2 (id=5969): r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.378998666s ago: executing program 8 (id=5983): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) io_uring_enter(r0, 0x2219, 0xe286, 0x16, 0x0, 0xfffffde9) 2.378926916s ago: executing program 2 (id=5984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 2.322307038s ago: executing program 44 (id=5984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 2.275400709s ago: executing program 8 (id=5986): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28) recvfrom(r0, &(0x7f0000000440)=""/4070, 0x20, 0x101, 0x0, 0x0) 2.024151076s ago: executing program 5 (id=5996): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030006000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 1.968570587s ago: executing program 7 (id=5998): r0 = gettid() timer_create(0x1, &(0x7f0000000100)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000340)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) gettimeofday(0xfffffffffffffffe, 0x0) 1.935488198s ago: executing program 7 (id=5999): unshare(0x6a040000) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0xa, 0x801, 0x0) getsockopt(r0, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) 1.046399152s ago: executing program 5 (id=6001): r0 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 1.044209982s ago: executing program 8 (id=6009): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 965.230974ms ago: executing program 7 (id=6002): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x3f6a, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1015", 0x2}], 0x1}}], 0x1, 0x8050) sendto$inet(r0, &(0x7f0000000280)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a66b5142374cc8a67a16845b745bff74683c9d915c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0001005375abddf56331be396eaa2398ea66b92a74fd4147e826abed1ccc1cdd936d2571c3510b00000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e7480000001ebdec6811981ce6be92aea7ffb20c6fdcc97291c9af9634c31b03f18cf2d2f5be7a6a", 0xffffffffffffffc6, 0x88c1, 0x0, 0xfffffce8) 904.552196ms ago: executing program 5 (id=6004): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0x740b1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x46}, 0x1616, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x24000000000, 0xffffffffffffffff, 0x8) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') statfs(&(0x7f0000000040)='./file0\x00', 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 870.656517ms ago: executing program 3 (id=6005): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write(r0, &(0x7f0000000240)='T', 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 825.172788ms ago: executing program 7 (id=6006): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0xffff, 0x0, 0xffffffbc, 0x10}}, &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c050100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 774.988139ms ago: executing program 5 (id=6007): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x24, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r0], 0x38}}, 0x10) 774.607579ms ago: executing program 3 (id=6008): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, &(0x7f0000000280), 0xfffffeed) 762.68681ms ago: executing program 7 (id=6010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket(0x11, 0x80a, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 628.410294ms ago: executing program 7 (id=6011): sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) 624.012274ms ago: executing program 5 (id=6012): unshare(0x24020400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2}) 570.213555ms ago: executing program 3 (id=6013): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 542.204616ms ago: executing program 5 (id=6014): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) io_setup(0x6, &(0x7f0000000680)) io_setup(0x10000, &(0x7f00000014c0)) 497.664077ms ago: executing program 8 (id=6015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac14143208000200e00000020c0002800500010000000000240002801400018008000100e000000108000200ac14140d0c000280050001000000000008000740000000002000068008000100ac1414bb080002"], 0x84}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000080)={'sit0\x00', 0x0}) timer_create(0x8, &(0x7f0000000240)={0x0, 0x18, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000380)) 479.825198ms ago: executing program 3 (id=6016): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) rt_sigtimedwait(&(0x7f0000000240)={[0x100000001]}, &(0x7f0000000340), 0x0, 0x8) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 341.556561ms ago: executing program 3 (id=6017): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000bbb000/0x4000)=nil, 0x4000, 0x400000a) 262.168464ms ago: executing program 3 (id=6018): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0), 0x1, 0x436, &(0x7f0000001680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40042, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000080)="c7", 0x5f) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x8000008) 147.053776ms ago: executing program 8 (id=6019): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=@deltfilter={0x103c, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x1004, 0x2, [@TCA_CGROUP_ACT={0x1000, 0x1, [@m_connmark={0xe0, 0x0, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x671, 0x7, 0x7, 0x3}, 0xe57}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x10000, 0xffffffffffffffff, 0xc, 0xa00}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x3d, 0x6, "8603f539b6a7af824d262bf654e2998b1ef3d2c0c3dcff5329f40e2a6613622a8e0c660697488dd9d3852466b5f92790cca8a42cadda0bea24"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x6c, 0x14, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}]}, {0x1d, 0x6, "091574d9000173335e5beb79fe5c3f08f569883f9e847a92ca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x48, 0xf, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xe68, 0x5, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x400}, 0xb1, 0x3, [{0xf7b7, 0x5, 0x9, 0xd, 0xdd, 0x5}]}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x2, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cb, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x1}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x40, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x9, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x103c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 8 (id=6020): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x10012, r1, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff) kernel console output (not intermixed with test programs): _0: entered promiscuous mode [ 239.472542][T16980] team_slave_1: entered promiscuous mode [ 239.485380][T16980] dummy0: entered promiscuous mode [ 239.495072][T16980] nlmon0: entered promiscuous mode [ 239.505583][T16980] batadv0: entered promiscuous mode [ 239.518217][T16980] vxcan0: entered promiscuous mode [ 239.529722][T16980] vxcan1: entered promiscuous mode [ 239.540310][T16980] wg0: entered promiscuous mode [ 239.555075][T16980] wg1: entered promiscuous mode [ 239.564271][T16980] wg2: entered promiscuous mode [ 239.575105][T16980] veth0_to_bridge: entered promiscuous mode [ 239.589488][T16980] veth1_to_bridge: entered promiscuous mode [ 239.603384][T16980] veth0_to_bond: entered promiscuous mode [ 239.615389][T16980] veth1_to_bond: entered promiscuous mode [ 239.628834][T16980] veth0_to_team: entered promiscuous mode [ 239.642623][T16980] veth1_to_team: entered promiscuous mode [ 239.657278][T16980] veth0_to_batadv: entered promiscuous mode [ 239.668295][T16980] batadv_slave_0: entered promiscuous mode [ 239.678901][T16980] veth1_to_batadv: entered promiscuous mode [ 239.689864][T16980] batadv_slave_1: entered promiscuous mode [ 239.700415][T16980] xfrm0: entered promiscuous mode [ 239.710916][T16980] veth0_to_hsr: entered promiscuous mode [ 239.721838][T16980] veth1_to_hsr: entered promiscuous mode [ 239.734182][T16980] hsr0: entered promiscuous mode [ 239.745724][T16980] veth1_virt_wifi: entered promiscuous mode [ 239.770530][T16980] veth0_virt_wifi: entered promiscuous mode [ 239.792350][T16980] vlan0: entered promiscuous mode [ 239.809582][T16980] vlan1: entered promiscuous mode [ 239.826882][T16980] macvlan0: entered promiscuous mode [ 239.838723][T16980] macvlan1: entered promiscuous mode [ 239.846275][T16980] ipvlan0: entered promiscuous mode [ 239.854633][T16980] ipvlan1: entered promiscuous mode [ 239.861521][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4702'. [ 239.869399][T16980] macvtap0: entered promiscuous mode [ 239.875997][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4702'. [ 239.879887][T16980] macsec0: entered promiscuous mode [ 239.892188][T16980] geneve0: entered promiscuous mode [ 239.898741][T16980] geneve1: entered promiscuous mode [ 239.905236][T16980] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 239.915893][T16980] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 239.925836][T16980] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 239.939177][T16980] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 239.948857][T16980] @: entered promiscuous mode [ 239.954603][T16980] ip6tnl1: entered promiscuous mode [ 239.961587][T16980] vti60: entered promiscuous mode [ 239.969019][T16980] ip6tnl2: entered promiscuous mode [ 239.978865][T16980] veth0: entered promiscuous mode [ 239.985804][T16980] geneve2: left allmulticast mode [ 239.991827][T16980] ipip0: entered promiscuous mode [ 239.998565][T16980] bond2: entered promiscuous mode [ 240.003819][T16980] geneve3: entered promiscuous mode [ 240.013226][T16980] gre1: entered promiscuous mode [ 240.082494][T17009] loop5: detected capacity change from 0 to 512 [ 240.095174][T16993] team0: Device wg2 is of different type [ 240.108879][T17009] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.4705: inode has both inline data and extents flags [ 240.122320][T17009] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 240.122593][T17009] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.4705: couldn't read orphan inode 15 (err -117) [ 240.137199][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 240.144222][T17009] loop5: lost filesystem error report for type 5 error -117 [ 240.150190][ C0] EXT4-fs (loop5): initial error at time 1777664695: ext4_orphan_get:1397: inode 15 [ 240.150225][ C0] EXT4-fs (loop5): last error at time 1777664695: ext4_orphan_get:1397: inode 15 [ 240.157516][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4704'. [ 240.186066][T17009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.207691][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 240.207705][ T28] audit: type=1400 audit(1777664695.657:2195): avc: denied { execute } for pid=17008 comm="syz.5.4705" path="/212/file0/file1" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 240.318599][T17019] netlink: 'syz.9.4707': attribute type 8 has an invalid length. [ 240.330928][T17019] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4707'. [ 240.345429][T17019] erspan0: entered promiscuous mode [ 240.353143][T17019] gretap0: entered promiscuous mode [ 240.359444][T17019] veth1_to_hsr: entered promiscuous mode [ 240.365745][T17019] hsr1: entered promiscuous mode [ 240.517580][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.552530][T13950] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.577044][T13950] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 241.166793][ T28] audit: type=1400 audit(1777664696.607:2196): avc: denied { read } for pid=17054 comm="syz.2.4723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 241.817329][ T5159] ip6_tunnel:  xmit: Local address not yet configured! [ 241.978663][T17082] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4735'. [ 242.067337][ T5159] ip6_tunnel:  xmit: Local address not yet configured! [ 242.385203][T17088] loop5: detected capacity change from 0 to 1024 [ 242.435923][T17123] loop2: detected capacity change from 0 to 1024 [ 242.451320][T17088] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 242.480756][T17123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 242.494806][T17123] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.504083][T17088] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 242.520027][T17088] EXT4-fs (loop5): orphan cleanup on readonly fs [ 242.530254][T17123] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.4742: lblock 0 mapped to illegal pblock 0 (length 1) [ 242.532574][T17088] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.4736: Freeing blocks not in datazone - block = 0, count = 4096 [ 242.544704][T17123] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 242.558540][T17088] loop5: lost filesystem error report for type 5 error -117 [ 242.572555][T17123] EXT4-fs (loop2): This should not happen!! Data will be lost [ 242.572555][T17123] [ 242.577219][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 242.596048][ C1] EXT4-fs (loop5): initial error at time 1777664698: ext4_free_blocks:6718 [ 242.596261][T17123] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.4742: lblock 0 mapped to illegal pblock 0 (length 1) [ 242.604820][ C1] EXT4-fs (loop5): last error at time 1777664698: ext4_free_blocks:6718 [ 242.627813][T17123] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.4742: lblock 0 mapped to illegal pblock 0 (length 1) [ 242.628182][T17088] EXT4-fs (loop5): 1 orphan inode deleted [ 242.645845][T17123] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.4742: lblock 0 mapped to illegal pblock 0 (length 1) [ 242.655126][T17088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 242.664469][T17123] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.4742: lblock 0 mapped to illegal pblock 0 (length 1) [ 242.664712][T17123] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.4742: lblock 0 mapped to illegal pblock 0 (length 1) [ 242.665042][T17123] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.4742: lblock 0 mapped to illegal pblock 0 (length 1) [ 242.665690][T17123] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.4742: lblock 0 mapped to illegal pblock 0 (length 1) [ 242.740973][T17123] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.4742: lblock 0 mapped to illegal pblock 0 (length 1) [ 242.755078][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.761360][T17123] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.4742: lblock 0 mapped to illegal pblock 0 (length 1) [ 242.937709][T11635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 243.065474][T17183] netlink: 'syz.5.4749': attribute type 10 has an invalid length. [ 243.095950][T17183] wg2: left promiscuous mode [ 243.165841][T17183] wg2: entered promiscuous mode [ 243.184750][T17183] team0: Device wg2 is of different type [ 243.306478][T17187] lo: Caught tx_queue_len zero misconfig [ 243.450986][T17202] SELinux: failed to load policy [ 243.503192][T17207] loop9: detected capacity change from 0 to 1024 [ 243.520735][T17207] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 243.585664][T17207] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.630728][T17207] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: comm syz.9.4758: lblock 0 mapped to illegal pblock 0 (length 1) [ 243.673213][T17207] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 243.717544][T17207] EXT4-fs (loop9): This should not happen!! Data will be lost [ 243.717544][T17207] [ 243.762852][T17215] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #15: comm syz.9.4758: lblock 0 mapped to illegal pblock 0 (length 1) [ 243.808793][T17206] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #15: comm syz.9.4758: lblock 0 mapped to illegal pblock 0 (length 1) [ 243.848697][T17215] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #15: comm syz.9.4758: lblock 0 mapped to illegal pblock 0 (length 1) [ 243.875522][T17215] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #15: comm syz.9.4758: lblock 0 mapped to illegal pblock 0 (length 1) [ 243.910473][T17206] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #15: comm syz.9.4758: lblock 0 mapped to illegal pblock 0 (length 1) [ 243.940180][T17215] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #15: comm syz.9.4758: lblock 0 mapped to illegal pblock 0 (length 1) [ 243.980175][T17206] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #15: comm syz.9.4758: lblock 0 mapped to illegal pblock 0 (length 1) [ 244.006880][T17215] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #15: comm syz.9.4758: lblock 0 mapped to illegal pblock 0 (length 1) [ 244.022273][T17215] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #15: comm syz.9.4758: lblock 0 mapped to illegal pblock 0 (length 1) [ 244.083186][ T9602] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 244.244980][T17228] loop5: detected capacity change from 0 to 512 [ 244.262815][T17228] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 244.284900][T17228] EXT4-fs (loop5): 1 truncate cleaned up [ 244.295731][T17228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.340725][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.380066][T17232] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 244.435905][T17232] SELinux: failed to load policy [ 246.312784][T17298] netlink: 'syz.1.4796': attribute type 1 has an invalid length. [ 246.331646][T17298] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.351869][T17298] bond4: (slave geneve3): making interface the new active one [ 246.362650][T17298] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 246.372870][ T9359] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 246.389788][ T9359] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 246.409607][ T9359] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 246.432085][ T9359] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 247.048284][T17318] netlink: 'syz.1.4805': attribute type 10 has an invalid length. [ 247.118742][T17318] wg2: entered promiscuous mode [ 247.129145][T17318] wg2: entered allmulticast mode [ 247.135120][T17318] team0: Device wg2 is of different type [ 247.170073][T17324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4808'. [ 247.182057][T17324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4808'. [ 247.191833][T17324] netlink: 'syz.5.4808': attribute type 6 has an invalid length. [ 247.248836][T17328] bridge0: port 3(team0) entered blocking state [ 247.255296][T17328] bridge0: port 3(team0) entered forwarding state [ 247.263634][T17324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4808'. [ 247.269158][T17328] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.283443][T17330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4810'. [ 247.283720][T17328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.293993][T17324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4808'. [ 247.294027][T17324] netlink: 'syz.5.4808': attribute type 6 has an invalid length. [ 247.334161][T17328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.343086][T17328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.353805][T17328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.364361][T17328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.377177][T17328] veth1_vlan: left promiscuous mode [ 247.383116][T17328] veth0_vlan: left promiscuous mode [ 247.389132][T17328] veth0_vlan: entered promiscuous mode [ 247.397023][T17328] veth1_vlan: entered promiscuous mode [ 247.405294][T17328] veth1_macvtap: left promiscuous mode [ 247.411977][T17328] veth0_macvtap: left promiscuous mode [ 247.418193][T17328] veth0_macvtap: entered promiscuous mode [ 247.424701][T17328] veth1_macvtap: entered promiscuous mode [ 247.434086][T17328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.442029][T17328] 8021q: adding VLAN 0 to HW filter on device bond2 [ 247.453993][T17328] 8021q: adding VLAN 0 to HW filter on device eth0 [ 247.462274][T17328] 8021q: adding VLAN 0 to HW filter on device eth1 [ 247.470762][T17328] 8021q: adding VLAN 0 to HW filter on device eth2 [ 247.479496][T17328] 8021q: adding VLAN 0 to HW filter on device eth3 [ 247.512839][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.520043][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.529596][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.536707][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.751447][T17342] loop9: detected capacity change from 0 to 512 [ 247.839655][T17350] netlink: 'syz.2.4820': attribute type 10 has an invalid length. [ 247.841783][T17352] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 247.890660][T17350] team0: Device wg2 is of different type [ 248.033218][T17361] loop9: detected capacity change from 0 to 512 [ 248.066443][T17361] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.118926][T17361] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.286240][ T9602] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.312475][T17375] loop9: detected capacity change from 0 to 512 [ 248.330457][T17375] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.354827][T17375] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.386831][ T9602] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.864949][T17383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.873889][T17383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.896224][T17385] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4829'. [ 249.021453][T17391] netlink: 'syz.5.4834': attribute type 10 has an invalid length. [ 249.050259][T17391] team0: Device wg2 is of different type [ 249.129179][ T365] Bluetooth: hci0: Frame reassembly failed (-84) [ 249.513986][ T28] audit: type=1400 audit(1777664704.957:2197): avc: denied { accept } for pid=17413 comm="syz.9.4843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 249.542286][T17410] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 249.715530][T17423] netlink: 'syz.4.4846': attribute type 1 has an invalid length. [ 249.748106][T17423] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.751552][T17421] loop2: detected capacity change from 0 to 128 [ 249.777055][T17421] vfat: Unknown parameter 'shor4name' [ 249.793420][T17425] bond4: (slave geneve3): making interface the new active one [ 249.808376][T17425] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 249.822303][ T9359] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 249.838595][ T9359] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 249.854317][ T9359] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 249.876231][ T9359] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 249.948951][T17430] netlink: 'syz.2.4848': attribute type 10 has an invalid length. [ 250.001705][T17430] team0: Device wg2 is of different type [ 250.372002][T17444] syz.1.4855: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 250.404291][T17436] loop9: detected capacity change from 0 to 1024 [ 250.424043][T17444] CPU: 1 UID: 0 PID: 17444 Comm: syz.1.4855 Tainted: G W syzkaller #0 PREEMPT(full) [ 250.424106][T17444] Tainted: [W]=WARN [ 250.424116][T17444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.424141][T17444] Call Trace: [ 250.424153][T17444] [ 250.424163][T17444] __dump_stack+0x1d/0x30 [ 250.424191][T17444] dump_stack_lvl+0x95/0xd0 [ 250.424246][T17444] dump_stack+0x15/0x1b [ 250.424303][T17444] warn_alloc+0x145/0x1c0 [ 250.424334][T17444] ? futex_unqueue+0xc5/0xf0 [ 250.424379][T17444] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 250.424410][T17444] ? __pfx_futex_wake_mark+0x10/0x10 [ 250.424465][T17444] ? __rcu_read_unlock+0x4e/0x70 [ 250.424490][T17444] ? avc_has_perm_noaudit+0xab/0x130 [ 250.424600][T17444] vmalloc_user_noprof+0x7d/0xb0 [ 250.424695][T17444] ? xskq_create+0x80/0xe0 [ 250.424746][T17444] xskq_create+0x80/0xe0 [ 250.424774][T17444] xsk_init_queue+0x70/0xb0 [ 250.424806][T17444] xsk_setsockopt+0x477/0x640 [ 250.424836][T17444] ? __pfx_xsk_setsockopt+0x10/0x10 [ 250.424947][T17444] __sys_setsockopt+0x184/0x200 [ 250.424975][T17444] __x64_sys_setsockopt+0x64/0x80 [ 250.425004][T17444] x64_sys_call+0x2327/0x3020 [ 250.425068][T17444] do_syscall_64+0x12c/0x3b0 [ 250.425100][T17444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.425193][T17444] RIP: 0033:0x7f778af8cdd9 [ 250.425249][T17444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.425267][T17444] RSP: 002b:00007f77899e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 250.425288][T17444] RAX: ffffffffffffffda RBX: 00007f778b205fa0 RCX: 00007f778af8cdd9 [ 250.425307][T17444] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 250.425384][T17444] RBP: 00007f778b022d69 R08: 0000000000000004 R09: 0000000000000000 [ 250.425401][T17444] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 250.425418][T17444] R13: 00007f778b206038 R14: 00007f778b205fa0 R15: 00007ffe0c74bb08 [ 250.425479][T17444] [ 250.632942][T17444] Mem-Info: [ 250.636283][T17444] active_anon:56523 inactive_anon:1 isolated_anon:0 [ 250.636283][T17444] active_file:27434 inactive_file:2783 isolated_file:0 [ 250.636283][T17444] unevictable:0 dirty:155 writeback:0 [ 250.636283][T17444] slab_reclaimable:3955 slab_unreclaimable:22257 [ 250.636283][T17444] mapped:29406 shmem:36839 pagetables:4396 [ 250.636283][T17444] sec_pagetables:0 bounce:0 [ 250.636283][T17444] kernel_misc_reclaimable:0 [ 250.636283][T17444] free:1749129 free_pcp:11998 free_cma:0 [ 250.664886][T17448] loop2: detected capacity change from 0 to 512 [ 250.695046][T17436] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 250.727006][T17444] Node 0 active_anon:228080kB inactive_anon:4kB active_file:109736kB inactive_file:11144kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117624kB dirty:692kB writeback:0kB shmem:149360kB kernel_stack:5232kB pagetables:17564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 250.733154][T17436] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 250.758300][T17444] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 250.758433][T17444] lowmem_reserve[]: 0 2878 7857 7857 [ 250.758470][T17444] Node 0 DMA32 free:2944548kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948072kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 250.758649][T17444] lowmem_reserve[]: 0 0 4978 4978 [ 250.758752][T17444] Node 0 Normal free:4036508kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:228312kB inactive_anon:4kB active_file:109736kB inactive_file:11144kB unevictable:0kB writepending:692kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:42308kB local_pcp:20108kB free_cma:0kB [ 250.758837][T17444] lowmem_reserve[]: 0 0 0 0 [ 250.758974][T17444] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 250.759138][T17444] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 2*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944548kB [ 250.759457][T17444] Node 0 Normal: 71*4kB (UME) 296*8kB (UME) 562*16kB (UME) 365*32kB (UME) 60*64kB (UME) 5*128kB (UM) 85*256kB (UE) [ 250.808906][T17436] EXT4-fs (loop9): orphan cleanup on readonly fs [ 250.836108][T17444] 361*512kB (UME) 291*1024kB (UME) 153*2048kB (UME) 779*4096kB (UM) = 4036508kB [ 250.836187][T17444] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 250.836209][T17444] 67967 total pagecache pages [ 250.836235][T17444] 5 pages in swap cache [ 250.836253][T17444] Free swap = 124096kB [ 250.836261][T17444] Total swap = 124996kB [ 250.836268][T17444] 2097051 pages RAM [ 250.836277][T17444] 0 pages HighMem/MovableOnly [ 250.836285][T17444] 81634 pages reserved [ 250.924563][T17448] EXT4-fs (loop2): 1 truncate cleaned up [ 250.956259][T17436] EXT4-fs error (device loop9): ext4_free_blocks:6718: comm syz.9.4852: Freeing blocks not in datazone - block = 0, count = 4096 [ 250.961401][T17448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.980987][T17436] loop9: lost filesystem error report for type 5 error -117 [ 251.055545][T17436] EXT4-fs (loop9): 1 orphan inode deleted [ 251.063364][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 251.063396][ C0] EXT4-fs (loop9): initial error at time 1777664706: ext4_free_blocks:6718 [ 251.063524][ C0] EXT4-fs (loop9): last error at time 1777664706: ext4_free_blocks:6718 [ 251.099993][T11635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.112162][T17436] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 251.127161][ T3603] Bluetooth: hci0: command 0x1003 tx timeout [ 251.129509][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 251.185870][ T9602] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.322813][T13944] Process accounting resumed [ 251.528999][T17489] netlink: 'syz.4.4870': attribute type 3 has an invalid length. [ 251.783889][T17501] netlink: 'syz.2.4878': attribute type 10 has an invalid length. [ 251.919597][T17501] team0: Device wg2 is of different type [ 251.972605][T17485] loop5: detected capacity change from 0 to 1024 [ 252.043928][T17485] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 252.089216][T17485] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 252.116037][T17485] EXT4-fs (loop5): orphan cleanup on readonly fs [ 252.132796][T17485] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.4873: Freeing blocks not in datazone - block = 0, count = 4096 [ 252.148070][T17485] loop5: lost filesystem error report for type 5 error -117 [ 252.152254][T17485] EXT4-fs (loop5): 1 orphan inode deleted [ 252.160231][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 252.160353][ C0] EXT4-fs (loop5): initial error at time 1777664707: ext4_free_blocks:6718 [ 252.160616][ C0] EXT4-fs (loop5): last error at time 1777664707: ext4_free_blocks:6718 [ 252.220993][T17485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.271281][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.832010][T17536] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 252.842604][T17536] SELinux: failed to load policy [ 252.981150][T17546] syzkaller1: entered promiscuous mode [ 252.994082][T17546] syzkaller1: entered allmulticast mode [ 253.155070][T17551] bond0: entered promiscuous mode [ 253.168036][T17551] bond_slave_0: entered promiscuous mode [ 253.173954][T17551] bond_slave_1: entered promiscuous mode [ 253.182424][T17551] bond0: left promiscuous mode [ 253.194855][T17551] bond_slave_0: left promiscuous mode [ 253.220502][T17551] bond_slave_1: left promiscuous mode [ 253.368837][T17559] netlink: 'syz.9.4902': attribute type 10 has an invalid length. [ 253.438804][T17568] netlink: 'syz.2.4906': attribute type 6 has an invalid length. [ 253.568741][T17559] team0: Device wg2 is of different type [ 253.867352][T17590] tls_set_device_offload: netdev not found [ 253.938726][T17592] netlink: 'syz.9.4917': attribute type 4 has an invalid length. [ 253.974004][T17592] netlink: 156 bytes leftover after parsing attributes in process `syz.9.4917'. [ 253.998249][T17592] bond_slave_1: mtu greater than device maximum [ 254.080407][T17596] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4919'. [ 254.201244][T17598] loop5: detected capacity change from 0 to 128 [ 254.253513][T17598] vfat: Unknown parameter 'shor4name' [ 254.519917][ T28] audit: type=1400 audit(1777664709.967:2198): avc: denied { setopt } for pid=17621 comm="syz.5.4930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 254.723674][ T28] audit: type=1400 audit(1777664710.167:2199): avc: denied { create } for pid=17629 comm="syz.5.4934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 254.877293][T17612] loop9: detected capacity change from 0 to 32768 [ 254.933385][T17612] loop9: p1 p3 < > [ 254.980378][T17652] loop5: detected capacity change from 0 to 2048 [ 255.002486][T17654] batadv_slave_0: entered promiscuous mode [ 255.019982][T17654] batadv_slave_0: left promiscuous mode [ 255.032925][T17652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.129598][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 255.140353][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 255.186093][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.236651][T17676] loop2: detected capacity change from 0 to 512 [ 255.344458][T17684] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 255.386066][T17684] SELinux: failed to load policy [ 255.575211][T17699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17699 comm=syz.5.4962 [ 255.594935][T17699] netlink: 95 bytes leftover after parsing attributes in process `syz.5.4962'. [ 255.614855][T17701] loop9: detected capacity change from 0 to 256 [ 255.653078][T17703] Invalid ELF header magic: != ELF [ 255.683236][ T28] audit: type=1326 audit(1777664711.127:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17704 comm="syz.5.4965" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fefa0e5cdd9 code=0x0 [ 256.152202][ T28] audit: type=1326 audit(1777664711.597:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17732 comm="syz.2.4976" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 256.202514][ T28] audit: type=1326 audit(1777664711.627:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17732 comm="syz.2.4976" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 256.233541][T17736] loop9: detected capacity change from 0 to 1024 [ 256.241161][ T28] audit: type=1326 audit(1777664711.627:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17732 comm="syz.2.4976" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 256.269334][ T28] audit: type=1326 audit(1777664711.627:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17732 comm="syz.2.4976" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 256.295664][ T28] audit: type=1326 audit(1777664711.627:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17732 comm="syz.2.4976" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 256.335721][T17736] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.352841][ T28] audit: type=1326 audit(1777664711.627:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17732 comm="syz.2.4976" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 256.378810][ T28] audit: type=1326 audit(1777664711.627:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17732 comm="syz.2.4976" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 256.483050][ T9602] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.582369][T17746] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4979'. [ 256.695639][T17742] loop2: detected capacity change from 0 to 1024 [ 256.828881][T17762] netlink: 'syz.9.4986': attribute type 2 has an invalid length. [ 256.891274][T17742] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 256.969566][T17742] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 257.009285][T17776] ip6tnl3: entered promiscuous mode [ 257.034148][T17742] EXT4-fs (loop2): orphan cleanup on readonly fs [ 257.067267][T17742] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.4988: Freeing blocks not in datazone - block = 0, count = 4096 [ 257.081115][T17742] loop2: lost filesystem error report for type 5 error -117 [ 257.086421][T17742] EXT4-fs (loop2): 1 orphan inode deleted [ 257.094552][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 257.094583][ C1] EXT4-fs (loop2): initial error at time 1777664712: ext4_free_blocks:6718 [ 257.094972][ C1] EXT4-fs (loop2): last error at time 1777664712: ext4_free_blocks:6718 [ 257.146549][T17742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 257.204868][T11635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.528626][ T28] kauditd_printk_skb: 487 callbacks suppressed [ 259.528644][ T28] audit: type=1326 audit(1777664714.967:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17853 comm="syz.9.5024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65dd0fd60e code=0x7ffc0000 [ 259.565403][ T28] audit: type=1326 audit(1777664714.977:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17853 comm="syz.9.5024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65dd0fd60e code=0x7ffc0000 [ 259.593933][ T28] audit: type=1326 audit(1777664714.977:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17853 comm="syz.9.5024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65dd0fd60e code=0x7ffc0000 [ 259.622660][ T28] audit: type=1326 audit(1777664714.977:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17853 comm="syz.9.5024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65dd0fd60e code=0x7ffc0000 [ 259.650169][ T28] audit: type=1326 audit(1777664714.977:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17853 comm="syz.9.5024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65dd0fd60e code=0x7ffc0000 [ 259.676373][ T28] audit: type=1326 audit(1777664714.977:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17853 comm="syz.9.5024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65dd0fd60e code=0x7ffc0000 [ 259.755322][T17904] loop5: detected capacity change from 0 to 764 [ 259.767619][ T28] audit: type=1326 audit(1777664714.977:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17853 comm="syz.9.5024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65dd0fd60e code=0x7ffc0000 [ 259.798365][ T9355] bond0: (slave bond_slave_0): interface is now down [ 259.811696][T17908] netlink: 'syz.9.5046': attribute type 10 has an invalid length. [ 259.824714][ T9355] bond0: (slave bond_slave_1): interface is now down [ 259.842407][ T9355] bond0: now running without any active interface! [ 259.850108][ T28] audit: type=1326 audit(1777664714.987:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17853 comm="syz.9.5024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65dd0fd60e code=0x7ffc0000 [ 259.877776][ T28] audit: type=1326 audit(1777664714.987:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17853 comm="syz.9.5024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65dd0fd60e code=0x7ffc0000 [ 259.903486][T17908] syz_tun: entered promiscuous mode [ 259.904805][ T28] audit: type=1326 audit(1777664714.987:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17853 comm="syz.9.5024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65dd0fd60e code=0x7ffc0000 [ 259.953107][T17908] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 259.962455][ T1637] bond0: (slave syz_tun): interface is now down [ 260.007333][ T9359] bond0: (slave syz_tun): interface is now down [ 260.015980][ T9359] bond0: now running without any active interface! [ 260.072180][T17921] netlink: 'syz.2.5052': attribute type 29 has an invalid length. [ 260.090109][T17923] loop5: detected capacity change from 0 to 1024 [ 260.097308][T17921] netlink: 'syz.2.5052': attribute type 29 has an invalid length. [ 260.121808][T17923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.171694][T17921] netlink: 'syz.2.5052': attribute type 29 has an invalid length. [ 260.249032][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.334958][T17941] netlink: 'syz.1.5057': attribute type 3 has an invalid length. [ 260.367466][T17941] netlink: 'syz.1.5057': attribute type 3 has an invalid length. [ 260.386179][T17947] netlink: 'syz.2.5059': attribute type 10 has an invalid length. [ 260.394797][T17941] netlink: 'syz.1.5057': attribute type 3 has an invalid length. [ 260.411067][T17947] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5059'. [ 260.417738][T17941] netlink: 'syz.1.5057': attribute type 3 has an invalid length. [ 260.461319][T17947] bond0: entered promiscuous mode [ 260.477011][T17947] bond_slave_0: entered promiscuous mode [ 260.491416][T17947] bond_slave_1: entered promiscuous mode [ 260.503706][T17947] bridge0: port 3(bond0) entered blocking state [ 260.520050][T17947] bridge0: port 3(bond0) entered disabled state [ 260.534501][T17947] bond0: entered allmulticast mode [ 260.545410][T17947] bond_slave_0: entered allmulticast mode [ 260.558040][T17947] bond_slave_1: entered allmulticast mode [ 260.574964][T17947] bridge0: port 3(bond0) entered blocking state [ 260.581426][T17947] bridge0: port 3(bond0) entered forwarding state [ 260.608350][T17954] loop5: detected capacity change from 0 to 8192 [ 260.676699][T13942] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 260.693314][T13942] FAT-fs (loop5): Filesystem has been set read-only [ 261.170611][T17991] loop2: detected capacity change from 0 to 512 [ 261.196952][T17991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 261.213336][T17991] ext4 filesystem being mounted at /451/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.235111][T17996] loop5: detected capacity change from 0 to 512 [ 261.270113][T17996] EXT4-fs: Mount option(s) incompatible with ext2 [ 261.343197][T11635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 261.451816][T17998] loop9: detected capacity change from 0 to 128 [ 261.549713][T17998] vfat: Unknown parameter 'shor4name' [ 261.918710][ T5169] ip6_tunnel:  xmit: Local address not yet configured! [ 261.966328][T18050] loop2: detected capacity change from 0 to 128 [ 261.974408][T18050] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 262.005853][T18050] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 262.006531][T18046] loop5: detected capacity change from 0 to 128 [ 262.063006][ T5169] ip6_tunnel:  xmit: Local address not yet configured! [ 262.070616][ T1637] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 262.123611][T18046] vfat: Unknown parameter 'shor4name' [ 262.215096][ T5418] bond0: (slave bond_slave_0): interface is now down [ 262.226225][T18056] validate_nla: 46 callbacks suppressed [ 262.226245][T18056] netlink: 'syz.5.5102': attribute type 10 has an invalid length. [ 262.240793][ T5418] bond0: (slave bond_slave_1): interface is now down [ 262.249002][ T5418] bond0: now running without any active interface! [ 262.430840][T18072] loop2: detected capacity change from 0 to 128 [ 262.543654][T18076] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 262.771676][ T5418] bond0: (slave bond_slave_0): interface is now down [ 262.783831][T18084] netlink: 'syz.1.5114': attribute type 10 has an invalid length. [ 262.796908][ T5418] bond0: now running without any active interface! [ 262.827270][T18084] syz_tun: entered promiscuous mode [ 262.845300][T18084] syz_tun: entered allmulticast mode [ 262.857360][ T5418] bond0: (slave syz_tun): interface is now down [ 263.019726][T18095] loop9: detected capacity change from 0 to 764 [ 263.380876][T18104] loop9: detected capacity change from 0 to 1024 [ 263.431457][T18104] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.493892][ T9602] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.974215][T18125] ip6tnl0: Caught tx_queue_len zero misconfig [ 264.247636][T18161] IPv6: NLM_F_CREATE should be specified when creating new route [ 264.401282][T18169] sit0: left promiscuous mode [ 264.542088][T18177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.667911][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.936660][T18195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5160'. [ 264.956261][T18195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5160'. [ 265.189807][T18209] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 265.203469][T18209] batman_adv: batadv0: Adding interface: ip6gretap1 [ 265.212178][T18209] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.238722][T18209] batman_adv: batadv0: Interface activated: ip6gretap1 [ 265.268740][T18211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5167'. [ 267.275001][T18267] SELinux: failed to load policy [ 267.365181][T18279] set_capacity_and_notify: 1 callbacks suppressed [ 267.365195][T18279] loop5: detected capacity change from 0 to 128 [ 267.379039][T18279] FAT-fs (loop5): bogus number of reserved sectors [ 267.385622][T18279] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 267.395106][T18279] FAT-fs (loop5): Can't find a valid FAT filesystem [ 267.396021][T18171] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.418157][T18279] loop5: detected capacity change from 0 to 128 [ 267.596040][T18295] loop2: detected capacity change from 0 to 512 [ 267.615457][T18297] loop5: detected capacity change from 0 to 512 [ 267.657327][T18295] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 267.657666][T18297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.669061][T18295] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 267.693487][T18295] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.5201: Corrupt directory, running e2fsck is recommended [ 267.714837][T18295] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 267.723386][T18295] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.5201: corrupted in-inode xattr: e_name out of bounds [ 267.739007][T18295] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 267.739174][T18295] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.5201: couldn't read orphan inode 15 (err -117) [ 267.748532][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 267.748554][ C0] EXT4-fs (loop2): initial error at time 1777664723: ext4_iget_extra_inode:5128: inode 15 [ 267.748587][ C0] EXT4-fs (loop2): last error at time 1777664723: ext4_iget_extra_inode:5128: inode 15 [ 267.783472][T18297] EXT4-fs warning (device loop5): verify_group_input:156: Last group not full [ 267.791535][T18295] loop2: lost filesystem error report for type 5 error -117 [ 267.796196][T18295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.825011][T18295] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 267.833890][ T28] kauditd_printk_skb: 475 callbacks suppressed [ 267.833907][ T28] audit: type=1400 audit(1777664723.277:3180): avc: denied { relabelto } for pid=18293 comm="syz.2.5201" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 267.864980][T18295] EXT4-fs error (device loop2): ext4_xattr_set_entry:1672: inode #2: comm syz.2.5201: corrupted xattr entries [ 267.906623][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.927288][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 268.186904][T11635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.592646][T18334] netlink: 'syz.4.5217': attribute type 14 has an invalid length. [ 268.602502][T18334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5217'. [ 268.624407][ T365] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.633699][T18334] netlink: 'syz.4.5217': attribute type 14 has an invalid length. [ 268.641778][ T365] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.653689][T18334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5217'. [ 268.664222][ T365] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.681398][ T365] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.764650][T18336] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.5213'. [ 268.790157][T18336] netlink: zone id is out of range [ 268.804144][T18336] netlink: zone id is out of range [ 268.832503][T18336] netlink: set zone limit has 8 unknown bytes [ 268.944696][T18347] loop2: detected capacity change from 0 to 1024 [ 268.981366][T18347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 269.016848][T18347] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.034516][T18347] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.5221: lblock 3 mapped to illegal pblock 3 (length 1) [ 269.090639][T18347] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 269.132079][T18347] EXT4-fs (loop2): This should not happen!! Data will be lost [ 269.132079][T18347] [ 269.154736][T18351] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.5221: lblock 0 mapped to illegal pblock 0 (length 3) [ 269.195731][T18351] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 269.252896][T18351] EXT4-fs (loop2): This should not happen!! Data will be lost [ 269.252896][T18351] [ 269.339144][T11635] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 269.368766][T11635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 269.403073][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b33b600: rx timeout, send abort [ 269.411485][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b33b600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 269.495529][T18361] loop5: detected capacity change from 0 to 128 [ 269.629105][ T28] audit: type=1400 audit(1777664725.077:3181): avc: denied { read } for pid=18370 comm="syz.2.5233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 270.500787][T18406] loop5: detected capacity change from 0 to 512 [ 270.520819][T18406] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 270.558982][T18406] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 270.584955][T18412] loop9: detected capacity change from 0 to 128 [ 270.597792][T18406] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5247: bg 0: block 248: padding at end of block bitmap is not set [ 270.627579][T18406] loop5: lost filesystem error report for type 5 error -117 [ 270.628996][T18406] Quota error (device loop5): write_blk: dquota write failed [ 270.643841][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 270.643867][ C0] EXT4-fs (loop5): last error at time 1777664726: ext4_validate_block_bitmap:441 [ 270.661894][T18406] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 270.671986][T18406] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.5247: Failed to acquire dquot type 1 [ 270.683325][T18406] loop5: lost filesystem error report for type 5 error -28 [ 270.684042][T18406] EXT4-fs (loop5): 1 truncate cleaned up [ 270.697570][T18406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 270.750713][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 270.978945][T13944] Process accounting resumed [ 271.737666][T18470] xt_hashlimit: size too large, truncated to 1048576 [ 271.876007][T18484] loop9: detected capacity change from 0 to 512 [ 271.905244][T18484] EXT4-fs: Ignoring removed orlov option [ 271.930460][T18484] EXT4-fs: test_dummy_encryption option not supported [ 272.177334][ T5169] Process accounting resumed [ 272.803498][T18582] loop2: detected capacity change from 0 to 1024 [ 272.841482][T18582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.916801][T18594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5293'. [ 272.935551][T11635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.022228][T18598] IPv4: Oversized IP packet from 127.202.26.0 [ 276.034409][T18615] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5305'. [ 276.065835][T18615] bridge0: port 3(team0) entered disabled state [ 276.072437][T18615] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.079730][T18615] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.100085][T18612] netlink: 'syz.4.5304': attribute type 2 has an invalid length. [ 276.108991][T18617] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5305'. [ 276.231890][ T28] audit: type=1400 audit(1777664731.677:3182): avc: denied { listen } for pid=18616 comm="syz.2.5306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 276.251854][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.738333][T18640] loop9: detected capacity change from 0 to 128 [ 276.757646][T18640] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 276.795505][T18610] loop5: detected capacity change from 0 to 8192 [ 276.815132][T18640] ext4 filesystem being mounted at /550/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 276.923615][T18610] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 276.974456][T18610] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 276.984948][T18610] FAT-fs (loop5): Filesystem has been set read-only [ 276.996626][T18610] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 277.010613][T18610] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 277.045265][T18645] xt_hashlimit: size too large, truncated to 1048576 [ 277.290431][ T9602] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 277.739310][T18697] loop5: detected capacity change from 0 to 2048 [ 277.747068][T18697] EXT4-fs: Ignoring removed mblk_io_submit option [ 277.754392][T18697] EXT4-fs: Ignoring removed i_version option [ 277.780325][T18697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.813557][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.002283][T18727] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5349'. [ 278.930764][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5354'. [ 278.940777][T18737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5354'. [ 278.950212][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5354'. [ 278.959552][T18737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5354'. [ 278.987302][T18739] team0: Port device bridge0 added [ 279.014629][T18741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5356'. [ 280.086030][T18750] Process accounting resumed [ 280.389570][T18787] syzkaller1: entered promiscuous mode [ 280.406665][T18787] syzkaller1: entered allmulticast mode [ 280.439842][T18791] SELinux: failed to load policy [ 280.471344][ T28] audit: type=1326 audit(1777664735.917:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18794 comm="syz.9.5381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dd13cdd9 code=0x7ffc0000 [ 280.521351][ T28] audit: type=1326 audit(1777664735.947:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18794 comm="syz.9.5381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dd13cdd9 code=0x7ffc0000 [ 280.549319][ T28] audit: type=1326 audit(1777664735.947:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18794 comm="syz.9.5381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dd13cdd9 code=0x7ffc0000 [ 280.578534][ T28] audit: type=1326 audit(1777664735.947:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18794 comm="syz.9.5381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f65dd13cdd9 code=0x7ffc0000 [ 280.586628][T18803] ref_ctr_offset mismatch. inode: 0xa1e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 280.604852][ T28] audit: type=1400 audit(1777664735.947:3187): avc: denied { map } for pid=18794 comm="syz.9.5381" path="pipe:[25383]" dev="pipefs" ino=25383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 280.638674][ T28] audit: type=1400 audit(1777664735.947:3188): avc: denied { execute } for pid=18794 comm="syz.9.5381" path="pipe:[25383]" dev="pipefs" ino=25383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 280.662063][ T28] audit: type=1326 audit(1777664735.947:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18794 comm="syz.9.5381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dd13cdd9 code=0x7ffc0000 [ 280.690009][ T28] audit: type=1326 audit(1777664735.947:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18794 comm="syz.9.5381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dd13cdd9 code=0x7ffc0000 [ 280.716361][ T28] audit: type=1326 audit(1777664735.947:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18794 comm="syz.9.5381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dd13cdd9 code=0x7ffc0000 [ 280.944429][T18825] xt_hashlimit: size too large, truncated to 1048576 [ 280.957029][T18827] dummy0: entered allmulticast mode [ 280.966821][T18827] dummy0: left allmulticast mode [ 281.086667][T18836] bridge0: port 4(batadv1) entered blocking state [ 281.093555][T18836] bridge0: port 4(batadv1) entered disabled state [ 281.100434][T18836] batadv1: entered allmulticast mode [ 281.110827][T18836] batadv1: entered promiscuous mode [ 281.588032][ T9351] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 281.597353][ T9351] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 281.638706][T18877] netlink: 'syz.1.5415': attribute type 4 has an invalid length. [ 281.705778][T18877] netlink: 'syz.1.5415': attribute type 4 has an invalid length. [ 281.902284][T18894] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5432'. [ 282.305311][T18921] loop5: detected capacity change from 0 to 1024 [ 282.332863][T18921] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 282.346741][T18921] System zones: 0-1, 3-8 [ 282.358001][T18921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 282.382412][T18921] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.923739][T18979] netlink: 272 bytes leftover after parsing attributes in process `syz.2.5427'. [ 283.264858][ T9355] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm kworker/u8:16: lblock 0 mapped to illegal pblock 0 (length 6) [ 283.294928][ T9355] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 283.320652][ T9355] EXT4-fs (loop5): This should not happen!! Data will be lost [ 283.320652][ T9355] [ 283.363972][ T9355] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:16: lblock 8 mapped to illegal pblock 8 (length 8) [ 283.402315][ T9355] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 283.430249][ T9355] EXT4-fs (loop5): This should not happen!! Data will be lost [ 283.430249][ T9355] [ 283.468600][T13942] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 283.643410][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 283.766123][T19011] loop2: detected capacity change from 0 to 1024 [ 283.795741][T19011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.220666][T11635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.910426][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 284.910451][ T28] audit: type=1400 audit(1777664740.357:3214): avc: denied { unmount } for pid=11635 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 285.289334][T19134] loop9: detected capacity change from 0 to 512 [ 285.314235][T19134] EXT4-fs: Ignoring removed mblk_io_submit option [ 285.323830][T19134] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.344915][T19134] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.392558][T19134] ext4 filesystem being mounted at /578/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 285.513351][ T9602] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.575305][T19159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.585747][T19159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.642334][T19159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.673109][T19159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.600030][ T28] audit: type=1400 audit(1777664742.007:3215): avc: denied { bind } for pid=19228 comm="syz.5.5496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 286.638335][ T28] audit: type=1400 audit(1777664742.007:3216): avc: denied { listen } for pid=19228 comm="syz.5.5496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 286.659184][ T28] audit: type=1400 audit(1777664742.007:3217): avc: denied { write } for pid=19228 comm="syz.5.5496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 286.746195][T19240] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.100681][T19274] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5516'. [ 287.203916][T19288] loop5: detected capacity change from 0 to 512 [ 287.223242][T19288] ext4: Unknown parameter 'smackfstransmute' [ 287.335250][T19305] loop5: detected capacity change from 0 to 512 [ 287.354505][T19305] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 287.369891][T19305] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.5531: bad orphan inode 131083 [ 287.381093][T19305] loop5: lost filesystem error report for type 5 error -117 [ 287.381609][T19307] loop9: detected capacity change from 0 to 128 [ 287.387186][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 287.391907][T19305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.395344][ C1] EXT4-fs (loop5): initial error at time 1777664742: ext4_orphan_get:1423 [ 287.422415][ C1] EXT4-fs (loop5): last error at time 1777664742: ext4_orphan_get:1423 [ 287.430251][T19305] EXT4-fs (loop5): shut down requested (0) [ 287.443552][T19307] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 287.472004][T19307] ext4 filesystem being mounted at /595/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.500225][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.544592][ T9602] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.564180][T19318] netlink: 'syz.1.5535': attribute type 6 has an invalid length. [ 287.765780][T19334] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5541'. [ 287.779999][T19334] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5541'. [ 287.790141][T19334] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5541'. [ 287.799618][T19334] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5541'. [ 287.916164][T19340] loop9: detected capacity change from 0 to 8192 [ 287.973650][T19343] loop5: detected capacity change from 0 to 8192 [ 287.993617][ T28] audit: type=1400 audit(1777664743.437:3218): avc: denied { mounton } for pid=19341 comm="syz.5.5545" path="/408/bus/bus" dev="loop5" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 288.118433][T13942] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 288.133588][T13942] FAT-fs (loop5): Filesystem has been set read-only [ 288.148213][T19347] syz_tun: entered allmulticast mode [ 288.154485][T19346] syz_tun: left allmulticast mode [ 288.212953][T19352] loop9: detected capacity change from 0 to 128 [ 288.252261][ T28] audit: type=1326 audit(1777664743.697:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19354 comm="syz.5.5547" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fefa0e5cdd9 code=0x0 [ 288.298355][T19359] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 288.363752][T19367] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5555'. [ 288.463215][T19380] netlink: 'syz.4.5560': attribute type 1 has an invalid length. [ 288.482936][T19380] 8021q: adding VLAN 0 to HW filter on device bond5 [ 288.510226][T19380] bond5: (slave gretap1): making interface the new active one [ 288.518911][T19380] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 288.537087][T19383] loop2: detected capacity change from 0 to 512 [ 288.716231][T19397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.726005][T19397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.844949][ T28] audit: type=1326 audit(1777664744.287:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19409 comm="syz.1.5573" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f778af8cdd9 code=0x0 [ 289.195631][T19416] netlink: get zone limit has 8 unknown bytes [ 289.268574][T19424] loop2: detected capacity change from 0 to 512 [ 289.305149][T19424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 289.318014][T19424] ext4 filesystem being mounted at /533/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.429412][T11635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 289.506004][T19448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5588'. [ 289.524821][T19448] team1: entered promiscuous mode [ 289.530289][T19448] team1: entered allmulticast mode [ 289.535702][T19448] 8021q: adding VLAN 0 to HW filter on device team1 [ 289.544911][T19443] loop2: detected capacity change from 0 to 4096 [ 289.564285][T19443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.625075][T11635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.815702][T19474] vhci_hcd vhci_hcd.3: invalid port number 254 [ 289.816829][ T28] audit: type=1326 audit(1777664745.257:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.2.5600" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 289.822136][T19474] vhci_hcd vhci_hcd.3: GetPortErrorCount req not supported for USB 2.0 roothub [ 289.854091][ T28] audit: type=1326 audit(1777664745.277:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.2.5600" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 289.886378][ T28] audit: type=1326 audit(1777664745.277:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.2.5600" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 289.921648][ T28] audit: type=1326 audit(1777664745.257:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.2.5600" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 289.947310][ T28] audit: type=1326 audit(1777664745.277:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.2.5600" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 289.977355][T19481] netlink: 'syz.2.5601': attribute type 21 has an invalid length. [ 289.996748][T19481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5601'. [ 290.005863][ T28] audit: type=1326 audit(1777664745.277:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.2.5600" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 290.039570][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.039610][T19481] netlink: 'syz.2.5601': attribute type 21 has an invalid length. [ 290.039630][T19481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5601'. [ 290.040666][ T28] audit: type=1326 audit(1777664745.277:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.2.5600" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 290.052023][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.070916][ T28] audit: type=1326 audit(1777664745.277:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.2.5600" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 290.124365][ T28] audit: type=1326 audit(1777664745.277:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.2.5600" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 290.127706][ T1637] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.159341][ T28] audit: type=1326 audit(1777664745.277:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.2.5600" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 290.196573][ T1637] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.206122][ T28] audit: type=1326 audit(1777664745.277:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.2.5600" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 290.238894][ T28] audit: type=1326 audit(1777664745.277:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.2.5600" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 290.279674][ T28] audit: type=1326 audit(1777664745.277:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.2.5600" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 290.565202][T19531] loop5: detected capacity change from 0 to 128 [ 290.671638][T19542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5628'. [ 291.384625][T19601] netem: incorrect ge model size [ 291.407179][T19601] netem: change failed [ 291.436841][T19605] IPv6: sit2: Disabled Multicast RS [ 291.599055][T19610] loop2: detected capacity change from 0 to 128 [ 291.758018][T19610] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 291.804410][T19610] ext4 filesystem being mounted at /553/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.059597][T11635] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 292.232811][T19643] ip6gre0: Caught tx_queue_len zero misconfig [ 292.243533][T19643] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 292.719001][T19680] __nla_validate_parse: 3 callbacks suppressed [ 292.719022][T19680] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5688'. [ 292.773068][T19682] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5688'. [ 293.534967][T19730] bridge0: port 3(bond0) entered disabled state [ 293.541548][T19730] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.548871][T19730] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.708180][T19730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.733932][T19730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.054656][ T9355] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.086890][ T9355] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 294.116092][ T9355] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 294.154860][ T1637] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.181624][ T1637] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.185903][T19739] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5710'. [ 294.207282][ T1637] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 294.240172][ T1637] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.265577][ T1637] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.290193][ T1637] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 294.342704][ T1637] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.366543][ T1637] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.384159][ T1637] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 294.398430][ T9355] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.410990][ T9355] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 294.422115][ T9355] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 294.449915][ T1637] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.460680][ T1637] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.469529][ T1637] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 294.482658][ T9355] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.512246][ T9355] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 294.523239][ T9355] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 294.593498][ T9355] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.604239][ T9355] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 294.615780][ T9355] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 294.672640][T19712] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.681351][T19712] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.697792][T19712] bridge_slave_0: entered allmulticast mode [ 294.704371][T19712] bridge_slave_0: entered promiscuous mode [ 294.719296][T19712] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.726668][T19712] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.738448][T19712] bridge_slave_1: entered allmulticast mode [ 294.749470][T19712] bridge_slave_1: entered promiscuous mode [ 294.826605][T19712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.852864][T19712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.872407][ T9355] batadv1: left allmulticast mode [ 294.877686][ T9355] batadv1: left promiscuous mode [ 294.882822][ T9355] bridge0: port 4(batadv1) entered disabled state [ 294.896953][ T9355] vlan2: left allmulticast mode [ 294.902395][ T9355] dummy0: left allmulticast mode [ 294.907778][ T9355] vlan2: left promiscuous mode [ 294.912690][ T9355] dummy0: left promiscuous mode [ 294.918120][ T9355] bridge0: port 3(vlan2) entered disabled state [ 294.925233][ T9355] bridge_slave_1: left allmulticast mode [ 294.937796][ T9355] bridge_slave_1: left promiscuous mode [ 294.943733][ T9355] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.951940][ T9355] bridge_slave_0: left allmulticast mode [ 294.958814][ T9355] bridge_slave_0: left promiscuous mode [ 294.964682][ T9355] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.006330][ T9355] bond5 (unregistering): (slave gretap1): Releasing active interface [ 295.019506][ T9355] bond4 (unregistering): (slave geneve3): Releasing active interface [ 295.038805][ T9355] team0: Port device bridge0 removed [ 295.110743][ T9355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.126117][ T9355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.137858][ T9355] bond0 (unregistering): Released all slaves [ 295.154521][ T9355] bond1 (unregistering): (slave veth3): Releasing backup interface [ 295.170898][ T9355] veth3: left promiscuous mode [ 295.182355][ T9355] bond1 (unregistering): Released all slaves [ 295.199863][ T9355] bond2 (unregistering): (slave bond3): Releasing backup interface [ 295.215426][ T9355] bond3 (unregistering): left promiscuous mode [ 295.227830][ T9355] bond2 (unregistering): Released all slaves [ 295.247740][ T9355] bond3 (unregistering): Released all slaves [ 295.267495][ T9355] bond4 (unregistering): Released all slaves [ 295.282673][ T9355] bond5 (unregistering): Released all slaves [ 295.398838][T19712] team0: Port device team_slave_0 added [ 295.446638][ T9355] hsr_slave_0: left promiscuous mode [ 295.463732][ T9355] hsr_slave_1: left promiscuous mode [ 295.479252][ T9355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.497773][T19779] set_capacity_and_notify: 1 callbacks suppressed [ 295.497795][T19779] loop5: detected capacity change from 0 to 128 [ 295.513846][ T9355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.567916][T19785] loop9: detected capacity change from 0 to 512 [ 295.590826][T19785] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 295.612826][T19785] ext4 filesystem being mounted at /634/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.621710][T19779] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.651766][T19779] ext4 filesystem being mounted at /441/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.321203][ T9602] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 296.349104][T13942] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 296.388925][T19795] loop5: detected capacity change from 0 to 256 [ 296.422841][ T9355] team0 (unregistering): Port device team_slave_1 removed [ 296.446253][ T9355] team0 (unregistering): Port device team_slave_0 removed [ 296.483361][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 296.483393][ T28] audit: type=1400 audit(1777664751.927:3237): avc: denied { remount } for pid=19798 comm="syz.9.5728" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 296.521598][T19802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5729'. [ 296.619737][T19712] team0: Port device team_slave_1 added [ 296.659815][T19712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.673519][T19712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.703757][T19712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.728707][T19712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.747158][T19712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.774844][T19712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.853212][T19712] hsr_slave_0: entered promiscuous mode [ 296.866833][T19712] hsr_slave_1: entered promiscuous mode [ 296.878722][T19712] debugfs: 'hsr0' already exists in 'hsr' [ 296.885870][T19712] Cannot create hsr debugfs directory [ 296.928894][ T28] audit: type=1400 audit(1777664752.377:3238): avc: denied { unmount } for pid=9602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 297.032486][T19743] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.047744][T19743] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.065655][T19743] bridge_slave_0: entered allmulticast mode [ 297.073886][ T28] audit: type=1400 audit(1777664752.507:3239): avc: denied { unmount } for pid=9602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 297.115503][T19743] bridge_slave_0: entered promiscuous mode [ 297.138684][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 297.149046][T19743] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.166209][T19743] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.181233][T19743] bridge_slave_1: entered allmulticast mode [ 297.189134][ T28] audit: type=1400 audit(1777664752.627:3240): avc: denied { unmount } for pid=9602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 297.194993][T19743] bridge_slave_1: entered promiscuous mode [ 297.216458][ T28] audit: type=1400 audit(1777664752.667:3241): avc: denied { unmount } for pid=9602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 297.256976][ T9355] IPVS: stop unused estimator thread 0... [ 297.273535][T19743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.292062][T19743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.368169][T19743] team0: Port device team_slave_0 added [ 297.391259][T19743] team0: Port device team_slave_1 added [ 297.461205][T19743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.475962][T19743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.531153][T19743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.559162][T19743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.587982][T19743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.651150][T19743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.734449][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 297.751441][T19743] hsr_slave_0: entered promiscuous mode [ 297.771919][T19743] hsr_slave_1: entered promiscuous mode [ 297.787738][T19743] debugfs: 'hsr0' already exists in 'hsr' [ 297.793594][T19743] Cannot create hsr debugfs directory [ 297.877916][T19712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.925281][T19712] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.952842][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.960050][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.001270][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.008414][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.017757][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 298.054459][T19712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.120164][T19743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.146378][T19743] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.175749][ T9355] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.182921][ T9355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.219430][T19899] loop2: detected capacity change from 0 to 256 [ 298.235398][ T9355] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.242622][ T9355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.379406][T19712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.465297][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 298.561148][T19743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.734435][T19959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5749'. [ 298.747241][T19959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5749'. [ 298.772749][T19712] veth0_vlan: entered promiscuous mode [ 298.784346][T19712] veth1_vlan: entered promiscuous mode [ 298.833291][T19712] veth0_macvtap: entered promiscuous mode [ 298.850703][T19712] veth1_macvtap: entered promiscuous mode [ 298.892441][T19743] veth0_vlan: entered promiscuous mode [ 298.905596][T19712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.918817][T19743] veth1_vlan: entered promiscuous mode [ 298.927690][T19712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.965222][T19743] veth0_macvtap: entered promiscuous mode [ 298.976750][T19743] veth1_macvtap: entered promiscuous mode [ 299.012213][T19743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.037836][T19743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.333683][T19992] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.520434][T19986] loop2: detected capacity change from 0 to 32768 [ 299.532367][T19995] loop7: detected capacity change from 0 to 8192 [ 299.588814][T19986] loop2: p1 p3 < > [ 299.633661][T19995] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 299.666460][T19995] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 299.684302][T19995] FAT-fs (loop7): Filesystem has been set read-only [ 299.694714][T19995] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 299.706254][T19995] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 299.765429][T20004] SELinux: Context system_u:object is not valid (left unmapped). [ 299.790372][ T28] audit: type=1400 audit(1777664755.237:3242): avc: denied { relabelto } for pid=20002 comm="syz.5.5764" name="cgroup.procs" dev="cgroup" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 299.825862][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 299.837597][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 299.866969][ T28] audit: type=1400 audit(1777664755.237:3243): avc: denied { associate } for pid=20002 comm="syz.5.5764" name="cgroup.procs" dev="cgroup" ino=298 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 300.098903][T20011] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.106167][T20011] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.258089][T20011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.280364][T20011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.326164][T20029] loop7: detected capacity change from 0 to 256 [ 300.467960][T20036] loop2: detected capacity change from 0 to 1024 [ 300.519537][T20036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.594407][ T28] audit: type=1326 audit(1777664756.037:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20035 comm="syz.2.5775" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 300.722494][ T28] audit: type=1326 audit(1777664756.067:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20035 comm="syz.2.5775" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 300.758833][T11635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.797615][ T28] audit: type=1326 audit(1777664756.067:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20035 comm="syz.2.5775" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7ffb949bcdd9 code=0x7ffc0000 [ 300.893329][T20068] netlink: 'syz.7.5789': attribute type 2 has an invalid length. [ 301.415841][T20080] xfrm0 speed is unknown, defaulting to 1000 [ 301.423901][T20080] xfrm0 speed is unknown, defaulting to 1000 [ 301.440414][T20080] xfrm0 speed is unknown, defaulting to 1000 [ 301.601395][ T5160] xfrm0 speed is unknown, defaulting to 1000 [ 301.607549][T20080] infiniband syz0: set down [ 301.612767][T20080] infiniband syz0: added xfrm0 [ 301.644697][T20088] loop5: detected capacity change from 0 to 128 [ 301.657766][T20080] RDS/IB: syz0: added [ 301.666822][T20080] smc: adding ib device syz0 with port count 1 [ 301.667052][T20088] bio_check_eod: 103 callbacks suppressed [ 301.667091][T20088] syz.5.5795: attempt to access beyond end of device [ 301.667091][T20088] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 301.697632][T20080] smc: ib device syz0 port 1 has no pnetid [ 301.697757][T20088] syz.5.5795: attempt to access beyond end of device [ 301.697757][T20088] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 301.717412][T20088] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 301.725940][T20088] syz.5.5795: attempt to access beyond end of device [ 301.725940][T20088] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 301.739846][T20088] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 301.744018][ T1038] xfrm0 speed is unknown, defaulting to 1000 [ 301.748793][T20088] syz.5.5795: attempt to access beyond end of device [ 301.748793][T20088] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 301.769427][T20088] syz.5.5795: attempt to access beyond end of device [ 301.769427][T20088] loop5: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 301.783811][T20088] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 301.792398][T20088] syz.5.5795: attempt to access beyond end of device [ 301.792398][T20088] loop5: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 301.806055][T20088] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 301.809924][T20080] xfrm0 speed is unknown, defaulting to 1000 [ 301.815348][T20088] syz.5.5795: attempt to access beyond end of device [ 301.815348][T20088] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 301.841224][T20088] syz.5.5795: attempt to access beyond end of device [ 301.841224][T20088] loop5: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 301.856362][T20088] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 301.865464][T20088] syz.5.5795: attempt to access beyond end of device [ 301.865464][T20088] loop5: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 301.898436][T20088] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 301.914331][T20088] syz.5.5795: attempt to access beyond end of device [ 301.914331][T20088] loop5: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 301.930117][T20088] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 301.938783][T20088] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 301.948688][T20088] Buffer I/O error on dev loop5, logical block 111, lost async page write [ 301.957680][T20088] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 302.069634][T20080] xfrm0 speed is unknown, defaulting to 1000 [ 302.135488][T20080] xfrm0 speed is unknown, defaulting to 1000 [ 302.222660][T20080] xfrm0 speed is unknown, defaulting to 1000 [ 302.330576][T20080] xfrm0 speed is unknown, defaulting to 1000 [ 302.444967][T20113] xfrm0 speed is unknown, defaulting to 1000 [ 302.460013][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 302.460046][ T28] audit: type=1326 audit(1777664757.907:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20111 comm="syz.5.5807" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefa0e5cdd9 code=0x0 [ 302.551430][T20080] xfrm0 speed is unknown, defaulting to 1000 [ 303.234816][T20114] syz.8.5808 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 303.264135][T20114] CPU: 0 UID: 0 PID: 20114 Comm: syz.8.5808 Tainted: G W syzkaller #0 PREEMPT(full) [ 303.264176][T20114] Tainted: [W]=WARN [ 303.264183][T20114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 303.264197][T20114] Call Trace: [ 303.264203][T20114] [ 303.264265][T20114] __dump_stack+0x1d/0x30 [ 303.264298][T20114] dump_stack_lvl+0x95/0xd0 [ 303.264327][T20114] dump_stack+0x15/0x1b [ 303.264367][T20114] dump_header+0x80/0x240 [ 303.264474][T20114] oom_kill_process+0x295/0x350 [ 303.264506][T20114] out_of_memory+0x97d/0xb80 [ 303.264607][T20114] try_charge_memcg+0x62f/0xa10 [ 303.264659][T20114] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 303.264759][T20114] __alloc_frozen_pages_noprof+0x18a/0x350 [ 303.264793][T20114] alloc_pages_mpol+0xb3/0x260 [ 303.264822][T20114] alloc_pages_noprof+0x8f/0x140 [ 303.264869][T20114] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 303.264910][T20114] __kvmalloc_node_noprof+0x3d4/0x640 [ 303.265003][T20114] ? futex_hash_allocate+0x190/0x9a0 [ 303.265096][T20114] ? futex_hash_allocate+0x190/0x9a0 [ 303.265134][T20114] futex_hash_allocate+0x190/0x9a0 [ 303.265175][T20114] ? cap_task_prctl+0x13f/0x6b0 [ 303.265314][T20114] futex_hash_prctl+0xd8/0xf0 [ 303.265352][T20114] __se_sys_prctl+0x4f4/0x1400 [ 303.265450][T20114] __x64_sys_prctl+0x67/0x80 [ 303.265492][T20114] x64_sys_call+0x2533/0x3020 [ 303.265520][T20114] do_syscall_64+0x12c/0x3b0 [ 303.265551][T20114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.265647][T20114] RIP: 0033:0x7fa3cf3dcdd9 [ 303.265668][T20114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.265759][T20114] RSP: 002b:00007fa3cde37028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 303.265781][T20114] RAX: ffffffffffffffda RBX: 00007fa3cf655fa0 RCX: 00007fa3cf3dcdd9 [ 303.265806][T20114] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 303.265822][T20114] RBP: 00007fa3cf472d69 R08: 0000000000000000 R09: 0000000000000000 [ 303.265892][T20114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.265909][T20114] R13: 00007fa3cf656038 R14: 00007fa3cf655fa0 R15: 00007ffd02020018 [ 303.265936][T20114] [ 303.488292][T20114] memory: usage 307200kB, limit 307200kB, failcnt 155 [ 303.495365][T20114] memory+swap: usage 307320kB, limit 9007199254740988kB, failcnt 0 [ 303.503452][T20114] kmem: usage 307136kB, limit 9007199254740988kB, failcnt 0 [ 303.510982][T20114] Memory cgroup stats for /syz8: [ 303.511209][T20114] cache 0 [ 303.519193][T20114] rss 4096 [ 303.522251][T20114] shmem 0 [ 303.525209][T20114] mapped_file 0 [ 303.528729][T20114] dirty 0 [ 303.531699][T20114] writeback 4096 [ 303.535284][T20114] workingset_refault_anon 0 [ 303.540037][T20114] workingset_refault_file 0 [ 303.544793][T20114] swap 122880 [ 303.548197][T20114] swapcached 188416 [ 303.552081][T20114] pgpgin 5191 [ 303.555392][T20114] pgpgout 5175 [ 303.558891][T20114] pgfault 9205 [ 303.562344][T20114] pgmajfault 0 [ 303.565745][T20114] inactive_anon 20480 [ 303.569842][T20114] active_anon 0 [ 303.573408][T20114] inactive_file 0 [ 303.577059][T20114] active_file 0 [ 303.581142][T20114] unevictable 0 [ 303.584914][T20114] hierarchical_memory_limit 314572800 [ 303.590434][T20114] hierarchical_memsw_limit 9223372036854771712 [ 303.596683][T20114] total_cache 0 [ 303.600231][T20114] total_rss 4096 [ 303.603879][T20114] total_shmem 0 [ 303.607425][T20114] total_mapped_file 0 [ 303.611545][T20114] total_dirty 0 [ 303.615097][T20114] total_writeback 4096 [ 303.619260][T20114] total_workingset_refault_anon 0 [ 303.624365][T20114] total_workingset_refault_file 0 [ 303.629461][T20114] total_swap 122880 [ 303.634239][T20114] total_swapcached 188416 [ 303.639064][T20114] total_pgpgin 5191 [ 303.642941][T20114] total_pgpgout 5175 [ 303.646875][T20114] total_pgfault 9205 [ 303.651014][T20114] total_pgmajfault 0 [ 303.656614][T20114] total_inactive_anon 20480 [ 303.661205][T20114] total_active_anon 0 [ 303.665253][T20114] total_inactive_file 0 [ 303.669653][T20114] total_active_file 0 [ 303.673944][T20114] total_unevictable 0 [ 303.680345][T20114] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.5808,pid=20112,uid=0 [ 303.695823][T20114] Memory cgroup out of memory: Killed process 20112 (syz.8.5808) total-vm:96144kB, anon-rss:1232kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 303.939140][T20150] xfrm0 speed is unknown, defaulting to 1000 [ 304.108470][T20168] loop2: detected capacity change from 0 to 256 [ 305.217805][T20211] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5849'. [ 305.447605][ T28] audit: type=1400 audit(1777664760.897:3255): avc: denied { bind } for pid=20219 comm="syz.7.5854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 305.755932][T20250] netlink: 35 bytes leftover after parsing attributes in process `syz.5.5864'. [ 305.770747][T20250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5864'. [ 305.857497][T20257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5867'. [ 305.879730][T20257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5867'. [ 307.485027][T20272] xfrm0 speed is unknown, defaulting to 1000 [ 307.809405][T20288] loop2: detected capacity change from 0 to 512 [ 307.863416][T20288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 307.893731][T20288] ext4 filesystem being mounted at /622/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.908586][T20294] loop7: detected capacity change from 0 to 512 [ 307.928711][T20294] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 307.955469][T20294] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.5877: iget: bad i_size value: 38620345925642 [ 307.958348][T11635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 307.968623][T20294] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 307.981538][T20294] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.5877: couldn't read orphan inode 15 (err -117) [ 307.990893][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 307.990936][ C0] EXT4-fs (loop7): initial error at time 1777664763: ext4_orphan_get:1397: inode 15 [ 307.990971][ C0] EXT4-fs (loop7): last error at time 1777664763: ext4_orphan_get:1397: inode 15 [ 308.028880][T20294] loop7: lost filesystem error report for type 5 error -117 [ 308.032103][T20294] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.231998][T20301] loop8: detected capacity change from 0 to 2048 [ 308.245573][T20301] EXT4-fs: Ignoring removed i_version option [ 308.256029][T20303] loop5: detected capacity change from 0 to 128 [ 308.267684][T19743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.269514][T20301] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.277315][T20303] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 308.304458][T20303] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 308.417940][T18289] bond0: (slave syz_tun): Releasing backup interface [ 308.445916][ T1637] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 308.472642][T19712] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.563630][ T3483] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.588638][ T3483] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.609456][ T3483] netdevsim netdevsim9 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 308.672084][ T3483] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.697507][ T3483] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.739323][ T3483] netdevsim netdevsim9 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 308.765850][ T28] audit: type=1326 audit(1777664764.207:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.8.5895" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cf3dcdd9 code=0x7ffc0000 [ 308.855310][ T28] audit: type=1326 audit(1777664764.207:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.8.5895" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cf3dcdd9 code=0x7ffc0000 [ 308.857326][T20338] loop5: detected capacity change from 0 to 512 [ 308.888852][T20338] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 308.906342][T20338] EXT4-fs (loop5): 1 truncate cleaned up [ 308.912493][T20338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.926431][ T28] audit: type=1326 audit(1777664764.207:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.8.5895" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cf3dcdd9 code=0x7ffc0000 [ 308.952807][ T28] audit: type=1326 audit(1777664764.207:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.8.5895" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cf3dcdd9 code=0x7ffc0000 [ 308.970199][ T3483] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.978480][ T28] audit: type=1326 audit(1777664764.237:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.8.5895" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fa3cf3dcdd9 code=0x7ffc0000 [ 309.013870][ T28] audit: type=1326 audit(1777664764.237:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.8.5895" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cf3dcdd9 code=0x7ffc0000 [ 309.072083][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.089948][ T3483] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.100416][ T3483] netdevsim netdevsim9 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 309.112057][ T28] audit: type=1326 audit(1777664764.237:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.8.5895" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cf3dcdd9 code=0x7ffc0000 [ 309.144397][ T28] audit: type=1326 audit(1777664764.237:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.8.5895" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cf3dcdd9 code=0x7ffc0000 [ 309.182447][ T28] audit: type=1326 audit(1777664764.237:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.8.5895" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cf3dcdd9 code=0x7ffc0000 [ 309.234947][ T3483] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.256447][ T3483] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.273256][ T28] audit: type=1326 audit(1777664764.237:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.8.5895" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa3cf3dcdd9 code=0x7ffc0000 [ 309.302321][ T3483] netdevsim netdevsim9 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 309.409118][T20333] xfrm0 speed is unknown, defaulting to 1000 [ 309.419236][ T3483] bridge_slave_1: left allmulticast mode [ 309.432690][ T3483] bridge_slave_1: left promiscuous mode [ 309.451400][ T3483] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.473077][ T3483] bridge_slave_0: left allmulticast mode [ 309.481203][ T3483] bridge_slave_0: left promiscuous mode [ 309.495143][ T3483] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.509739][ T3483] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 309.698117][ T3483] batman_adv: batadv0: Removing interface: ip6gretap1 [ 309.741148][T20378] loop8: detected capacity change from 0 to 128 [ 309.758453][T20378] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 309.769165][ T3483] erspan0 (unregistering): left promiscuous mode [ 309.782321][ T3483] gretap0 (unregistering): left promiscuous mode [ 309.904446][ T3483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.915976][ T3483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.926649][ T3483] bond0 (unregistering): Released all slaves [ 309.982196][ T3483] IPVS: stopping backup sync thread 17352 ... [ 310.058506][ T3483] veth1_to_hsr: left promiscuous mode [ 310.070647][ T3483] hsr_slave_0: left promiscuous mode [ 310.076544][ T3483] hsr_slave_1: left promiscuous mode [ 310.082670][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.091562][ T3483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.101196][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.109093][ T3483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.122288][ T3483] veth1_macvtap: left promiscuous mode [ 310.128360][ T3483] veth0_macvtap: left promiscuous mode [ 310.134344][ T3483] veth1_vlan: left promiscuous mode [ 310.140121][ T3483] veth0_vlan: left promiscuous mode [ 310.215169][ T3483] team0 (unregistering): Port device team_slave_1 removed [ 310.225761][ T3483] team0 (unregistering): Port device team_slave_0 removed [ 310.320180][T20333] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.327875][T20333] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.335366][T20333] bridge_slave_0: entered allmulticast mode [ 310.342467][T20333] bridge_slave_0: entered promiscuous mode [ 310.349801][T20333] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.357397][T20333] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.371871][T20333] bridge_slave_1: entered allmulticast mode [ 310.386722][T20333] bridge_slave_1: entered promiscuous mode [ 310.411836][T20333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.419726][T20411] loop5: detected capacity change from 0 to 512 [ 310.426018][T20333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.431306][T20411] EXT4-fs: Ignoring removed mblk_io_submit option [ 310.448742][T20411] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.5913: corrupted in-inode xattr: e_value size too large [ 310.463319][T20411] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 310.465928][T20333] team0: Port device team_slave_0 added [ 310.475288][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 310.475312][ C1] EXT4-fs (loop5): initial error at time 1777664765: ext4_iget_extra_inode:5128: inode 15 [ 310.475343][ C1] EXT4-fs (loop5): last error at time 1777664765: ext4_iget_extra_inode:5128: inode 15 [ 310.487028][T20411] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.5913: couldn't read orphan inode 15 (err -117) [ 310.500524][T20333] team0: Port device team_slave_1 added [ 310.520303][T20411] loop5: lost filesystem error report for type 5 error -117 [ 310.525631][T20411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.546388][T20333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.553430][T20333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.579636][T20333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.591224][T20333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.598351][T20333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.624687][T20333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.626703][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.669060][T20333] hsr_slave_0: entered promiscuous mode [ 310.675483][T20333] hsr_slave_1: entered promiscuous mode [ 310.714695][ T3483] IPVS: stop unused estimator thread 0... [ 310.985347][T20429] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5920'. [ 311.009955][T20431] loop7: detected capacity change from 0 to 128 [ 311.034151][ T9359] bio_check_eod: 32 callbacks suppressed [ 311.034170][ T9359] kworker/u8:18: attempt to access beyond end of device [ 311.034170][ T9359] loop7: rw=1, sector=145, nr_sectors = 6 limit=128 [ 311.078088][ T5171] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 311.095750][ T5171] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 311.849169][T20453] xfrm0 speed is unknown, defaulting to 1000 [ 312.648267][T20370] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.744817][T20333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.775241][T20333] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.786127][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.793341][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.806831][T20507] loop5: detected capacity change from 0 to 1024 [ 312.815080][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.822326][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.835506][T20507] EXT4-fs: Ignoring removed nobh option [ 312.857981][T20507] EXT4-fs: Ignoring removed bh option [ 312.885685][T20507] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 312.910995][T20507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.020091][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.096728][ T3021] 8021q: adding VLAN 0 to HW filter on device eth25 [ 313.195673][T20333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.646752][T20333] veth0_vlan: entered promiscuous mode [ 313.673184][T20333] veth1_vlan: entered promiscuous mode [ 313.733563][T20333] veth0_macvtap: entered promiscuous mode [ 313.760546][T20333] veth1_macvtap: entered promiscuous mode [ 313.764820][T20498] loop2: detected capacity change from 0 to 8192 [ 313.792199][T20333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.834976][T20333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.860429][T20498] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 313.903274][T20498] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 313.925562][T20498] FAT-fs (loop2): Filesystem has been set read-only [ 313.955254][T20498] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 313.979923][T20498] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 314.745952][T20602] ip6gre1: entered promiscuous mode [ 314.761410][T20602] ip6gre1: entered allmulticast mode [ 314.911434][T20623] netlink: 'syz.5.5963': attribute type 10 has an invalid length. [ 314.944095][T20623] netdevsim netdevsim5 netdevsim2: left promiscuous mode [ 314.976737][T20623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.992784][T20623] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 315.002662][T20623] bond0: (slave netdevsim2): Enslaving as an active interface with a down link [ 315.119976][T20640] xfrm0 speed is unknown, defaulting to 1000 [ 315.163417][T20648] loop2: detected capacity change from 0 to 1024 [ 315.173186][T20648] EXT4-fs: Ignoring removed orlov option [ 315.185723][T20648] EXT4-fs: Ignoring removed nobh option [ 315.200906][T20648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.405552][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 315.405567][ T28] audit: type=1400 audit(1777664770.847:3348): avc: denied { unlink } for pid=11635 comm="syz-executor" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 315.488152][T20668] netlink: 'syz.5.5970': attribute type 13 has an invalid length. [ 315.504161][T20668] netlink: 'syz.5.5970': attribute type 17 has an invalid length. [ 315.512673][T20668] lo: left promiscuous mode [ 315.521907][T20668] tunl0: left promiscuous mode [ 315.540543][T20668] gre0: left promiscuous mode [ 315.555989][T20668] gretap0: left promiscuous mode [ 315.592735][T20668] erspan0: left promiscuous mode [ 315.620491][T20668] ip_vti0: left promiscuous mode [ 315.634780][T20668] ip6_vti0: left promiscuous mode [ 315.653625][T20668] ip6tnl0: left promiscuous mode [ 315.667991][T20668] ip6gre0: left promiscuous mode [ 315.683306][T20668] ip6gretap0: left promiscuous mode [ 315.711905][T20668] bridge0: left promiscuous mode [ 315.725711][T20668] vcan0: left promiscuous mode [ 315.740937][T20668] bond0: left promiscuous mode [ 315.752006][T20668] netdevsim netdevsim5 netdevsim2: left promiscuous mode [ 315.772252][T20668] team0: left promiscuous mode [ 315.787539][T20668] dummy0: left promiscuous mode [ 315.802285][T20668] nlmon0: left promiscuous mode [ 315.816889][T20668] batadv0: left promiscuous mode [ 315.834342][T20668] vxcan0: left promiscuous mode [ 315.847768][T20668] vxcan1: left promiscuous mode [ 315.862302][T20668] wg0: left promiscuous mode [ 315.876719][T20668] wg1: left promiscuous mode [ 315.916530][T20668] veth0_to_bridge: left promiscuous mode [ 315.920294][T20673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5971'. [ 315.961824][T20668] veth1_to_bridge: left promiscuous mode [ 316.007485][T20668] veth0_to_bond: left promiscuous mode [ 316.034061][T20668] bond_slave_0: left promiscuous mode [ 316.036985][T20678] loop7: detected capacity change from 0 to 128 [ 316.053119][T20668] veth1_to_bond: left promiscuous mode [ 316.060531][T20668] bond_slave_1: left promiscuous mode [ 316.081124][T20668] veth0_to_team: left promiscuous mode [ 316.102825][T20668] team_slave_0: left promiscuous mode [ 316.103406][T12821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.114417][ T5173] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 316.144646][ T5173] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 316.147388][T20668] veth1_to_team: left promiscuous mode [ 316.174387][T20678] syz.7.5975: attempt to access beyond end of device [ 316.174387][T20678] loop7: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 316.190863][T20668] team_slave_1: left promiscuous mode [ 316.203184][T20668] veth0_to_batadv: left promiscuous mode [ 316.219875][T20668] batadv_slave_0: left promiscuous mode [ 316.238366][T20678] syz.7.5975: attempt to access beyond end of device [ 316.238366][T20678] loop7: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 316.253952][T20668] veth1_to_batadv: left promiscuous mode [ 316.262101][T20668] batadv_slave_1: left promiscuous mode [ 316.270100][T20678] buffer_io_error: 18 callbacks suppressed [ 316.270243][T20678] Buffer I/O error on dev loop7, logical block 79, lost async page write [ 316.286623][T20668] xfrm0: left promiscuous mode [ 316.294185][T20668] veth0_to_hsr: left promiscuous mode [ 316.304039][T20678] syz.7.5975: attempt to access beyond end of device [ 316.304039][T20678] loop7: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 316.321556][T20668] veth1_to_hsr: left promiscuous mode [ 316.331706][T20668] veth1_virt_wifi: left promiscuous mode [ 316.339397][T20668] veth0_virt_wifi: left promiscuous mode [ 316.345805][T20678] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 316.375349][T20668] vlan0: left promiscuous mode [ 316.375788][T20678] syz.7.5975: attempt to access beyond end of device [ 316.375788][T20678] loop7: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 316.393916][T20668] macvlan0: left promiscuous mode [ 316.406121][T20668] macvlan1: left promiscuous mode [ 316.416213][T20668] ipvlan0: left promiscuous mode [ 316.417362][T20678] syz.7.5975: attempt to access beyond end of device [ 316.417362][T20678] loop7: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 316.436343][T20678] Buffer I/O error on dev loop7, logical block 83, lost async page write [ 316.448245][T20678] syz.7.5975: attempt to access beyond end of device [ 316.448245][T20678] loop7: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 316.451467][T20668] ipvlan1: left promiscuous mode [ 316.465363][T20678] Buffer I/O error on dev loop7, logical block 84, lost async page write [ 316.496392][T20668] macvtap0: left promiscuous mode [ 316.503363][T20678] syz.7.5975: attempt to access beyond end of device [ 316.503363][T20678] loop7: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 316.526033][T20668] macsec0: left promiscuous mode [ 316.536955][T20668] geneve0: left promiscuous mode [ 316.544949][T20678] syz.7.5975: attempt to access beyond end of device [ 316.544949][T20678] loop7: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 316.562643][T20668] geneve1: left promiscuous mode [ 316.571190][T20678] Buffer I/O error on dev loop7, logical block 95, lost async page write [ 316.574545][T20668] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 316.583366][T20678] syz.7.5975: attempt to access beyond end of device [ 316.583366][T20678] loop7: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 316.596218][T20684] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5978'. [ 316.602206][T20678] Buffer I/O error on dev loop7, logical block 96, lost async page write [ 316.620106][T20668] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 316.620586][T20678] syz.7.5975: attempt to access beyond end of device [ 316.620586][T20678] loop7: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 316.652466][T20668] netdevsim netdevsim5 netdevsim3: left promiscuous mode [ 316.652976][T20678] Buffer I/O error on dev loop7, logical block 99, lost async page write [ 316.669477][T20678] Buffer I/O error on dev loop7, logical block 100, lost async page write [ 316.674375][T20668] @: left promiscuous mode [ 316.684948][T20678] Buffer I/O error on dev loop7, logical block 111, lost async page write [ 316.689341][T20668] ip6tnl1: left promiscuous mode [ 316.695716][T20678] Buffer I/O error on dev loop7, logical block 112, lost async page write [ 316.702491][T20668] vti60: left promiscuous mode [ 316.713865][T20668] ip6tnl2: left promiscuous mode [ 316.720824][T20668] bond1: left promiscuous mode [ 316.729723][T20668] veth0: left promiscuous mode [ 316.736637][T20668] veth1: left promiscuous mode [ 316.743135][T20668] geneve2: left promiscuous mode [ 316.750088][T20668] ipip0: left promiscuous mode [ 316.756173][T20668] bond2: left promiscuous mode [ 316.763765][T20668] geneve3: left promiscuous mode [ 316.769933][T20668] gre1: left promiscuous mode [ 316.781332][ T3021] 8021q: adding VLAN 0 to HW filter on device eth26 [ 316.810589][ T9360] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.817749][ T9360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.057022][T20691] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5981'. [ 317.218198][T20723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5992'. [ 317.224305][ T28] audit: type=1400 audit(1777664772.667:3349): avc: denied { connect } for pid=20724 comm="syz.7.5993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 317.246169][T20723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5992'. [ 317.423794][ T3021] 8021q: adding VLAN 0 to HW filter on device eth27 [ 317.451987][T20704] xfrm0 speed is unknown, defaulting to 1000 [ 317.484555][ T9355] bond0: left allmulticast mode [ 317.496489][ T9355] bond_slave_0: left allmulticast mode [ 317.512708][ T9355] bond_slave_1: left allmulticast mode [ 317.528432][ T9355] bridge0: port 3(bond0) entered disabled state [ 317.547745][ T9355] bridge_slave_1: left allmulticast mode [ 317.565073][ T9355] bridge_slave_1: left promiscuous mode [ 317.573012][ T9355] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.583539][ T9355] bridge_slave_0: left allmulticast mode [ 317.591647][ T9355] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.680976][ T9355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.699638][ T9355] bond_slave_0: left promiscuous mode [ 317.716147][ T9355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.730142][ T9355] bond_slave_1: left promiscuous mode [ 317.746184][ T9355] bond0 (unregistering): Released all slaves [ 317.759090][ T9355] bond1 (unregistering): Released all slaves [ 317.784821][T20748] xfrm0 speed is unknown, defaulting to 1000 [ 317.930530][ T365] smc: removing ib device syz0 [ 318.142559][ T3021] 8021q: adding VLAN 0 to HW filter on device eth28 [ 318.201915][T20704] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.219376][T20704] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.235170][T20704] bridge_slave_0: entered allmulticast mode [ 318.256535][T20704] bridge_slave_0: entered promiscuous mode [ 318.275631][T20704] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.302446][T20704] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.316892][T20776] xt_hashlimit: size too large, truncated to 1048576 [ 318.330997][T20704] bridge_slave_1: entered allmulticast mode [ 318.362238][T20704] bridge_slave_1: entered promiscuous mode [ 318.441086][T20704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.473125][T20704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.584552][T20704] team0: Port device team_slave_0 added [ 318.605624][T20704] team0: Port device team_slave_1 added [ 318.660943][T20704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.671893][T20704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.710520][T20704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.734868][T20704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.744344][T20704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.792099][T20704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.843653][T20808] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6015'. [ 318.860874][ T9355] hsr_slave_0: left promiscuous mode [ 318.872335][ T9355] hsr_slave_1: left promiscuous mode [ 318.878918][ T9355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.886576][ T9355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.953974][ T9355] team0 (unregistering): Port device team_slave_1 removed [ 318.985198][ T9355] team0 (unregistering): Port device team_slave_0 removed [ 319.077707][T20824] loop3: detected capacity change from 0 to 512 [ 319.103957][T20824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.153420][T20824] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.223276][T20704] hsr_slave_0: entered promiscuous mode [ 319.270457][T20704] hsr_slave_1: entered promiscuous mode [ 319.290300][T20704] debugfs: 'hsr0' already exists in 'hsr' [ 319.301734][T20704] Cannot create hsr debugfs directory [ 319.323381][T20824] ================================================================== [ 319.331547][T20824] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 319.339594][T20824] [ 319.341963][T20824] write to 0xffff8881083d77f4 of 4 bytes by task 20833 on cpu 1: [ 319.349755][T20824] xas_set_mark+0x12b/0x140 [ 319.354297][T20824] tag_pages_for_writeback+0xe3/0x2e0 [ 319.359704][T20824] ext4_do_writepages+0x6a8/0x2770 [ 319.364852][T20824] ext4_writepages+0x18f/0x320 [ 319.369645][T20824] do_writepages+0x1c6/0x310 [ 319.374273][T20824] file_write_and_wait_range+0x178/0x2f0 [ 319.380027][T20824] mmb_fsync_noflush+0x48/0x140 [ 319.384903][T20824] ext4_sync_file+0x1f1/0x6b0 [ 319.389601][T20824] vfs_fsync_range+0xc5/0xe0 [ 319.394219][T20824] ext4_buffered_write_iter+0x447/0x4c0 [ 319.399805][T20824] ext4_file_write_iter+0x380/0xfa0 [ 319.405052][T20824] iter_file_splice_write+0x6c4/0xa80 [ 319.410722][T20824] direct_splice_actor+0x156/0x2a0 [ 319.415872][T20824] splice_direct_to_actor+0x311/0x670 [ 319.421321][T20824] do_splice_direct+0x119/0x1a0 [ 319.426222][T20824] do_sendfile+0x382/0x650 [ 319.430770][T20824] __x64_sys_sendfile64+0x105/0x150 [ 319.436015][T20824] x64_sys_call+0x2dc4/0x3020 [ 319.440816][T20824] do_syscall_64+0x12c/0x3b0 [ 319.445440][T20824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.451385][T20824] [ 319.453731][T20824] read to 0xffff8881083d77f4 of 4 bytes by task 20824 on cpu 0: [ 319.461384][T20824] file_write_and_wait_range+0x130/0x2f0 [ 319.467049][T20824] mmb_fsync_noflush+0x48/0x140 [ 319.471923][T20824] ext4_sync_file+0x1f1/0x6b0 [ 319.476626][T20824] vfs_fsync_range+0xc5/0xe0 [ 319.481236][T20824] ext4_buffered_write_iter+0x447/0x4c0 [ 319.486830][T20824] ext4_file_write_iter+0x380/0xfa0 [ 319.492150][T20824] iter_file_splice_write+0x6c4/0xa80 [ 319.497651][T20824] direct_splice_actor+0x156/0x2a0 [ 319.502843][T20824] splice_direct_to_actor+0x311/0x670 [ 319.508273][T20824] do_splice_direct+0x119/0x1a0 [ 319.513172][T20824] do_sendfile+0x382/0x650 [ 319.517643][T20824] __x64_sys_sendfile64+0x105/0x150 [ 319.522880][T20824] x64_sys_call+0x2dc4/0x3020 [ 319.527594][T20824] do_syscall_64+0x12c/0x3b0 [ 319.532226][T20824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.538151][T20824] [ 319.540489][T20824] value changed: 0x02000021 -> 0x04000021 [ 319.546240][T20824] [ 319.548584][T20824] Reported by Kernel Concurrency Sanitizer on: [ 319.554773][T20824] CPU: 0 UID: 0 PID: 20824 Comm: syz.3.6018 Tainted: G W syzkaller #0 PREEMPT(full) [ 319.565962][T20824] Tainted: [W]=WARN [ 319.569795][T20824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.579891][T20824] ================================================================== [ 319.596560][ T3021] 8021q: adding VLAN 0 to HW filter on device eth29 [ 319.764181][ T9355] IPVS: stop unused estimator thread 0... [ 319.899354][T20704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.924980][T20704] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.958655][ T9360] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.965796][ T9360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.995152][ T9360] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.002328][ T9360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.035715][ T3021] 8021q: adding VLAN 0 to HW filter on device eth30 [ 320.140053][T20333] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.254545][T20704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.277038][ T3021] 8021q: adding VLAN 0 to HW filter on device eth31 [ 320.400508][T20704] veth0_vlan: entered promiscuous mode [ 320.409549][T20704] veth1_vlan: entered promiscuous mode [ 320.428868][T20704] veth0_macvtap: entered promiscuous mode [ 320.437045][T20704] veth1_macvtap: entered promiscuous mode [ 320.451216][T20704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.464193][T20704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.473962][ T3021] 8021q: adding VLAN 0 to HW filter on device eth32