last executing test programs: 6m48.774266521s ago: executing program 32 (id=640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a818800000000000001000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 6m7.288895092s ago: executing program 33 (id=1882): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x26008884}, 0x4054) 5m16.291588501s ago: executing program 34 (id=3175): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5m3.321224451s ago: executing program 35 (id=3134): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e25, 0x31e, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 3m15.743890752s ago: executing program 36 (id=5553): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000000) r0 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x1, 0x279}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m55.935116545s ago: executing program 37 (id=5920): socket$can_bcm(0x1d, 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') fchdir(r0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m46.075826155s ago: executing program 38 (id=6145): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_TOS={0x5, 0x9, 0xfb}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m39.679607482s ago: executing program 3 (id=6285): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xabb26a676116668a, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00203003d000b08d25a80648c7494f90324fc600b0002400a0000", 0x1b}], 0x1}, 0x0) 2m39.531705675s ago: executing program 3 (id=6291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 2m39.303750081s ago: executing program 3 (id=6299): close(0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 2m39.298602931s ago: executing program 3 (id=6301): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x40, &(0x7f0000000480)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@errors_remount}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noauto_da_alloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resgid, 0x32}]}, 0x0, 0x4e0, &(0x7f0000001a40)="$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") mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 2m39.157787724s ago: executing program 3 (id=6308): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x3, 0x0, 0x1000}, {0x2}], 0x2) semtimedop(r0, &(0x7f0000000080)=[{0x1, 0x8000}], 0x1, 0x0) semop(r0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) 2m38.88768115s ago: executing program 3 (id=6322): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x44840) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000940)=""/211, 0xd3) 2m38.88344778s ago: executing program 39 (id=6322): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x44840) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000940)=""/211, 0xd3) 2m33.828650296s ago: executing program 4 (id=6403): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) bind$xdp(r0, &(0x7f00000007c0)={0x2c, 0x1, r2, 0xf, r0}, 0x10) 2m33.696140579s ago: executing program 4 (id=6407): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 2m33.695257819s ago: executing program 4 (id=6410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x48050) 2m33.65991701s ago: executing program 4 (id=6411): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 2m33.558212642s ago: executing program 4 (id=6413): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000000)="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", 0x101}], 0x1, 0x0, 0x0, 0x40054}, 0x4040884) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x40002, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 2m31.624427487s ago: executing program 4 (id=6419): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 2m31.570561698s ago: executing program 40 (id=6419): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 2m27.252635287s ago: executing program 0 (id=6503): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000900)=@abs={0x1, 0x0, 0x4e21}, 0x4f) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 2m27.175617689s ago: executing program 0 (id=6506): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x810, 0x1, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m26.891289405s ago: executing program 0 (id=6509): setresgid(0xee00, 0xee01, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x6}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000140)='.\x00', 0x43000620) 2m26.868042676s ago: executing program 0 (id=6511): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x207, &(0x7f0000000080)={[{@usrjquota}, {@jqfmt_vfsv1}, {@noinit_itable}, {@nodiscard}, {@noquota}]}, 0x5, 0x476, &(0x7f00000000c0)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='d'], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 2m26.640013701s ago: executing program 0 (id=6515): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x43, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 2m26.383640687s ago: executing program 0 (id=6519): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f0000000900)=[{&(0x7f0000000180)='\r', 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) 2m26.341670018s ago: executing program 41 (id=6519): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f0000000900)=[{&(0x7f0000000180)='\r', 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) 28.107309215s ago: executing program 1 (id=8846): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@fallback, 0xffffffffffffffff, 0x2b, 0x4000}, 0x20) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44040}, 0x4) sendmsg$NFT_BATCH(r1, 0x0, 0x24000840) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0xfffffffffffffef2) ioctl$TCFLSH(r0, 0x5608, 0x1) 28.071987126s ago: executing program 1 (id=8857): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) 27.165597387s ago: executing program 1 (id=8881): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\''], 0x50) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 27.136529778s ago: executing program 1 (id=8882): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1ad44e, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 27.084083979s ago: executing program 1 (id=8884): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0xe0}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x20001080) 27.03004101s ago: executing program 1 (id=8886): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 27.01576157s ago: executing program 42 (id=8886): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 14.182152935s ago: executing program 9 (id=9129): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, 0x0}, 0x17e00) 14.141171406s ago: executing program 9 (id=9131): r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r3, 0x0) 14.140707616s ago: executing program 9 (id=9133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2d, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x20000000) 14.093987177s ago: executing program 9 (id=9136): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x51e, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x82001, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) 13.838738813s ago: executing program 9 (id=9149): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000010900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x40) ptrace(0x10, 0x0) ptrace$getregset(0x4204, 0x0, 0x1, 0x0) ptrace$setregs(0xf, 0x0, 0x52a, &(0x7f0000000280)) 12.904036134s ago: executing program 9 (id=9159): mlock2(&(0x7f00001e2000/0x3000)=nil, 0x3000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x139c2000) 12.903665054s ago: executing program 43 (id=9159): mlock2(&(0x7f00001e2000/0x3000)=nil, 0x3000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x139c2000) 4.545749366s ago: executing program 5 (id=9316): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) syz_read_part_table(0x1057, &(0x7f00000006c0)="$eJzszzGKwlAUBdCbzyTkV1PNEqayt3YT1paCpW4gja3uw01GYkJ2ICKc09zHf5cPL3xU0+V02ExTTTKsz0v+jElK7ufbts3lmKSbFzWp5X9alqX6O0dZv+7n2CV9M9bXPLTJ9S/j0ij7x7vvAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBv8AwAAP//0G4J+w==") 4.267125723s ago: executing program 5 (id=9319): socket(0x2b, 0x1, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xd9209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8}, 0x81, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x818) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000294c0100001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000200103801c010080180101802d0001"], 0x1d0}}, 0x0) 4.132823706s ago: executing program 5 (id=9326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "00000400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xb}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) 4.042525138s ago: executing program 5 (id=9329): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) linkat(r1, &(0x7f00000003c0)='./cgroup\x00', r1, &(0x7f0000000000)='./file7\x00', 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 3.435622191s ago: executing program 5 (id=9343): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x94, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.472551094s ago: executing program 5 (id=9357): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x202) syz_usb_connect(0x3, 0x3d, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.614460393s ago: executing program 8 (id=9366): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 792.066703ms ago: executing program 7 (id=9372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 751.902733ms ago: executing program 7 (id=9373): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") unshare(0x2040400) r0 = openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) preadv2(r0, 0x0, 0x0, 0xf87, 0x8, 0x1e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000100)=0x1) preadv2(r1, &(0x7f0000000300)=[{&(0x7f0000000280)=""/108, 0x6c}], 0x1, 0x74, 0x0, 0x2) 679.022855ms ago: executing program 7 (id=9375): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000002}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x4, @empty, 0x82}, 0x1c) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 678.702415ms ago: executing program 7 (id=9377): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) socket(0x200000000000011, 0x2, 0xd) r1 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x6, 0x34, 0x68, 0x0, 0xa0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}, {[@rr={0x7, 0xb, 0x5, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, @timestamp={0xd, 0x0, 0x0, 0xa3, 0x5, 0x1ff, 0x800, 0xfffffff8}}}}}, 0x0) 653.955786ms ago: executing program 7 (id=9378): pipe2$9p(&(0x7f00000001c0), 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) socket$inet6(0xa, 0x2, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 559.254367ms ago: executing program 7 (id=9379): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x44, 0x1, 0x9, 0x8016}, {0x4, 0x9, 0x7, 0x5}, {0x6, 0x9, 0xd, 0x5}]}) poll(0x0, 0x0, 0x8) 495.637169ms ago: executing program 8 (id=9380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000006a000085000000860000008500000007000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c659900", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 353.677973ms ago: executing program 8 (id=9382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000010940)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd26, 0x8000007, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x0, 0x0, 0x7540}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048086}, 0x40040) 333.543753ms ago: executing program 6 (id=9383): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) close(r1) r3 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xd321, 0x100, 0x43, 0x10000000}) close_range(r3, 0xffffffffffffffff, 0x0) 297.119403ms ago: executing program 6 (id=9384): ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x7, 'gretap0\x00', {0x3}, 0x3}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x622, &(0x7f0000000400)={0x0, 0x7b88, 0x100, 0x3, 0x3c6}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 272.697955ms ago: executing program 6 (id=9385): socket(0x2b, 0x1, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xd9209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8}, 0x81, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x818) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000294c0100001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000200103801c010080180101802d0001"], 0x1d0}}, 0x0) 244.666805ms ago: executing program 8 (id=9386): ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) r0 = syz_open_procfs(0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) lseek(r0, 0x7, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 218.466045ms ago: executing program 2 (id=9388): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) symlinkat(&(0x7f0000000280)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) 213.030285ms ago: executing program 6 (id=9389): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10e, 0xb, &(0x7f0000000180), 0x4) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x9}, {&(0x7f0000000280)="68cabf2dfb58fc021d6b689866f05d4800028088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) 200.057276ms ago: executing program 8 (id=9390): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) listen(r0, 0x7f) connect$unix(r1, &(0x7f0000000880)=@file={0x1}, 0x6e) 173.385466ms ago: executing program 8 (id=9391): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 173.148006ms ago: executing program 6 (id=9392): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f00000001c0)='j', 0x1, 0x20004011, 0x0, 0x0) shutdown(r0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x3) 158.792617ms ago: executing program 2 (id=9393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(0x3) 137.548497ms ago: executing program 2 (id=9394): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x7, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x20000020) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0'}, 0xb) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000540)=@ccm_128={{0x303}, "f340cceb37bafac8", "22968ddfe15c9a1b88d78d123f5c48e7", "c1a33d18", "271d734267d49519"}, 0x28) 80.091008ms ago: executing program 2 (id=9395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0xaed, 0xe, 0xbd4149f, 0x8, 0x9, 0x36, 0x1, 0xfffffff3}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd27, 0x25dfdaf2, {0x0, 0x0, 0x0, r3, {0xffe0, 0xffff}, {0xa, 0xfff1}, {0x1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4049080) 79.857718ms ago: executing program 2 (id=9396): bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000ffa10000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}}, 0x0) 79.543328ms ago: executing program 6 (id=9397): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xce, &(0x7f00000001c0)=""/206, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x7, 0x0, 0x2, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 0s ago: executing program 2 (id=9398): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x65f32fcc}, 0x108063, 0x0, 0x983, 0x7, 0xbe, 0x88, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x43, 0x65) lremovexattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '(\x0f-@,**^*\x00'}) kernel console output (not intermixed with test programs): rt 6081 - 0 [ 355.390019][T19149] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 355.399500][T19149] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 47561 - 0 [ 356.588841][T23031] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6921'. [ 356.915957][T23054] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6932'. [ 357.372338][T23099] io-wq is not configured for unbound workers [ 358.699331][T23146] loop5: detected capacity change from 0 to 512 [ 358.743737][T23146] EXT4-fs: Ignoring removed nomblk_io_submit option [ 358.765188][T23146] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 358.812093][T23146] EXT4-fs (loop5): 1 truncate cleaned up [ 358.822092][T23146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.864707][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 358.864726][ T28] audit: type=1400 audit(1784945937.253:2789): avc: denied { write } for pid=23145 comm="syz.5.6970" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 359.346492][T23167] SELinux: failed to load policy [ 359.460399][ T28] audit: type=1400 audit(1784945937.814:2790): avc: denied { unmount } for pid=21090 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 359.571967][ T5051] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.674489][T23203] PM: suspend entry (deep) [ 359.742200][T23208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6997'. [ 359.751469][T23208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6997'. [ 359.755709][T19119] Filesystems sync: 0.071 seconds [ 359.768588][T23208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6997'. [ 359.778666][T23208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6997'. [ 359.779990][T19119] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.796334][T19119] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.805683][T19119] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.814302][T23203] Freezing user space processes [ 359.816722][T19119] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.866582][T23203] Freezing user space processes completed (elapsed 0.044 seconds) [ 359.874414][T23203] OOM killer disabled. [ 359.878691][T23203] Freezing remaining freezable tasks [ 359.885608][T23203] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 359.894041][T23203] printk: Suspending console(s) (use no_console_suspend to debug) [ 359.942056][T23203] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 359.943455][T23203] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 359.943503][T23203] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 359.943694][T23203] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 359.943728][T23203] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 359.943763][T23203] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 359.945032][T23203] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 359.945147][T23203] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 359.945175][T23203] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 359.945203][T23203] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 359.945304][T23203] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 359.945330][T23203] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 359.945355][T23203] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 359.945422][T23203] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 359.945446][T23203] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 359.945469][T23203] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 359.983879][T19119] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 360.589364][T23203] PM: suspend debug: Waiting for 5 second(s). [ 366.188588][T19151] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 366.304718][T23203] OOM killer enabled. [ 366.305378][T23203] Restarting tasks: Starting [ 366.319808][T23203] Restarting tasks: Done [ 366.320598][T23203] random: crng reseeded on system resumption [ 366.321666][T23203] PM: suspend exit [ 366.421789][T23220] sit1: entered allmulticast mode [ 366.447133][T23218] loop6: detected capacity change from 0 to 512 [ 366.454090][T23218] EXT4-fs: Ignoring removed nomblk_io_submit option [ 366.483282][T23218] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 366.508745][T23218] EXT4-fs (loop6): 1 truncate cleaned up [ 366.523826][T23218] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.543192][ T28] audit: type=1400 audit(1784945944.431:2791): avc: denied { write } for pid=23217 comm="syz.6.7001" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 366.813336][T21648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.455666][ T28] audit: type=1400 audit(1784945945.292:2792): avc: denied { read } for pid=23240 comm="syz.5.7011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 367.550852][ T28] audit: type=1326 audit(1784945945.385:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23257 comm="syz.1.7016" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b8d9cde99 code=0x0 [ 367.851336][T23301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7034'. [ 367.893007][T23307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7037'. [ 367.894527][T23307] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7037'. [ 367.896283][T23307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7037'. [ 367.897804][T23307] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7037'. [ 367.961290][ T28] audit: type=1326 audit(1784945945.759:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23308 comm="syz.2.7038" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f088174de99 code=0x0 [ 368.116000][T23326] IPv6: NLM_F_CREATE should be specified when creating new route [ 368.374776][T23334] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7048'. [ 368.395460][T23336] ip_vti0: entered promiscuous mode [ 368.396573][T23336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7049'. [ 369.260202][T23370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7064'. [ 369.263277][T23370] netlink: 'syz.2.7064': attribute type 30 has an invalid length. [ 369.273325][ T28] audit: type=1326 audit(1784945946.995:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23371 comm="syz.6.7063" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a353dde99 code=0x0 [ 369.280332][T23370] vxlan0: entered promiscuous mode [ 369.282712][T23370] vxlan0: entered allmulticast mode [ 369.284116][T19132] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.285534][T19132] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.286972][T19132] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.288263][T19132] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.298321][T23370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7064'. [ 369.301448][T23370] netlink: 'syz.2.7064': attribute type 30 has an invalid length. [ 369.307377][T23370] vxlan1: entered promiscuous mode [ 369.308225][T23370] vxlan1: entered allmulticast mode [ 369.325561][T23376] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7065'. [ 369.386451][T23383] loop5: detected capacity change from 0 to 1024 [ 369.397777][T23383] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 369.401538][T23383] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 369.405577][T23383] JBD2: no valid journal superblock found [ 369.406561][T23383] EXT4-fs (loop5): Could not load journal inode [ 369.554029][T23406] all: renamed from bridge_slave_1 [ 369.702551][ T28] audit: type=1400 audit(1784945947.397:2796): avc: denied { write } for pid=23430 comm="syz.1.7091" name="functions" dev="configfs" ino=27805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 369.712937][ T28] audit: type=1400 audit(1784945947.397:2797): avc: denied { write } for pid=23430 comm="syz.1.7091" name="c.1" dev="configfs" ino=35939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 369.719439][ T28] audit: type=1400 audit(1784945947.397:2798): avc: denied { write } for pid=23430 comm="syz.1.7091" name="c.1" dev="configfs" ino=35939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 370.198732][T23453] xt_hashlimit: size too large, truncated to 1048576 [ 371.129508][T23514] loop6: detected capacity change from 0 to 512 [ 371.175914][T23514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.177960][T23514] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.182697][ T28] audit: type=1400 audit(1784945948.773:2799): avc: denied { write } for pid=23512 comm="syz.6.7127" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 371.333211][T21648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.446404][T23539] bond1: entered promiscuous mode [ 371.447585][T23539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.459415][T23539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.461368][T23539] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 371.463734][T23539] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 371.504520][T23544] loop5: detected capacity change from 0 to 1024 [ 371.509810][T23544] EXT4-fs: Ignoring removed bh option [ 371.529327][T23544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.549683][ T28] audit: type=1400 audit(1784945949.119:2800): avc: denied { write } for pid=23543 comm="syz.5.7140" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 371.584256][ T5051] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.899291][T23565] loop6: detected capacity change from 0 to 32768 [ 371.942640][T23565] loop6: p1 p3 < > [ 372.004539][T23598] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23598 comm=syz.2.7160 [ 372.143531][T13178] udevd[13178]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 372.158667][T11720] udevd[11720]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 372.309479][T23619] loop6: detected capacity change from 0 to 128 [ 372.315341][T23619] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 372.317864][T23619] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 372.356430][T23625] configfs-gadget.g1 gadget.0: HOST MAC 26:30:6a:52:f0:01 [ 372.358993][T23625] configfs-gadget.g1 gadget.0: MAC ea:7c:27:51:d1:59 [ 372.394523][T21648] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 372.498498][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 372.498515][ T28] audit: type=1400 audit(1784945950.017:2823): avc: denied { write } for pid=23634 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.534004][ T28] audit: type=1400 audit(1784945950.045:2824): avc: denied { write } for pid=23655 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.713960][ T28] audit: type=1400 audit(1784945950.214:2825): avc: denied { write } for pid=23667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.734363][ T28] audit: type=1400 audit(1784945950.233:2826): avc: denied { write } for pid=23686 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.694485][T23732] __nla_validate_parse: 5 callbacks suppressed [ 373.694502][T23732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7208'. [ 373.883836][T23742] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7213'. [ 373.885899][T23742] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7213'. [ 374.046746][ T28] audit: type=1326 audit(1784945951.458:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23756 comm="syz.5.7220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fa67de99 code=0x7ffc0000 [ 374.056932][ T28] audit: type=1326 audit(1784945951.458:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23756 comm="syz.5.7220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fa67de99 code=0x7ffc0000 [ 374.064306][ T28] audit: type=1326 audit(1784945951.458:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23756 comm="syz.5.7220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fa67de99 code=0x7ffc0000 [ 374.073111][ T28] audit: type=1326 audit(1784945951.458:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23756 comm="syz.5.7220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f97fa67de99 code=0x7ffc0000 [ 374.080765][ T28] audit: type=1326 audit(1784945951.458:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23756 comm="syz.5.7220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fa67de99 code=0x7ffc0000 [ 374.085703][ T28] audit: type=1326 audit(1784945951.458:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23756 comm="syz.5.7220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fa67de99 code=0x7ffc0000 [ 374.622373][T23793] xt_hashlimit: size too large, truncated to 1048576 [ 374.910757][T23814] 9pnet: p9_errstr2errno: server reported unknown error p [ 376.348350][T23950] netlink: 'syz.6.7254': attribute type 1 has an invalid length. [ 376.349622][T23950] netlink: 'syz.6.7254': attribute type 2 has an invalid length. [ 376.610121][T23968] hugetlbfs: syz.2.7263 (23968): Using mlock ulimits for SHM_HUGETLB is obsolete [ 376.815696][T23978] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 376.911712][T23997] netlink: 14 bytes leftover after parsing attributes in process `syz.6.7276'. [ 377.267020][T23759] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 377.527228][T24030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7291'. [ 377.585491][T19214] Bluetooth: hci0: Frame reassembly failed (-84) [ 377.632041][T24036] 9pnet: p9_errstr2errno: server reported unknown error e_0 [ 379.014248][T24111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.042935][T24111] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.071104][T24111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.143249][T24111] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 379.163363][T24111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.185303][T24111] veth1_vlan: left promiscuous mode [ 379.204487][T24111] veth0_vlan: left promiscuous mode [ 379.222011][T24111] veth0_vlan: entered promiscuous mode [ 379.250759][T24111] veth1_vlan: entered promiscuous mode [ 379.282865][T24111] veth1_macvtap: left promiscuous mode [ 379.299048][T24111] veth0_macvtap: left promiscuous mode [ 379.305361][T24111] veth0_macvtap: entered promiscuous mode [ 379.327674][T24111] veth1_macvtap: entered promiscuous mode [ 379.353292][T24111] 8021q: adding VLAN 0 to HW filter on device eth0 [ 379.391781][T24111] 8021q: adding VLAN 0 to HW filter on device eth1 [ 379.400025][T24111] 8021q: adding VLAN 0 to HW filter on device eth2 [ 379.408426][T24111] 8021q: adding VLAN 0 to HW filter on device eth3 [ 379.485171][ T68] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.505710][ T68] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.545663][ T68] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.568790][ T68] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.591508][T24131] netlink: 'syz.7.7330': attribute type 1 has an invalid length. [ 379.612762][T24131] 8021q: adding VLAN 0 to HW filter on device bond5 [ 379.774540][ T3950] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 379.874747][T24153] sg_write: data in/out 463004/136 bytes for SCSI command 0x0-- guessing data in; [ 379.874747][T24153] program syz.5.7337 not setting count and/or reply_len properly [ 379.998371][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 379.998388][ T28] audit: type=1400 audit(1784945957.026:2857): avc: denied { create } for pid=24167 comm="syz.2.7345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 380.185996][T24174] loop5: detected capacity change from 0 to 512 [ 380.209726][T24174] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.7347: iget: bad i_size value: 38620345925642 [ 380.223370][T24174] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 380.225013][T24174] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.7347: couldn't read orphan inode 15 (err -117) [ 380.234213][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 380.234235][ C0] EXT4-fs (loop5): initial error at time 1784945957: ext4_orphan_get:1399: inode 15 [ 380.234264][ C0] EXT4-fs (loop5): last error at time 1784945957: ext4_orphan_get:1399: inode 15 [ 380.276638][T24174] loop5: lost filesystem error report for type 5 error -117 [ 380.277526][T24174] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.305775][ T28] audit: type=1400 audit(1784945957.317:2858): avc: denied { write } for pid=24173 comm="syz.5.7347" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 380.337203][T24173] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.7347: bg 0: block 5: invalid block bitmap [ 380.352535][T24174] EXT4-fs (loop5): shut down requested (0) [ 380.378624][ T5051] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.562533][T24187] cgroup: Unknown subsys name 'pcr' [ 380.575339][T24189] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7353'. [ 380.624371][T24189] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7353'. [ 380.650872][T24195] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7356'. [ 380.673294][T24201] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.7360'. [ 380.710912][ T28] audit: type=1400 audit(1784945957.691:2859): avc: denied { write } for pid=24204 comm="syz.2.7362" name="c.1" dev="configfs" ino=35939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 380.788463][ T28] audit: type=1400 audit(1784945957.691:2860): avc: denied { write } for pid=24204 comm="syz.2.7362" name="c.1" dev="configfs" ino=35939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 380.851640][T24217] loop5: detected capacity change from 0 to 128 [ 380.857933][T24221] cgroup: Unknown subsys name 'pcr' [ 380.890289][T24217] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 380.916400][T24217] ext4 filesystem being mounted at /1298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.939947][ T28] audit: type=1400 audit(1784945957.915:2861): avc: denied { write } for pid=24216 comm="syz.5.7366" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 380.954905][T24228] xt_hashlimit: size too large, truncated to 1048576 [ 380.992132][ T5051] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 381.412908][ T28] audit: type=1400 audit(1784945958.355:2862): avc: denied { checkpoint_restore } for pid=24246 comm="syz.5.7377" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 381.490356][T24258] : renamed from bond0 [ 382.360260][ T28] audit: type=1400 audit(1784945959.235:2863): avc: denied { read } for pid=24294 comm="syz.2.7409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 382.708163][T24302] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7401'. [ 382.717293][T24302] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7401'. [ 382.735291][T24302] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7401'. [ 382.744625][T22499] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.753185][T22499] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.782410][T22499] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.813987][T22499] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.828996][T24302] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7401'. [ 383.184183][T24323] veth0: entered promiscuous mode [ 383.194848][T24323] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7410'. [ 383.256280][T24323] veth0 (unregistering): left promiscuous mode [ 383.453623][T24346] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7419'. [ 384.306551][ T28] audit: type=1400 audit(1784945961.050:2864): avc: denied { write } for pid=24363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.370510][ T28] audit: type=1400 audit(1784945961.097:2865): avc: denied { write } for pid=24374 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.542110][ T28] audit: type=1400 audit(1784945961.284:2866): avc: denied { write } for pid=24381 comm="syz.6.7432" name="c.1" dev="configfs" ino=35939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 384.722418][T24392] loop5: detected capacity change from 0 to 512 [ 384.764382][T24392] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.788391][T24392] ext4 filesystem being mounted at /1311/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.554426][ T5051] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.668221][T24430] netlink: 'syz.5.7449': attribute type 1 has an invalid length. [ 385.669235][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 385.669273][ T28] audit: type=1400 audit(1784945962.332:2870): avc: denied { rename } for pid=24428 comm="syz.7.7460" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=5675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 385.732805][T24430] 8021q: adding VLAN 0 to HW filter on device bond6 [ 385.815404][ T912] Process accounting resumed [ 385.902117][ T28] audit: type=1400 audit(1784945962.557:2871): avc: denied { ioctl } for pid=24439 comm="syz.6.7453" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 385.976090][T24448] loop5: detected capacity change from 0 to 764 [ 386.016497][T24305] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 386.135578][T24458] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=24458 comm=syz.6.7463 [ 386.296827][T24474] loop6: detected capacity change from 0 to 1024 [ 386.313220][T24474] EXT4-fs: Ignoring removed orlov option [ 386.341071][T24474] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.431573][ T28] audit: type=1400 audit(1784945963.044:2872): avc: denied { write } for pid=24473 comm="syz.6.7469" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 386.475910][ T28] audit: type=1400 audit(1784945963.044:2873): avc: denied { write } for pid=24473 comm="syz.6.7469" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 386.529725][T21648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.588444][ T28] audit: type=1400 audit(1784945963.193:2874): avc: denied { setopt } for pid=24489 comm="syz.7.7475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 386.771056][T24511] __nla_validate_parse: 2 callbacks suppressed [ 386.771073][T24511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7484'. [ 386.786270][T24511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7484'. [ 386.795324][T24511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7484'. [ 386.804241][T24511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7484'. [ 386.991183][T24517] netlink: 'syz.2.7486': attribute type 1 has an invalid length. [ 387.007211][T24517] 8021q: adding VLAN 0 to HW filter on device bond4 [ 387.217606][T24534] netlink: 'syz.1.7500': attribute type 1 has an invalid length. [ 387.241314][T24534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7500'. [ 387.821781][ T912] kernel write not supported for file /ppp (pid: 912 comm: kworker/0:2) [ 388.359909][T24558] netlink: 'syz.1.7502': attribute type 1 has an invalid length. [ 388.375292][T24558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.397149][T24563] cgroup: No subsys list or none specified [ 388.435501][T24571] loop6: detected capacity change from 0 to 256 [ 388.451249][T24571] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 388.888647][T24593] loop5: detected capacity change from 0 to 128 [ 388.900608][T24593] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 388.913792][T24593] ext4 filesystem being mounted at /1322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.937841][ T28] audit: type=1400 audit(1784945965.383:2875): avc: denied { write } for pid=24592 comm="syz.5.7519" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 388.983581][ T5051] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 389.054498][T24600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7520'. [ 389.065932][T24596] loop6: detected capacity change from 0 to 512 [ 389.077917][T24600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7520'. [ 389.086963][T24596] EXT4-fs (loop6): filesystem is read-only [ 389.094862][T24596] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 389.113551][T24596] EXT4-fs (loop6): failed to initialize system zone (-117) [ 389.123684][T13816] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.133113][T24596] EXT4-fs (loop6): mount failed [ 389.143038][T13816] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.176987][T13816] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.201101][T13816] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.249337][T24611] loop6: detected capacity change from 0 to 256 [ 389.277726][T24611] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 389.407794][T24625] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7532'. [ 389.537019][T24633] loop6: detected capacity change from 0 to 512 [ 389.561077][T24633] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 389.579560][T24633] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.7537: invalid indirect mapped block 83886080 (level 1) [ 389.595246][T24633] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 389.596043][T24633] EXT4-fs (loop6): Remounting filesystem read-only [ 389.605960][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 389.605993][ C1] EXT4-fs (loop6): initial error at time 1784945966: ext4_free_branches:1023: inode 16 [ 389.606098][ C1] EXT4-fs (loop6): last error at time 1784945966: ext4_free_branches:1023: inode 16 [ 389.640965][T24633] EXT4-fs (loop6): 1 orphan inode deleted [ 389.647077][T24633] EXT4-fs (loop6): 1 truncate cleaned up [ 389.674896][T24633] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.754311][T21648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.767316][ T28] audit: type=1326 audit(1784945966.169:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24655 comm="syz.7.7545" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff330e8de99 code=0x7ffc0000 [ 389.805793][ T28] audit: type=1326 audit(1784945966.169:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24655 comm="syz.7.7545" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff330e8de99 code=0x7ffc0000 [ 389.856600][ T28] audit: type=1326 audit(1784945966.169:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24655 comm="syz.7.7545" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff330e8de99 code=0x7ffc0000 [ 389.909010][ T28] audit: type=1326 audit(1784945966.169:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24655 comm="syz.7.7545" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff330e8de99 code=0x7ffc0000 [ 390.455288][T24676] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7553'. [ 390.465370][T24676] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7553'. [ 390.702213][T24687] loop6: detected capacity change from 0 to 512 [ 390.724051][T24683] loop5: detected capacity change from 0 to 512 [ 390.731452][T24687] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.7566: inode has both inline data and extents flags [ 390.744722][T24687] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 390.748834][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 390.757628][T24687] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.7566: couldn't read orphan inode 15 (err -117) [ 390.758048][ C1] EXT4-fs (loop6): initial error at time 1784945967: ext4_orphan_get:1399 [ 390.769577][T24683] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 390.776270][ C1] : inode 15 [ 390.776287][ C1] EXT4-fs (loop6): last error at time 1784945967: ext4_orphan_get:1399: inode 15 [ 390.821179][T24687] loop6: lost filesystem error report for type 5 error -117 [ 390.826499][T24687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.891681][T24683] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.7556: invalid indirect mapped block 83886080 (level 1) [ 390.920002][T24683] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 390.922235][T24683] EXT4-fs (loop5): Remounting filesystem read-only [ 390.931680][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 390.931734][ C0] EXT4-fs (loop5): initial error at time 1784945967: ext4_free_branches:1023: inode 16 [ 390.931831][ C0] EXT4-fs (loop5): last error at time 1784945967: ext4_free_branches:1023: inode 16 [ 390.969262][T24683] EXT4-fs (loop5): 1 orphan inode deleted [ 390.975468][T24683] EXT4-fs (loop5): 1 truncate cleaned up [ 390.984562][T24683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.021182][ T5051] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.033190][T21648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.159459][T24712] loop5: detected capacity change from 0 to 1024 [ 391.208685][T24712] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 391.232993][T24712] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #3: block 1: comm syz.5.7569: lblock 1 mapped to illegal pblock 1 (length 1) [ 391.259293][T24712] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 391.260752][T24712] __quota_error: 52 callbacks suppressed [ 391.260769][T24712] Quota error (device loop5): write_blk: dquota write failed [ 391.269864][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 391.269913][ C0] EXT4-fs (loop5): initial error at time 1784945967: ext4_map_blocks:833: inode 3: block 1 [ 391.269978][ C0] EXT4-fs (loop5): last error at time 1784945967: ext4_map_blocks:833: inode 3: block 1 [ 391.333537][T24712] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 391.358132][T24712] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.7569: Failed to acquire dquot type 0 [ 391.373365][T24712] loop5: lost filesystem error report for type 5 error -117 [ 391.373527][T24712] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.7569: Freeing blocks not in datazone - block = 0, count = 4096 [ 391.423860][T24712] loop5: lost filesystem error report for type 5 error -117 [ 391.425491][T24712] EXT4-fs error (device loop5): ext4_read_inode_bitmap:141: comm syz.5.7569: Invalid inode bitmap blk 0 in block_group 0 [ 391.432575][T24727] netlink: 'syz.1.7575': attribute type 1 has an invalid length. [ 391.454482][T19159] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:63: lblock 1 mapped to illegal pblock 1 (length 1) [ 391.455512][T24712] loop5: lost filesystem error report for type 5 error -117 [ 391.483110][T19159] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 391.490670][T24712] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 391.508136][T24727] netlink: 'syz.1.7575': attribute type 2 has an invalid length. [ 391.516306][T19159] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 391.525967][T24712] loop5: lost filesystem error report for type 5 error -117 [ 391.526091][T24712] EXT4-fs (loop5): 1 orphan inode deleted [ 391.529417][T19159] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:63: Failed to release dquot type 0 [ 391.549659][T24712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.655117][ T5051] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.947572][ T5885] IPVS: starting estimator thread 0... [ 392.053243][T24758] IPVS: using max 2160 ests per chain, 108000 per kthread [ 392.400791][ T28] audit: type=1400 audit(1784945968.630:2932): avc: denied { ioctl } for pid=24785 comm="syz.7.7601" path="socket:[71848]" dev="sockfs" ino=71848 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 392.785064][T24799] __nla_validate_parse: 3 callbacks suppressed [ 392.785092][T24799] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7604'. [ 392.820700][T24799] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7604'. [ 392.864632][ T28] audit: type=1400 audit(1784945969.061:2933): avc: denied { ioctl } for pid=24804 comm="syz.7.7607" path="socket:[71904]" dev="sockfs" ino=71904 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 393.468487][T24843] xt_hashlimit: size too large, truncated to 1048576 [ 393.528816][T24837] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.559155][T24846] cgroup: No subsys list or none specified [ 393.665459][T24837] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.902487][T24837] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.015662][T24837] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.360145][T19180] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.528157][T19159] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.536635][T19159] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.561727][T19159] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.682898][T24891] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7644'. [ 394.931097][T24909] loop6: detected capacity change from 0 to 1024 [ 394.966463][T24909] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.988633][ T28] audit: type=1400 audit(1784945971.054:2934): avc: denied { write } for pid=24907 comm="syz.6.7652" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 395.014200][T24909] EXT4-fs error (device loop6): ext4_lookup:1785: inode #15: comm syz.6.7652: iget: bad extended attribute block 8388352 [ 395.030071][T24909] EXT4-fs (loop6): Remounting filesystem read-only [ 395.051373][T21648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.670394][ T28] audit: type=1400 audit(1784945971.690:2935): avc: denied { accept } for pid=24957 comm="syz.6.7673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 395.931482][T24988] 9p: Bad value for 'source' [ 396.040111][ T28] audit: type=1400 audit(1784945972.046:2936): avc: denied { watch watch_reads } for pid=24998 comm="syz.1.7690" path="/" dev="configfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 396.672829][ T28] audit: type=1400 audit(1784945972.636:2937): avc: denied { write } for pid=25036 comm="syz.2.7708" name="functions" dev="configfs" ino=27805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 396.708464][ T28] audit: type=1400 audit(1784945972.654:2938): avc: denied { write } for pid=25036 comm="syz.2.7708" name="c.1" dev="configfs" ino=35939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 396.736405][ T28] audit: type=1400 audit(1784945972.654:2939): avc: denied { write } for pid=25036 comm="syz.2.7708" name="c.1" dev="configfs" ino=35939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 396.897231][T25058] net_ratelimit: 18 callbacks suppressed [ 396.897322][T25058] netlink: set zone limit has 4 unknown bytes [ 397.502584][T25109] loop6: detected capacity change from 0 to 512 [ 397.511680][T25109] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 397.534965][T25109] EXT4-fs (loop6): 1 truncate cleaned up [ 397.541073][T25109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.568493][ T28] audit: type=1400 audit(1784945973.468:2940): avc: denied { write } for pid=25108 comm="syz.6.7742" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.690823][T21648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.996315][T25172] syzkaller1: entered promiscuous mode [ 398.006622][T25172] syzkaller1: entered allmulticast mode [ 398.051417][T25184] netlink: 16215 bytes leftover after parsing attributes in process `syz.6.7772'. [ 398.143147][T25202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7780'. [ 398.163256][T25202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7780'. [ 398.180577][ T28] audit: type=1400 audit(1784945974.039:2941): avc: denied { bind } for pid=25203 comm="syz.6.7781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 398.226064][ T28] audit: type=1400 audit(1784945974.039:2942): avc: denied { listen } for pid=25203 comm="syz.6.7781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 398.234349][T25211] gretap1: entered promiscuous mode [ 399.061657][T25221] veth0: entered promiscuous mode [ 399.084515][T25221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7790'. [ 399.134353][ T912] Process accounting resumed [ 399.144873][T25231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7794'. [ 399.775007][ T5870] Process accounting resumed [ 399.779915][ T28] audit: type=1400 audit(1784945975.537:2943): avc: denied { write } for pid=25302 comm="syz.6.7823" name="usb_gadget" dev="configfs" ino=2097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 399.804546][ T28] audit: type=1400 audit(1784945975.537:2944): avc: denied { write } for pid=25302 comm="syz.6.7823" name="configs" dev="configfs" ino=73917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 399.828072][ T28] audit: type=1400 audit(1784945975.546:2945): avc: denied { write } for pid=25302 comm="syz.6.7823" name="strings" dev="configfs" ino=73922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 400.785597][ T5885] Process accounting resumed [ 401.398639][T25394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25394 comm=syz.2.7856 [ 401.416438][T25394] netlink: 'syz.2.7856': attribute type 1 has an invalid length. [ 401.849080][T25428] ªªªªªª: renamed from vlan0 (while UP) [ 402.031120][T25442] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7877'. [ 402.045865][T25442] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7877'. [ 402.256869][T25462] 9p: Bad value for 'rfdno' [ 402.312705][T25464] syzkaller1: entered promiscuous mode [ 402.318918][T25464] syzkaller1: entered allmulticast mode [ 403.258827][ T28] audit: type=1400 audit(1784945978.793:2946): avc: denied { write } for pid=25515 comm="syz.2.7908" name="/" dev="configfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 403.303989][T25512] loop6: detected capacity change from 0 to 4096 [ 403.320038][ T28] audit: type=1400 audit(1784945978.793:2947): avc: denied { create } for pid=25515 comm="syz.2.7908" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 403.353032][T25512] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.375396][ T28] audit: type=1400 audit(1784945978.905:2948): avc: denied { write } for pid=25511 comm="syz.6.7906" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 403.509134][T21648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.586485][ T28] audit: type=1400 audit(1784945979.102:2949): avc: denied { write } for pid=25528 comm="syz.6.7913" name="hs" dev="configfs" ino=55800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 403.634006][ T28] audit: type=1400 audit(1784945979.102:2950): avc: denied { write } for pid=25528 comm="syz.6.7913" name="hs" dev="configfs" ino=55800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 404.321138][ T28] audit: type=1400 audit(1784945979.785:2951): avc: denied { cmd } for pid=25581 comm="syz.1.7935" path="socket:[74339]" dev="sockfs" ino=74339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 404.362702][ T5885] IPVS: starting estimator thread 0... [ 404.459141][T25586] IPVS: using max 2208 ests per chain, 110400 per kthread [ 404.576248][T25600] netlink: 'syz.7.7939': attribute type 1 has an invalid length. [ 404.589064][T25600] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7939'. [ 405.584686][T25628] loop5: detected capacity change from 0 to 256 [ 405.631725][T25628] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 405.644635][T25622] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.751382][T25622] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.710017][T25622] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.783115][T25622] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.873046][T25788] ªªªªªª: renamed from vlan0 [ 406.883315][T25785] xt_hashlimit: max too large, truncated to 1048576 [ 406.923633][T19159] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.935357][T19159] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.938042][T25785] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 406.958909][T19159] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.977760][T19159] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.713838][T25825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7990'. [ 407.741384][T25828] loop5: detected capacity change from 0 to 512 [ 407.771967][T25829] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7992'. [ 407.782535][T25828] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.7991: corrupted in-inode xattr: invalid ea_ino [ 407.873249][T25828] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 407.873412][T25828] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.7991: couldn't read orphan inode 15 (err -117) [ 407.882632][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 407.882658][ C0] EXT4-fs (loop5): initial error at time 1784945983: ext4_iget_extra_inode:5180: inode 15 [ 407.882696][ C0] EXT4-fs (loop5): last error at time 1784945983: ext4_iget_extra_inode:5180: inode 15 [ 407.940597][T25828] loop5: lost filesystem error report for type 5 error -117 [ 407.941096][T25828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.978035][ T28] audit: type=1400 audit(1784945983.210:2952): avc: denied { write } for pid=25827 comm="syz.5.7991" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.040213][ T28] audit: type=1400 audit(1784945983.210:2953): avc: denied { write } for pid=25827 comm="syz.5.7991" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.071528][ T5051] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.743642][T25862] 9p: Bad value for 'source' [ 409.191178][ T28] audit: type=1400 audit(1784945984.342:2954): avc: denied { write } for pid=25884 comm="syz.6.8020" name="strings" dev="configfs" ino=27807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 409.227815][ T28] audit: type=1400 audit(1784945984.342:2955): avc: denied { write } for pid=25884 comm="syz.6.8020" name="0x409" dev="configfs" ino=75570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 409.309337][ T28] audit: type=1400 audit(1784945984.371:2956): avc: denied { write } for pid=25884 comm="syz.6.8020" name="c.1" dev="configfs" ino=35939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 409.488322][T25896] netlink: 7 bytes leftover after parsing attributes in process `syz.2.8023'. [ 410.163095][T25924] loop5: detected capacity change from 0 to 128 [ 410.192750][T25924] vfat: Unknown parameter '' [ 410.235691][T25934] netlink: 'syz.1.8038': attribute type 13 has an invalid length. [ 410.257281][T25934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8038'. [ 410.266813][T25934] netlink: 'syz.1.8038': attribute type 13 has an invalid length. [ 410.275187][T25934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8038'. [ 410.928010][T25959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8048'. [ 411.000013][T25963] ip6_vti0: entered promiscuous mode [ 411.005655][T25963] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8052'. [ 411.208379][T25975] syzkaller1: entered promiscuous mode [ 411.221513][T25975] syzkaller1: entered allmulticast mode [ 412.720501][T26035] loop6: detected capacity change from 0 to 512 [ 412.755160][T26035] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.781582][T26035] ext4 filesystem being mounted at /287/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 413.458435][T21648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.651081][T26090] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8113'. [ 414.174104][T26104] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8105'. [ 414.300708][T26112] sctp: [Deprecated]: syz.7.8108 (pid 26112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 414.300708][T26112] Use struct sctp_sack_info instead [ 415.804321][T26258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8149'. [ 415.828743][T26258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8149'. [ 417.302103][T26391] syz_tun: entered allmulticast mode [ 417.333963][T26388] syz_tun: left allmulticast mode [ 417.363915][T26392] loop6: detected capacity change from 0 to 4096 [ 417.399384][T26400] loop5: detected capacity change from 0 to 512 [ 417.446071][T26392] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.464337][T26400] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.479415][ T28] audit: type=1400 audit(1784945992.110:2957): avc: denied { append } for pid=26389 comm="syz.6.8164" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 417.483006][T26400] ext4 filesystem being mounted at /1428/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 417.544385][ T28] audit: type=1400 audit(1784945992.110:2958): avc: denied { open } for pid=26389 comm="syz.6.8164" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 417.596204][ T28] audit: type=1400 audit(1784945992.110:2959): avc: denied { ioctl } for pid=26389 comm="syz.6.8164" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 417.649006][ T28] audit: type=1404 audit(1784945992.184:2960): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 417.672979][ T28] audit: type=1404 audit(1784945992.287:2961): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 417.785287][ T28] audit: type=1400 audit(1784945992.381:2962): avc: denied { unmount } for pid=5051 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 417.808364][ T5051] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.832281][T21648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.859356][ T28] audit: type=1400 audit(1784945992.456:2963): avc: denied { read write } for pid=21648 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 417.901293][T26412] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8170'. [ 417.967163][T26412] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8170'. [ 417.980083][ T28] audit: type=1400 audit(1784945992.456:2964): avc: denied { open } for pid=21648 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 418.064756][ T28] audit: type=1400 audit(1784945992.456:2965): avc: denied { ioctl } for pid=21648 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 418.135659][ T28] audit: type=1400 audit(1784945992.493:2966): avc: denied { create } for pid=26409 comm="syz.7.8172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 418.599187][T26458] SELinux: invalid class [ 418.603713][T26458] SELinux: failed to load policy [ 418.790911][T26487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8204'. [ 418.800598][T26487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8204'. [ 419.877269][T26589] veth1_to_bond: entered allmulticast mode [ 419.894769][T26589] veth1_to_bond: entered promiscuous mode [ 420.366574][T26623] netlink: 'syz.1.8261': attribute type 3 has an invalid length. [ 420.404091][T26623] netlink: 'syz.1.8261': attribute type 7 has an invalid length. [ 420.431540][T26623] netlink: 195016 bytes leftover after parsing attributes in process `syz.1.8261'. [ 420.458062][T26630] loop5: detected capacity change from 0 to 2048 [ 420.499710][T26630] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.678202][T26630] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 420.713631][T26630] EXT4-fs error (device loop5) in ext4_setattr:6172: error 28 [ 420.753936][T26629] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 420.792489][T26629] EXT4-fs (loop5): This should not happen!! Data will be lost [ 420.792489][T26629] [ 420.823940][T26629] EXT4-fs (loop5): Total free blocks count 0 [ 420.831628][T26629] EXT4-fs (loop5): Free/Dirty block details [ 420.839504][T26629] EXT4-fs (loop5): free_blocks=4096 [ 420.848144][T26629] EXT4-fs (loop5): dirty_blocks=512 [ 420.857018][T26629] EXT4-fs (loop5): Block reservation details [ 420.866498][T26629] EXT4-fs (loop5): i_reserved_data_blocks=32 [ 420.896276][T19132] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 481 with error 28 [ 420.914049][ T5051] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 421.127774][T26671] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8279'. [ 421.521937][T26698] netlink: 'syz.2.8288': attribute type 39 has an invalid length. [ 421.747010][T26708] tls_set_device_offload_rx: netdev not found [ 422.416179][T26724] loop6: detected capacity change from 0 to 512 [ 422.436336][T26724] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.449079][T26724] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.477431][T21648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.880193][ T28] kauditd_printk_skb: 118 callbacks suppressed [ 422.880294][ T28] audit: type=1400 audit(1784945997.154:3085): avc: denied { map } for pid=26748 comm="syz.1.8310" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=77940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 422.959131][ T28] audit: type=1400 audit(1784945997.154:3086): avc: denied { read write } for pid=26748 comm="syz.1.8310" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=77940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 423.208927][ T28] audit: type=1400 audit(1784945997.462:3087): avc: denied { connect } for pid=26759 comm="syz.7.8312" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 423.264924][ T28] audit: type=1400 audit(1784945997.509:3088): avc: denied { create } for pid=26762 comm="syz.7.8313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 423.289460][ T28] audit: type=1400 audit(1784945997.509:3089): avc: denied { connect } for pid=26762 comm="syz.7.8313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 423.312004][ T28] audit: type=1400 audit(1784945997.518:3090): avc: denied { write } for pid=26762 comm="syz.7.8313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 423.363692][ T28] audit: type=1400 audit(1784945997.612:3091): avc: denied { ioctl } for pid=26767 comm="syz.1.8315" path="socket:[77963]" dev="sockfs" ino=77963 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 423.389307][ T28] audit: type=1400 audit(1784945997.640:3092): avc: denied { connect } for pid=26767 comm="syz.1.8315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 423.416487][ T28] audit: type=1400 audit(1784945997.640:3093): avc: denied { write } for pid=26767 comm="syz.1.8315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 423.439061][ T28] audit: type=1400 audit(1784945997.687:3094): avc: denied { setopt } for pid=26771 comm="syz.2.8317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 423.589229][T26779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8319'. [ 423.690399][T26781] hub 5-0:1.0: USB hub found [ 423.703605][T26781] hub 5-0:1.0: 8 ports detected [ 423.817415][T26794] gre1: entered promiscuous mode [ 424.032132][T26809] smpboot: CPU 1 is now offline [ 424.066529][T26809] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 424.459535][T26821] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8340'. [ 424.492726][T26821] bond0: entered promiscuous mode [ 424.512031][T26821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.946921][T19132] bond0 (unregistering): Released all slaves [ 425.276552][T26896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.294460][T26896] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.565760][T26928] netlink: 200 bytes leftover after parsing attributes in process `syz.1.8382'. [ 426.036867][T26984] gre4: entered promiscuous mode [ 426.512202][T27016] gre1: entered promiscuous mode [ 427.006923][T27038] netlink: 88 bytes leftover after parsing attributes in process `syz.6.8428'. [ 427.683748][T27052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8432'. [ 427.716256][T27055] netlink: 'syz.1.8436': attribute type 12 has an invalid length. [ 428.538410][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 428.538425][ T28] audit: type=1400 audit(1784946002.450:3120): avc: denied { create } for pid=27091 comm="syz.7.8449" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 428.599958][ T28] audit: type=1400 audit(1784946002.469:3121): avc: denied { read append } for pid=27091 comm="syz.7.8449" name="file0" dev="tmpfs" ino=6872 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 428.683521][ T28] audit: type=1400 audit(1784946002.469:3122): avc: denied { open } for pid=27091 comm="syz.7.8449" path="/1332/file0" dev="tmpfs" ino=6872 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 428.735230][T27099] smc: net device lo applied user defined pnetid SYZ2 [ 428.742584][T27099] smc: net device lo erased user defined pnetid SYZ2 [ 428.750114][ T28] audit: type=1400 audit(1784946002.506:3123): avc: denied { unlink } for pid=11158 comm="syz-executor" name="file0" dev="tmpfs" ino=6872 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 428.806522][ T28] audit: type=1400 audit(1784946002.553:3124): avc: denied { firmware_load } for pid=27095 comm="syz.7.8452" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 428.960757][ T28] audit: type=1400 audit(1784946002.843:3125): avc: denied { relabelfrom } for pid=27106 comm="syz.1.8457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 428.980925][ T28] audit: type=1400 audit(1784946002.843:3126): avc: denied { relabelto } for pid=27106 comm="syz.1.8457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 429.017107][T27094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8450'. [ 429.028928][T27094] geneve0: entered promiscuous mode [ 429.093053][ T28] audit: type=1400 audit(1784946002.974:3127): avc: denied { accept } for pid=27113 comm="syz.2.8459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 429.113199][ T28] audit: type=1400 audit(1784946002.993:3128): avc: denied { read } for pid=27113 comm="syz.2.8459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 429.334829][T27133] IPv6: NLM_F_CREATE should be specified when creating new route [ 429.355075][T27133] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 429.362406][T27133] IPv6: NLM_F_CREATE should be set when creating new route [ 429.491161][ T28] audit: type=1400 audit(1784946003.339:3129): avc: denied { read } for pid=27152 comm="syz.5.8477" path="socket:[79729]" dev="sockfs" ino=79729 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 429.977572][T27200] netlink: 'syz.5.8496': attribute type 1 has an invalid length. [ 430.038803][T27200] bond7: entered promiscuous mode [ 430.044545][T27200] 8021q: adding VLAN 0 to HW filter on device bond7 [ 430.103246][T27211] loop6: detected capacity change from 0 to 1024 [ 430.115299][T27200] 8021q: adding VLAN 0 to HW filter on device bond7 [ 430.123033][T27211] EXT4-fs: Ignoring removed nomblk_io_submit option [ 430.161192][T27200] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 430.195262][T27200] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 430.210601][T27211] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8042c01c, mo2=0002] [ 430.235759][T27200] bond7: (slave ip6gre2): making interface the new active one [ 430.252422][T27211] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.266389][T27200] ip6gre2: entered promiscuous mode [ 430.275564][T27200] bond7: (slave ip6gre2): Enslaving as an active interface with an up link [ 430.369955][T27211] EXT4-fs error (device loop6) in ext4_setattr:6172: error 28 [ 430.407755][T21648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.579674][T27229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8508'. [ 430.597534][T27229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8508'. [ 430.636644][T27235] loop5: detected capacity change from 0 to 512 [ 430.655950][T27235] EXT4-fs: Ignoring removed oldalloc option [ 430.674584][T27235] EXT4-fs: Ignoring removed oldalloc option [ 430.700964][T27235] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.8511: corrupted in-inode xattr: invalid ea_ino [ 430.739169][T27235] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 430.741419][T27235] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.8511: couldn't read orphan inode 15 (err -117) [ 430.750641][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 430.750662][ C1] EXT4-fs (loop5): initial error at time 1784946004: ext4_iget_extra_inode:5180: inode 15 [ 430.750687][ C1] EXT4-fs (loop5): last error at time 1784946004: ext4_iget_extra_inode:5180: inode 15 [ 430.788664][T27235] loop5: lost filesystem error report for type 5 error -117 [ 430.790579][T27235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.935563][ T5051] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.129760][T27256] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8519'. [ 432.002584][T27284] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8530'. [ 432.025700][T27284] erspan0: entered promiscuous mode [ 432.050471][T27284] macvtap0: entered promiscuous mode [ 432.056068][T27284] macvtap0: entered allmulticast mode [ 432.061727][T27284] erspan0: entered allmulticast mode [ 432.067838][T27285] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8530'. [ 432.102843][T27282] loop6: detected capacity change from 0 to 8192 [ 432.116923][T27282] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 432.271357][T27300] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8538'. [ 432.376545][T27313] loop6: detected capacity change from 0 to 512 [ 432.383402][T27313] EXT4-fs: Ignoring removed mblk_io_submit option [ 432.421173][T27313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.442885][T27313] ext4 filesystem being mounted at /366/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.484478][T21648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.605611][T27328] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8547'. [ 433.045995][T27386] netlink: 444 bytes leftover after parsing attributes in process `syz.1.8549'. [ 433.064467][T27386] netlink: 4180 bytes leftover after parsing attributes in process `syz.1.8549'. [ 433.573820][T27468] xt_hashlimit: size too large, truncated to 1048576 [ 434.043049][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 434.043069][ T28] audit: type=1400 audit(1784946007.606:3183): avc: denied { accept } for pid=27513 comm="syz.2.8580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 434.117985][T27522] netlink: 'syz.1.8593': attribute type 4 has an invalid length. [ 434.119333][T27520] xt_hashlimit: size too large, truncated to 1048576 [ 434.134443][T27522] netlink: 'syz.1.8593': attribute type 4 has an invalid length. [ 434.531163][T27534] loop5: detected capacity change from 0 to 4096 [ 434.541051][T27534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.575328][ T28] audit: type=1400 audit(1784946008.102:3184): avc: denied { write } for pid=27533 comm="syz.5.8587" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 434.601335][ T28] audit: type=1400 audit(1784946008.102:3185): avc: denied { write } for pid=27533 comm="syz.5.8587" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 434.678091][ T5051] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.783859][T27547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8594'. [ 434.817983][ T28] audit: type=1400 audit(1784946008.327:3186): avc: denied { read } for pid=27546 comm="syz.2.8594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 434.857078][T27556] team0: Mode changed to "loadbalance" [ 435.146931][T27590] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8615'. [ 435.168214][T27557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8599'. [ 435.180951][T27592] loop5: detected capacity change from 0 to 128 [ 435.187796][T27557] geneve0: entered promiscuous mode [ 435.210326][T27594] netlink: 'syz.6.8617': attribute type 18 has an invalid length. [ 435.218918][T27594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8617'. [ 435.228483][T27594] netlink: 'syz.6.8617': attribute type 18 has an invalid length. [ 435.236777][T27594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8617'. [ 435.247446][T27592] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 435.249707][ T28] audit: type=1400 audit(1784946008.729:3187): avc: denied { name_bind } for pid=27595 comm="syz.2.8618" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 435.297638][T27592] ext4 filesystem being mounted at /1498/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 435.334941][ T28] audit: type=1400 audit(1784946008.814:3188): avc: denied { write } for pid=27591 comm="syz.5.8616" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 435.359319][ T28] audit: type=1400 audit(1784946008.842:3189): avc: denied { write } for pid=27591 comm="syz.5.8616" path="/1498/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 435.404072][ T28] audit: type=1400 audit(1784946008.842:3190): avc: denied { map } for pid=27591 comm="syz.5.8616" path="/1498/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 435.496023][ T5051] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 435.508216][T27604] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8621'. [ 435.781175][T27624] netlink: 71 bytes leftover after parsing attributes in process `syz.5.8629'. [ 436.003414][T27629] tipc: Started in network mode [ 436.026726][T27629] tipc: Node identity 2007ff, cluster identity 4711 [ 436.061332][T27629] tipc: Node number set to 2099199 [ 436.921509][ T28] audit: type=1400 audit(1784946010.292:3191): avc: denied { append } for pid=27645 comm="syz.6.8640" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 436.953767][T27646] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 436.962985][T27646] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 437.057024][ T28] audit: type=1400 audit(1784946010.423:3192): avc: denied { setopt } for pid=27658 comm="syz.2.8643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 437.164955][T27668] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.8649'. [ 437.260134][T27680] loop6: detected capacity change from 0 to 512 [ 437.290202][T27680] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 437.303865][T27680] EXT4-fs (loop6): orphan cleanup on readonly fs [ 437.312843][T27680] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 437.354109][T27680] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 437.368541][T27680] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.8655: bad orphan inode 768 [ 437.370575][T27691] netlink: 'syz.5.8659': attribute type 3 has an invalid length. [ 437.390259][T27680] loop6: lost filesystem error report for type 5 error -117 [ 437.392130][T27680] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 437.422340][T27691] netlink: 'syz.5.8659': attribute type 1 has an invalid length. [ 437.446945][T27691] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.8659'. [ 437.493848][T21648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.594643][T27712] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8670'. [ 438.542429][T27804] SELinux: failed to load policy [ 438.655562][T27819] netlink: 'syz.5.8715': attribute type 13 has an invalid length. [ 438.687272][T27823] loop6: detected capacity change from 0 to 2048 [ 438.729523][T27823] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.741976][T27823] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.778409][T21648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.841556][T27834] loop6: detected capacity change from 0 to 512 [ 438.863720][T27834] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 438.887145][T27834] EXT4-fs (loop6): 1 truncate cleaned up [ 438.896887][T27834] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.966882][T21648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.042273][T27843] loop6: detected capacity change from 0 to 512 [ 439.088146][T27843] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.115635][T27843] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.145266][T27843] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.8724: corrupted xattr block 33: invalid header [ 439.160498][T27843] EXT4-fs (loop6): Remounting filesystem read-only [ 439.167186][T27843] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 439.179514][T27843] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 439.188840][T27843] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 439.222785][T21648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.290563][T27863] tmpfs: Bad value for 'size' [ 439.430800][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 439.430820][ T28] audit: type=1326 audit(1784946012.641:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27833 comm="syz.5.8720" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97fa67de99 code=0x0 [ 440.134328][T27904] __nla_validate_parse: 1 callbacks suppressed [ 440.134396][T27904] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8749'. [ 440.159917][ T28] audit: type=1400 audit(1784946013.324:3224): avc: denied { ioctl } for pid=27905 comm="syz.2.8750" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 440.220823][ T28] audit: type=1326 audit(1784946013.362:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27907 comm="syz.1.8751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8d9cde99 code=0x7ffc0000 [ 440.250101][ T28] audit: type=1326 audit(1784946013.362:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27907 comm="syz.1.8751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f6b8d9cde99 code=0x7ffc0000 [ 440.276750][ T28] audit: type=1326 audit(1784946013.362:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27907 comm="syz.1.8751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8d9cde99 code=0x7ffc0000 [ 440.363532][ T28] audit: type=1326 audit(1784946013.362:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27907 comm="syz.1.8751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8d9cde99 code=0x7ffc0000 [ 440.446198][ T28] audit: type=1326 audit(1784946013.362:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27907 comm="syz.1.8751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8d9cde99 code=0x7ffc0000 [ 440.501707][ T28] audit: type=1326 audit(1784946013.362:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27907 comm="syz.1.8751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8d9cde99 code=0x7ffc0000 [ 440.574558][ T28] audit: type=1326 audit(1784946013.362:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27907 comm="syz.1.8751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8d9cde99 code=0x7ffc0000 [ 440.650508][ T28] audit: type=1326 audit(1784946013.362:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27907 comm="syz.1.8751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8d9cde99 code=0x7ffc0000 [ 440.720369][T27950] netlink: 'syz.5.8770': attribute type 4 has an invalid length. [ 440.741411][T27950] netlink: 'syz.5.8770': attribute type 4 has an invalid length. [ 441.147849][T27986] netlink: 'syz.2.8783': attribute type 4 has an invalid length. [ 441.175052][T27986] netlink: 'syz.2.8783': attribute type 4 has an invalid length. [ 441.464577][T28024] netlink: 'syz.7.8800': attribute type 4 has an invalid length. [ 441.519145][T28032] netlink: 'syz.7.8800': attribute type 4 has an invalid length. [ 441.539052][T28034] netlink: 'syz.1.8806': attribute type 1 has an invalid length. [ 441.585082][T28034] bond2: entered promiscuous mode [ 441.590465][T28034] 8021q: adding VLAN 0 to HW filter on device bond2 [ 441.620416][T28034] 8021q: adding VLAN 0 to HW filter on device bond2 [ 441.627978][T28034] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 441.638395][T28034] bond2: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 441.650872][T28034] bond2: (slave ip6gre2): making interface the new active one [ 441.658593][T28034] ip6gre2: entered promiscuous mode [ 441.665689][T28034] bond2: (slave ip6gre2): Enslaving as an active interface with an up link [ 441.702608][T28043] SELinux: failed to load policy [ 442.043594][T28077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8820'. [ 442.118793][T28077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8820'. [ 442.455138][T28094] netlink: 'syz.6.8823': attribute type 4 has an invalid length. [ 442.511264][T28089] netlink: 'syz.6.8823': attribute type 4 has an invalid length. [ 442.587589][T28097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8828'. [ 442.605332][T28097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8828'. [ 442.644410][T28097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8828'. [ 442.673234][T28097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8828'. [ 442.789881][T28119] loop6: detected capacity change from 0 to 736 [ 442.890805][T28127] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 444.013657][T28205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8874'. [ 444.228063][T28226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.519718][T28229] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.526995][T28229] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.534933][T28229] bridge_slave_0: entered allmulticast mode [ 444.541568][T28229] bridge_slave_0: entered promiscuous mode [ 444.548640][T28229] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.555955][T28229] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.563134][T28229] bridge_slave_1: entered allmulticast mode [ 444.571878][T28229] bridge_slave_1: entered promiscuous mode [ 444.593436][T28229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.604411][T28229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.627151][T28229] team0: Port device team_slave_0 added [ 444.634095][T28229] team0: Port device team_slave_1 added [ 444.652381][T28229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.659466][T28229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.685600][T28229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.696971][T28229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.704068][T28229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.730194][T28229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.774277][T28229] hsr_slave_0: entered promiscuous mode [ 444.780563][T28229] hsr_slave_1: entered promiscuous mode [ 444.786777][T28229] debugfs: 'hsr0' already exists in 'hsr' [ 444.792829][T28229] Cannot create hsr debugfs directory [ 444.913139][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 444.913156][ T28] audit: type=1400 audit(1784946017.769:3298): avc: denied { write } for pid=28267 comm="syz.7.8897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 444.950357][ T28] audit: type=1400 audit(1784946017.816:3299): avc: denied { search } for pid=28269 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.986163][ T28] audit: type=1400 audit(1784946017.816:3300): avc: denied { search } for pid=28269 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.019491][ T28] audit: type=1400 audit(1784946017.816:3301): avc: denied { search } for pid=28269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.058342][ T28] audit: type=1400 audit(1784946017.816:3302): avc: denied { search } for pid=28269 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.116952][ T28] audit: type=1400 audit(1784946017.835:3303): avc: denied { read } for pid=28274 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.173018][ T28] audit: type=1400 audit(1784946017.835:3304): avc: denied { read open } for pid=28274 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.256904][T28229] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 445.266984][ T28] audit: type=1400 audit(1784946017.835:3305): avc: denied { getattr } for pid=28274 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.313553][T28229] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 445.330203][T28229] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 445.349526][ T28] audit: type=1400 audit(1784946017.835:3306): avc: denied { getattr } for pid=28274 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 445.388242][T28229] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.418626][ T28] audit: type=1400 audit(1784946017.872:3307): avc: denied { read } for pid=28276 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 445.454071][T28229] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 445.466848][T28229] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 445.481028][T28229] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 445.524363][T28229] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 445.659874][T28229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.708259][T28229] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.724002][T19236] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.731213][T19236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.762129][T19136] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.769218][T19136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.069553][T28229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.400527][T28229] veth0_vlan: entered promiscuous mode [ 446.426649][T28229] veth1_vlan: entered promiscuous mode [ 446.445731][T28404] netlink: 'syz.2.8919': attribute type 39 has an invalid length. [ 446.450601][T28406] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8920'. [ 446.479859][T28229] veth0_macvtap: entered promiscuous mode [ 446.513972][T28229] veth1_macvtap: entered promiscuous mode [ 446.586888][T19136] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.600004][T19136] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.622154][T28229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.638797][T19136] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.648383][T19136] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.660481][T28229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.674613][T19236] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.687481][T19236] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.714860][T19236] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.724331][T19236] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.828103][T28443] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8887'. [ 446.857502][T28443] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8887'. [ 447.978808][T28533] syzkaller0: entered promiscuous mode [ 448.015430][T28533] syzkaller0: entered allmulticast mode [ 448.199498][T28545] netlink: 'syz.5.8956': attribute type 1 has an invalid length. [ 448.251226][T28545] netlink: 'syz.5.8956': attribute type 4 has an invalid length. [ 448.288194][T28545] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.8956'. [ 448.311222][T28559] netlink: 'syz.5.8956': attribute type 1 has an invalid length. [ 448.360158][T28559] netlink: 'syz.5.8956': attribute type 4 has an invalid length. [ 448.387168][T28559] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.8956'. [ 448.593938][T28589] netlink: 'syz.7.8965': attribute type 13 has an invalid length. [ 448.617463][T28593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8968'. [ 448.672691][T28593] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8968'. [ 449.451844][T28662] loop6: detected capacity change from 0 to 2048 [ 449.505327][T28662] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.524856][T28671] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8983'. [ 449.539302][T28661] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 449.559931][T28661] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 449.567227][T28671] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8983'. [ 449.574543][T19156] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.592906][T19156] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.601820][T28661] EXT4-fs (loop6): This should not happen!! Data will be lost [ 449.601820][T28661] [ 449.629843][T28673] macvlan1: entered promiscuous mode [ 449.637020][T28661] EXT4-fs (loop6): Total free blocks count 0 [ 449.643214][T28661] EXT4-fs (loop6): Free/Dirty block details [ 449.649280][T28661] EXT4-fs (loop6): free_blocks=4096 [ 449.651449][T28673] macvlan1: left promiscuous mode [ 449.655027][T28661] EXT4-fs (loop6): dirty_blocks=16 [ 449.665151][T28661] EXT4-fs (loop6): Block reservation details [ 449.671684][T28661] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 449.683667][T28662] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 449.696123][T19156] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.711035][T19156] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.738968][T21648] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 449.852235][T28687] netlink: 'syz.5.8989': attribute type 1 has an invalid length. [ 449.895320][T28687] bond8: (slave geneve7): making interface the new active one [ 449.903553][T28687] bond8: (slave geneve7): Enslaving as an active interface with an up link [ 449.914962][T19156] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 449.928198][T19156] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 449.949951][T19136] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 449.966275][T19136] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 450.450099][T28721] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9004'. [ 451.454223][T28748] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.461499][T28748] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.574432][T28748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.592954][T28748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.668402][T19134] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.686899][T19134] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.701490][T19134] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.743118][T19134] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.744402][T28759] netlink: 'syz.6.9019': attribute type 13 has an invalid length. [ 452.066294][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 452.066355][ T28] audit: type=1400 audit(1784946024.470:3357): avc: denied { execute } for pid=28783 comm="syz.6.9027" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=86089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 452.107294][T28784] random: crng reseeded on system resumption [ 452.150476][ T28] audit: type=1400 audit(1784946024.507:3358): avc: denied { write } for pid=28783 comm="syz.6.9027" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 452.183689][ T28] audit: type=1400 audit(1784946024.507:3359): avc: denied { open } for pid=28783 comm="syz.6.9027" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 452.488235][T28812] syz_tun: entered allmulticast mode [ 452.494343][T28811] syz_tun: left allmulticast mode [ 452.933787][ T28] audit: type=1400 audit(1784946025.274:3360): avc: denied { write } for pid=28864 comm="syz.2.9046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 453.873697][T28958] netlink: 232 bytes leftover after parsing attributes in process `syz.7.9059'. [ 453.931683][T28965] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9061'. [ 453.999045][ T28] audit: type=1400 audit(1784946026.276:3361): avc: denied { unmount } for pid=28972 comm="syz.5.9065" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 454.099611][T28987] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9071'. [ 454.111767][T28987] ip6gre3: entered promiscuous mode [ 454.117225][T28987] ip6gre3: entered allmulticast mode [ 454.125792][T28987] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9071'. [ 455.113011][T29016] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9083'. [ 455.140289][T29016] ip6gre1: entered promiscuous mode [ 455.153351][T29016] ip6gre1: entered allmulticast mode [ 455.196320][T29016] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9083'. [ 455.294617][T29030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9088'. [ 455.307964][T29034] loop6: detected capacity change from 0 to 512 [ 455.314819][T29030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9088'. [ 455.324603][T29034] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 455.342641][T29034] EXT4-fs (loop6): 1 truncate cleaned up [ 455.355784][T29034] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.375933][ T28] audit: type=1400 audit(1784946027.567:3362): avc: denied { write } for pid=29033 comm="syz.6.9091" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 455.470718][T21648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.529926][T29047] netlink: 180904 bytes leftover after parsing attributes in process `syz.5.9096'. [ 455.554258][T29047] netlink: zone id is out of range [ 455.753226][T29068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9105'. [ 455.769893][T29070] netlink: 'syz.9.9106': attribute type 7 has an invalid length. [ 455.793310][T29070] netlink: 'syz.9.9106': attribute type 7 has an invalid length. [ 455.802814][T29072] loop6: detected capacity change from 0 to 128 [ 455.811512][T29072] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 455.821863][T29072] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 455.834903][T29072] ext2 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.851443][ T28] audit: type=1400 audit(1784946028.016:3363): avc: denied { write } for pid=29071 comm="syz.6.9107" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 455.874102][ T28] audit: type=1400 audit(1784946028.016:3364): avc: denied { write } for pid=29071 comm="syz.6.9107" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 455.899288][ T28] audit: type=1400 audit(1784946028.016:3365): avc: denied { write } for pid=29071 comm="syz.6.9107" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 455.921999][ T28] audit: type=1400 audit(1784946028.016:3366): avc: denied { write } for pid=29071 comm="syz.6.9107" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 455.944843][T21648] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 456.384327][T29077] loop6: detected capacity change from 0 to 4096 [ 456.420918][T29077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.633137][T29114] netlink: 'syz.7.9122': attribute type 10 has an invalid length. [ 456.644321][T29114] : (slave dummy0): Enslaving as an active interface with an up link [ 456.654463][ T23] bridge0: port 3(vlan0) entered blocking state [ 456.660866][ T23] bridge0: port 3(vlan0) entered listening state [ 456.670336][T29114] vlan0: left allmulticast mode [ 456.675571][T29114] dummy0: left allmulticast mode [ 456.680724][T29114] vlan0: left promiscuous mode [ 456.685704][T29114] dummy0: left promiscuous mode [ 456.690905][T29114] bridge0: port 3(vlan0) entered disabled state [ 456.730869][T21648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.240435][T29146] loop6: detected capacity change from 0 to 512 [ 457.247051][T29146] EXT4-fs: Ignoring removed orlov option [ 457.253836][T29147] loop9: detected capacity change from 0 to 512 [ 457.265436][T29146] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.287291][T29147] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.345704][T21648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.466520][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 457.466538][ T28] audit: type=1400 audit(1784946029.523:3373): avc: denied { write } for pid=28229 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 457.498179][T28229] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 457.513874][ T28] audit: type=1400 audit(1784946029.523:3374): avc: denied { unlink } for pid=28229 comm="syz-executor" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 457.513909][ T28] audit: type=1400 audit(1784946029.523:3375): avc: denied { write } for pid=28229 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 457.513964][ T28] audit: type=1400 audit(1784946029.551:3376): avc: denied { write } for pid=28229 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 457.538292][T28229] EXT4-fs error (device loop9): ext4_readdir:225: inode #11: comm syz-executor: path /44/file0/lost+found: directory fails checksum at offset 8192 [ 457.616040][T28229] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 457.617133][ T28] audit: type=1400 audit(1784946029.663:3377): avc: denied { write } for pid=28229 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 457.645472][T28229] EXT4-fs error (device loop9): ext4_empty_dir:3114: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 457.667223][ T28] audit: type=1400 audit(1784946029.663:3378): avc: denied { rmdir } for pid=28229 comm="syz-executor" name="lost+found" dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 457.693527][T28229] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 457.720024][T28229] EXT4-fs error (device loop9): ext4_readdir:225: inode #11: comm syz-executor: path /44/file0/lost+found: directory fails checksum at offset 8192 [ 457.749437][T28229] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 457.756962][ T28] audit: type=1400 audit(1784946029.785:3379): avc: denied { write } for pid=28229 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 457.778895][T28229] EXT4-fs error (device loop9): ext4_empty_dir:3114: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 457.825338][T28229] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 457.854836][T28229] EXT4-fs error (device loop9): ext4_readdir:225: inode #11: comm syz-executor: path /44/file0/lost+found: directory fails checksum at offset 8192 [ 457.888460][T28229] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 457.889387][ T28] audit: type=1400 audit(1784946029.916:3380): avc: denied { write } for pid=28229 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 457.932044][T28229] EXT4-fs error (device loop9): ext4_empty_dir:3114: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 457.945869][T28229] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 457.976201][T28229] EXT4-fs error (device loop9): ext4_readdir:225: inode #11: comm syz-executor: path /44/file0/lost+found: directory fails checksum at offset 8192 [ 458.000894][T28229] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 458.001186][ T28] audit: type=1400 audit(1784946030.019:3381): avc: denied { write } for pid=28229 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 458.039048][T28229] EXT4-fs error (device loop9): ext4_empty_dir:3114: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 458.052645][T28229] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 458.078833][T28229] EXT4-fs error (device loop9): ext4_readdir:225: inode #11: comm syz-executor: path /44/file0/lost+found: directory fails checksum at offset 8192 [ 458.105064][T28229] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 458.106143][ T28] audit: type=1400 audit(1784946030.122:3382): avc: denied { write } for pid=28229 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 458.125953][T28229] EXT4-fs error (device loop9): ext4_empty_dir:3114: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 458.333941][T28229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.381123][T29206] xt_socket: unknown flags 0x4c [ 458.631628][T29208] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.638878][T29208] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.646166][T29208] bridge_slave_0: entered allmulticast mode [ 458.653099][T29208] bridge_slave_0: entered promiscuous mode [ 458.660009][T29208] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.667308][T29208] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.674711][T29208] bridge_slave_1: entered allmulticast mode [ 458.681475][T29208] bridge_slave_1: entered promiscuous mode [ 458.699869][T29208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.710581][T29208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.731502][T29208] team0: Port device team_slave_0 added [ 458.738449][T29208] team0: Port device team_slave_1 added [ 458.754937][T29208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.762146][T29208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.788308][T29208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.800188][T29208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.807187][T29208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.833356][T29208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.860589][T29208] hsr_slave_0: entered promiscuous mode [ 458.866878][T29208] hsr_slave_1: entered promiscuous mode [ 458.872842][T29208] debugfs: 'hsr0' already exists in 'hsr' [ 458.878600][T29208] Cannot create hsr debugfs directory [ 459.119726][T29208] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 459.128629][T29208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 459.136563][T29208] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 459.145902][T29208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 459.153943][T29208] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 459.163298][T29208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 459.171150][T29208] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 459.180465][T29208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 459.198142][T29208] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.205313][T29208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.212670][T29208] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.219774][T29208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.276796][T29208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.291563][T19219] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.299539][T19219] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.311934][T29208] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.322593][T19219] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.329769][T19219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.340531][T19201] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.347625][T19201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.402742][T22501] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.412574][T19219] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.437809][T29208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 459.479243][T19219] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.496486][T19219] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.616867][T29317] netlink: 'syz.5.9176': attribute type 15 has an invalid length. [ 459.628789][T29317] __nla_validate_parse: 3 callbacks suppressed [ 459.628803][T29317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9176'. [ 459.649638][T29317] netlink: 'syz.5.9176': attribute type 15 has an invalid length. [ 459.657667][T19201] netdevsim netdevsim5 eth0: set [0, 1] type 1 family 0 port 2304 - 0 [ 459.665938][T29317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9176'. [ 459.668479][T19201] netdevsim netdevsim5 eth1: set [0, 1] type 1 family 0 port 2304 - 0 [ 459.705996][T19201] netdevsim netdevsim5 eth2: set [0, 1] type 1 family 0 port 2304 - 0 [ 459.719091][T19201] netdevsim netdevsim5 eth3: set [0, 1] type 1 family 0 port 2304 - 0 [ 459.796636][T29208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.842438][T29347] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9180'. [ 459.866554][T29347] netlink: 'syz.6.9180': attribute type 11 has an invalid length. [ 459.884576][T29347] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9180'. [ 459.912329][T29347] netlink: 'syz.6.9180': attribute type 11 has an invalid length. [ 460.091780][T29208] veth0_vlan: entered promiscuous mode [ 460.118479][T29208] veth1_vlan: entered promiscuous mode [ 460.151509][T29208] veth0_macvtap: entered promiscuous mode [ 460.159031][T29208] veth1_macvtap: entered promiscuous mode [ 460.172051][T29208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.184682][T29208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.196761][T22501] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.206273][T22501] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.227593][T22501] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.238323][T22501] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.387751][T29411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9188'. [ 460.428294][T29411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9188'. [ 460.452559][T29411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9188'. [ 460.465995][T29411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9188'. [ 460.628005][T29437] netlink: 84 bytes leftover after parsing attributes in process `syz.7.9193'. [ 461.132313][T29502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9204'. [ 462.816956][ T28] kauditd_printk_skb: 168 callbacks suppressed [ 462.816971][ T28] audit: type=1326 audit(1784946034.529:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29617 comm="syz.8.9243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f723b73e6ce code=0x7ffc0000 [ 462.865731][ T28] audit: type=1326 audit(1784946034.567:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29617 comm="syz.8.9243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f723b73e6ce code=0x7ffc0000 [ 462.892088][ T28] audit: type=1326 audit(1784946034.567:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29617 comm="syz.8.9243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f723b73e6ce code=0x7ffc0000 [ 462.918290][ T28] audit: type=1326 audit(1784946034.567:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29617 comm="syz.8.9243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f723b73e6ce code=0x7ffc0000 [ 462.962004][ T28] audit: type=1326 audit(1784946034.567:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29617 comm="syz.8.9243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f723b73e6ce code=0x7ffc0000 [ 463.040785][ T28] audit: type=1326 audit(1784946034.567:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29617 comm="syz.8.9243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f723b73e6ce code=0x7ffc0000 [ 463.067835][T29635] uprobe: syz.6.9249:29635 failed to unregister, leaking uprobe [ 463.076229][ T28] audit: type=1326 audit(1784946034.567:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29617 comm="syz.8.9243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f723b73e6ce code=0x7ffc0000 [ 463.102681][ T28] audit: type=1326 audit(1784946034.576:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29617 comm="syz.8.9243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f723b73e6ce code=0x7ffc0000 [ 463.128629][ T28] audit: type=1326 audit(1784946034.576:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29617 comm="syz.8.9243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f723b73e6ce code=0x7ffc0000 [ 463.155856][ T28] audit: type=1326 audit(1784946034.576:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29617 comm="syz.8.9243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f723b73e6ce code=0x7ffc0000 [ 465.327319][T29740] __nla_validate_parse: 4 callbacks suppressed [ 465.327339][T29740] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9293'. [ 465.430432][T29748] netlink: 'syz.2.9297': attribute type 3 has an invalid length. [ 465.450816][T29748] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.9297'. [ 466.317166][T29759] loop8: detected capacity change from 0 to 1024 [ 466.506182][T29759] EXT4-fs: Ignoring removed bh option [ 466.535017][T29759] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 466.711866][T29759] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.046409][T29208] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.083770][T29802] netlink: 228 bytes leftover after parsing attributes in process `syz.5.9319'. [ 467.146287][T29811] loop6: detected capacity change from 0 to 512 [ 467.162737][T29811] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.336855][T29829] loop8: detected capacity change from 0 to 256 [ 467.365227][T29829] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 467.371950][T21648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.898848][T29842] syz.7.9336 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 467.930647][T29842] CPU: 0 UID: 0 PID: 29842 Comm: syz.7.9336 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 467.930758][T29842] Tainted: [W]=WARN [ 467.930766][T29842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 467.930780][T29842] Call Trace: [ 467.930787][T29842] [ 467.930796][T29842] __dump_stack+0x1d/0x30 [ 467.930823][T29842] dump_stack_lvl+0x95/0xd0 [ 467.930927][T29842] dump_stack+0x15/0x1b [ 467.930952][T29842] dump_header+0x80/0x240 [ 467.930983][T29842] oom_kill_process+0x295/0x350 [ 467.931076][T29842] out_of_memory+0x981/0xbc0 [ 467.931149][T29842] try_charge_memcg+0x621/0xa00 [ 467.931189][T29842] charge_memcg+0x6d/0x120 [ 467.931286][T29842] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 467.931334][T29842] swap_cache_alloc_folio+0x47b/0x5e0 [ 467.931379][T29842] swap_cluster_readahead+0x2b1/0x460 [ 467.931446][T29842] swapin_readahead+0xd8/0x8a0 [ 467.931488][T29842] ? _raw_spin_unlock+0x9/0x30 [ 467.931527][T29842] ? swap_put_entries_cluster+0x49c/0x4c0 [ 467.931573][T29842] ? wake_page_function+0x11a/0x1f0 [ 467.931636][T29842] ? __wake_up_locked_key+0x3d/0x60 [ 467.931666][T29842] ? __rcu_read_unlock+0x4e/0x70 [ 467.931735][T29842] ? swap_cache_get_folio+0x1f7/0x200 [ 467.931793][T29842] do_swap_page+0x2a2/0x1ec0 [ 467.931850][T29842] ? __css_rstat_updated+0xbb/0x280 [ 467.931885][T29842] ? __rcu_read_lock+0x36/0x50 [ 467.931919][T29842] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 467.931961][T29842] handle_mm_fault+0xb3c/0x2da0 [ 467.932068][T29842] do_user_addr_fault+0x634/0x1060 [ 467.932106][T29842] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 467.932140][T29842] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 467.932206][T29842] ? trace_page_fault_user+0x1f/0xa0 [ 467.932237][T29842] exc_page_fault+0x62/0xa0 [ 467.932279][T29842] asm_exc_page_fault+0x26/0x30 [ 467.932362][T29842] RIP: 0033:0x7ff330e48ff8 [ 467.932380][T29842] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 467.932423][T29842] RSP: 002b:00007ffe7a0b9400 EFLAGS: 00010246 [ 467.932441][T29842] RAX: 0000000000000000 RBX: 0000555565216500 RCX: 00007ff330e4e6ce [ 467.932460][T29842] RDX: 00007ffe7a0b9450 RSI: 0000000000000000 RDI: 0000000000000000 [ 467.932532][T29842] RBP: 00007ff331117da0 R08: 0000000000000000 R09: 0000000000000000 [ 467.932550][T29842] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000006e6ce [ 467.932568][T29842] R13: 00007ff33111609c R14: 000000000006e3fc R15: 00007ff331116090 [ 467.932597][T29842] [ 468.184477][T29842] memory: usage 307200kB, limit 307200kB, failcnt 130 [ 468.191481][T29842] memory+swap: usage 308240kB, limit 9007199254740988kB, failcnt 0 [ 468.199422][T29842] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 468.206810][T29842] Memory cgroup stats for /syz7: [ 468.207119][T29842] cache 0 [ 468.215173][T29842] rss 4096 [ 468.218219][T29842] shmem 0 [ 468.221250][T29842] mapped_file 0 [ 468.224747][T29842] dirty 0 [ 468.227700][T29842] writeback 0 [ 468.231011][T29842] workingset_refault_anon 3247 [ 468.235836][T29842] workingset_refault_file 0 [ 468.240427][T29842] swap 1064960 [ 468.243818][T29842] swapcached 33181696 [ 468.247888][T29842] pgpgin 389642 [ 468.251355][T29842] pgpgout 389641 [ 468.255039][T29842] pgfault 395481 [ 468.260274][T29842] pgmajfault 113 [ 468.265613][T29842] inactive_anon 0 [ 468.269336][T29842] active_anon 4096 [ 468.273144][T29842] inactive_file 0 [ 468.276943][T29842] active_file 0 [ 468.280430][T29842] unevictable 0 [ 468.283913][T29842] hierarchical_memory_limit 314572800 [ 468.292994][T29842] hierarchical_memsw_limit 9223372036854771712 [ 468.300347][T29842] total_cache 0 [ 468.303989][T29842] total_rss 4096 [ 468.307577][T29842] total_shmem 0 [ 468.311189][T29842] total_mapped_file 0 [ 468.315210][T29842] total_dirty 0 [ 468.318696][T29842] total_writeback 0 [ 468.322564][T29842] total_workingset_refault_anon 3247 [ 468.327869][T29842] total_workingset_refault_file 0 [ 468.332966][T29842] total_swap 1064960 [ 468.336895][T29842] total_swapcached 33181696 [ 468.341523][T29842] total_pgpgin 389642 [ 468.345526][T29842] total_pgpgout 389641 [ 468.349642][T29842] total_pgfault 395481 [ 468.353918][T29842] total_pgmajfault 113 [ 468.358013][T29842] total_inactive_anon 0 [ 468.362234][T29842] total_active_anon 4096 [ 468.366491][T29842] total_inactive_file 0 [ 468.370666][T29842] total_active_file 0 [ 468.379101][T29842] total_unevictable 0 [ 468.383196][T29842] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.9336,pid=29842,uid=0 [ 468.397981][T29842] Memory cgroup out of memory: Killed process 29842 (syz.7.9336) total-vm:94180kB, anon-rss:1244kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:0 [ 468.415467][T29843] syz.7.9336 (29843) used greatest stack depth: 9048 bytes left [ 468.766591][ T28] kauditd_printk_skb: 205 callbacks suppressed [ 468.766620][ T28] audit: type=1326 audit(1784946040.097:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29895 comm="syz.8.9356" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f723b77de99 code=0x0 [ 469.010998][ T28] audit: type=1326 audit(1784946040.322:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29904 comm="syz.2.9358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088174de99 code=0x7ffc0000 [ 469.037055][ T28] audit: type=1326 audit(1784946040.322:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29904 comm="syz.2.9358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088174de99 code=0x7ffc0000 [ 469.063009][ T28] audit: type=1326 audit(1784946040.322:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29904 comm="syz.2.9358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088174de99 code=0x7ffc0000 [ 469.091456][ T28] audit: type=1326 audit(1784946040.322:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29904 comm="syz.2.9358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088174de99 code=0x7ffc0000 [ 469.117580][ T28] audit: type=1326 audit(1784946040.322:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29904 comm="syz.2.9358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f088174de99 code=0x7ffc0000 [ 469.143921][ T28] audit: type=1326 audit(1784946040.387:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29904 comm="syz.2.9358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f088170e6ce code=0x7ffc0000 [ 469.170161][ T28] audit: type=1326 audit(1784946040.387:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29904 comm="syz.2.9358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f088170e6ce code=0x7ffc0000 [ 469.203278][ T28] audit: type=1326 audit(1784946040.387:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29904 comm="syz.2.9358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f088170e6ce code=0x7ffc0000 [ 469.246420][ T28] audit: type=1326 audit(1784946040.387:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29904 comm="syz.2.9358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f088170e6ce code=0x7ffc0000 [ 470.321622][T29943] loop8: detected capacity change from 0 to 4096 [ 470.393716][T29943] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.446991][T30023] 9p: Bad value for 'wfdno' [ 470.809627][T29208] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.058624][T30059] netlink: 228 bytes leftover after parsing attributes in process `syz.6.9385'. [ 471.240377][T30087] loop6: detected capacity change from 0 to 512 [ 471.247699][T30087] EXT4-fs: test_dummy_encryption option not supported [ 471.263098][T30087] tipc: Started in network mode [ 471.269652][T30087] tipc: Node identity ac14140f, cluster identity 4711 [ 471.283295][T30087] tipc: Enabled bearer , priority 10 [ 471.407737][T30072] loop8: detected capacity change from 0 to 4096 [ 471.418060][T30072] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.573240][T30072] ================================================================== [ 471.581363][T30072] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 471.588855][T30072] [ 471.591204][T30072] read-write to 0xffff88811b3e3d90 of 8 bytes by task 19176 on cpu 0: [ 471.599380][T30072] __xa_clear_mark+0xf5/0x1e0 [ 471.604099][T30072] __folio_end_writeback+0xf4/0x360 [ 471.609306][T30072] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 471.615566][T30072] folio_end_writeback+0x1c/0x70 [ 471.620516][T30072] ext4_finish_bio+0x454/0x770 [ 471.625293][T30072] ext4_release_io_end+0x9f/0x1f0 [ 471.630347][T30072] ext4_end_io_end+0x18d/0x240 [ 471.635134][T30072] ext4_end_io_rsv_work+0x15b/0x1f0 [ 471.640334][T30072] process_scheduled_works+0x4d4/0x9a0 [ 471.645806][T30072] worker_thread+0x569/0x750 [ 471.650415][T30072] kthread+0x221/0x270 [ 471.654500][T30072] ret_from_fork+0x146/0x330 [ 471.659107][T30072] ret_from_fork_asm+0x1a/0x30 [ 471.663884][T30072] [ 471.666227][T30072] read to 0xffff88811b3e3d90 of 8 bytes by task 30072 on cpu 1: [ 471.673855][T30072] xas_find_marked+0x211/0x650 [ 471.678628][T30072] filemap_get_folios_tag+0xf7/0x400 [ 471.683936][T30072] file_write_and_wait_range+0x20c/0x2f0 [ 471.689614][T30072] mmb_fsync_noflush+0x48/0x140 [ 471.694508][T30072] ext4_sync_file+0x1f2/0x6d0 [ 471.699237][T30072] vfs_fsync_range+0xc5/0xe0 [ 471.703872][T30072] ext4_buffered_write_iter+0x426/0x480 [ 471.709462][T30072] ext4_file_write_iter+0xb1f/0xef0 [ 471.714680][T30072] do_iter_readv_writev+0x4f6/0x5a0 [ 471.719904][T30072] vfs_writev+0x2d1/0x8b0 [ 471.724255][T30072] __se_sys_pwritev2+0xfc/0x1c0 [ 471.729156][T30072] __x64_sys_pwritev2+0x67/0x80 [ 471.734020][T30072] x64_sys_call+0xe07/0x3020 [ 471.738633][T30072] do_syscall_64+0x136/0x3c0 [ 471.743281][T30072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.749211][T30072] [ 471.751548][T30072] value changed: 0xffffffffffffffc0 -> 0xfffffffffe000000 [ 471.758656][T30072] [ 471.760982][T30072] Reported by Kernel Concurrency Sanitizer on: [ 471.767139][T30072] CPU: 1 UID: 0 PID: 30072 Comm: syz.8.9391 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 471.778119][T30072] Tainted: [W]=WARN [ 471.781925][T30072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 471.791990][T30072] ================================================================== [ 471.888963][T29208] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.475650][ T912] tipc: Node number set to 2886997007