last executing test programs: 10m48.634865582s ago: executing program 32 (id=506): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f0000000740)=@ethtool_drvinfo={0x3, "8fdcf1a08830f6611655ad216f330d509148154569fd32b69d44918e9fbd4190", "e78dde77e1db30e6b9481ce9613105ee7b3a312e7eda07135b88bc515bcff935", "11f8bd7af6f8aa3af24bec1bf7ff200b78943bf8b5bb89117d6120f7900d8912", "50f9df316a121efe5602a16a50473905e944c4fc761a57efcf06721c860d1dea", "19f6a211891eddcc831efec0ffb22e70609c3b9100b84f8cecc4aaf5fcabe5db", "8bb3ad7bbd28fa15d22c0120", 0xba, 0x9, 0x5, 0x0, 0x6}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) 10m38.300434159s ago: executing program 33 (id=1034): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) sendfile(r0, r0, 0x0, 0xe3aa6ea) 10m0.761459831s ago: executing program 34 (id=1892): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) io_setup(0x5, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000880)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f00000004c0)="e4", 0x1, 0x5, 0x0, 0x2}]) 9m33.584654347s ago: executing program 35 (id=2394): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000013c0)=[{}, {}]) 8m52.557652565s ago: executing program 36 (id=3344): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@nolazytime}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x456, &(0x7f0000002380)="$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") creat(&(0x7f0000000380)='./file0/file0\x00', 0x132) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) chmod(&(0x7f0000000100)='./file1\x00', 0x161) 7m56.203037459s ago: executing program 37 (id=4155): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x3, 'netpci0\x00', {0x1}, 0x4}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7220000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 7m32.987945934s ago: executing program 38 (id=4638): socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x12, "1fe473a8cb3169d4d5b7259627b5cf5b8a50"}, &(0x7f0000000700)=0xfdad) 7m23.44885535s ago: executing program 39 (id=4548): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1600) 7m20.36422298s ago: executing program 40 (id=4788): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 6m59.674784808s ago: executing program 9 (id=5133): mmap(&(0x7f0000199000/0x1000)=nil, 0x1000, 0xb635773f046bbefb, 0x12, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000199000/0x3000)=nil, 0x3000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x524, &(0x7f0000000680)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0xe, 0x7fff0001}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x2000007ff) 6m59.381058664s ago: executing program 9 (id=5141): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000340)={0x0, 0x2, 0x2, 'wq'}, 0xa) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="02"], 0x9) 6m59.256746707s ago: executing program 9 (id=5146): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r1 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r1, 0x4, 0x102800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002a0, 0xc, 0x0, &(0x7f0000000300)="b9e0e7c56300698c0ba00a0d", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) 6m59.196171048s ago: executing program 9 (id=5157): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, 0x0, 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20) 6m59.16598972s ago: executing program 9 (id=5150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000010ffffffffffffaaaaaaaaaaaa88a854008100340086dd"], 0x4a) 6m58.870599426s ago: executing program 9 (id=5156): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 6m58.808397168s ago: executing program 41 (id=5156): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 5m10.058214557s ago: executing program 3 (id=7058): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYRES8=r0], 0x10) 5m9.984642929s ago: executing program 3 (id=7060): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xd}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) readv(r0, &(0x7f0000000740)=[{&(0x7f00000005c0)=""/189, 0xbd}], 0x1) close_range(r0, r1, 0x0) 5m9.545465919s ago: executing program 3 (id=7066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m9.49298696s ago: executing program 3 (id=7068): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 5m9.321794613s ago: executing program 3 (id=7069): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 5m8.788395216s ago: executing program 3 (id=7074): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = io_uring_setup(0x589c, &(0x7f0000000040)={0x0, 0x3b3, 0x80, 0x3, 0x189}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 5m8.788302316s ago: executing program 42 (id=7074): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = io_uring_setup(0x589c, &(0x7f0000000040)={0x0, 0x3b3, 0x80, 0x3, 0x189}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 4m13.672486522s ago: executing program 8 (id=7764): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000039000100faff070004000000000004"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffedd}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m12.624234816s ago: executing program 8 (id=7774): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m12.523631148s ago: executing program 8 (id=7780): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x7}, 0xc41, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x500) r1 = openat(r0, &(0x7f0000000000)='./bus\x00', 0xc0002, 0xc0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 4m11.603639829s ago: executing program 8 (id=7785): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000000300)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d682000000000000000000000001", [0x7]}) unlink(&(0x7f0000000100)='./file1\x00') 4m11.224797518s ago: executing program 8 (id=7796): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x28000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) close(0x3) 4m10.701394039s ago: executing program 8 (id=7804): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(0x0, 0x66842, 0x21) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f00000003c0)='ext2\x00', &(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x40, &(0x7f00000005c0)={[{@resgid}, {@jqfmt_vfsv0}, {@noacl}, {@nouser_xattr}], [{@smackfsdef={'smackfsdef', 0x3d, '(:'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_eq}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0x4}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000040)={0x4, "61d2be22a9ae314238991451f45a8e0bd5fdaa3fb4a39f3a5fb5d38174b5059d260d6c6ed11266be7fc0b8de6b3b9609f90a23c7f3947cabefc185f238de1ad2"}) 4m10.70106911s ago: executing program 43 (id=7804): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(0x0, 0x66842, 0x21) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f00000003c0)='ext2\x00', &(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x40, &(0x7f00000005c0)={[{@resgid}, {@jqfmt_vfsv0}, {@noacl}, {@nouser_xattr}], [{@smackfsdef={'smackfsdef', 0x3d, '(:'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_eq}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0x4}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000040)={0x4, "61d2be22a9ae314238991451f45a8e0bd5fdaa3fb4a39f3a5fb5d38174b5059d260d6c6ed11266be7fc0b8de6b3b9609f90a23c7f3947cabefc185f238de1ad2"}) 2m35.290977797s ago: executing program 7 (id=9338): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x20048001}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@sndinfo={0x20, 0x84, 0x2, {0xc5e, 0x4, 0x1, 0x168c240b, r1}}], 0x20, 0xc005}], 0x1, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x8000}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 2m35.215586709s ago: executing program 7 (id=9339): bind$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x62040200) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) unshare(0x6020400) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x325}, 0x100, 0x0, 0x0, 0x5, 0xfc1a, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x1e, 0x805, 0x0) close(r0) 2m34.896988856s ago: executing program 7 (id=9341): r0 = memfd_create(0x0, 0x6) fcntl$addseals(r0, 0x409, 0x7) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_mrelease(0xffffffffffffffff, 0x1000000) 2m34.063803295s ago: executing program 7 (id=9354): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 2m33.603725385s ago: executing program 7 (id=9355): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x1000000}, 0x10) 2m32.889880502s ago: executing program 7 (id=9371): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x106) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0xd25b, @ipv4={'\x00', '\xff\xff', @local}, 0xda}}, 0x24) 2m32.846769803s ago: executing program 44 (id=9371): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x106) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0xd25b, @ipv4={'\x00', '\xff\xff', @local}, 0xda}}, 0x24) 1m35.578890228s ago: executing program 4 (id=10213): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70, 0x80000}, 0x20) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x88064, 0x0) 1m35.49107938s ago: executing program 4 (id=10217): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x36d8}, 0x0, 0xf7ffffbfffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, 0x0, 0x0) fadvise64(r0, 0x807f, 0x1000000, 0x4) 1m34.366863225s ago: executing program 4 (id=10244): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x8fb, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_bp={0x0}, 0x2000, 0x8, 0x10003, 0x1, 0x5, 0x10004, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 1m33.758741669s ago: executing program 4 (id=10248): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') syz_usb_connect(0x3, 0x24, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) 1m33.223213371s ago: executing program 4 (id=10256): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f"], 0xcfa4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m32.272514033s ago: executing program 4 (id=10264): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x862b01) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m32.272382033s ago: executing program 45 (id=10264): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x862b01) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.507561993s ago: executing program 2 (id=11411): write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x4060, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000040, 0x1, 0x0, 0x4, 0x0, 0x40, 0xfffffffc}, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x13, 0x0) 2.359935306s ago: executing program 2 (id=11413): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.845138948s ago: executing program 5 (id=11416): r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x10000, 0x80, 0x30}, 0x18) mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 1.815522159s ago: executing program 5 (id=11418): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400072000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.75215354s ago: executing program 5 (id=11420): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f0000002380)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) r3 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r3, 0x402, 0x8000003b) r4 = open(&(0x7f0000000040)='.\x00', 0x163100, 0x0) getdents64(r4, &(0x7f0000000fc0)=""/224, 0x18) 1.637653183s ago: executing program 6 (id=11421): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x98, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xb6}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x3}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x281}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x40}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xe}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x7fff}, @ETHTOOL_A_COALESCE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000080}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 1.592511854s ago: executing program 0 (id=11423): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './bus\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x100, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1.554698515s ago: executing program 2 (id=11424): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getgid() unshare(0x64000600) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1210090, &(0x7f0000000340)={[{@user_xattr}, {@delalloc}, {@nojournal_checksum}, {@nobh}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@i_version}, {@data_err_ignore}, {@discard}, {@user_xattr}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}]}, 0x3, 0x58d, &(0x7f0000000dc0)="$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") llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) 1.480289786s ago: executing program 5 (id=11425): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = io_uring_setup(0x2fac, &(0x7f0000000500)={0x0, 0x9d1d, 0x40, 0x1007, 0x125}) close_range(r3, 0xffffffffffffffff, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.478945116s ago: executing program 6 (id=11435): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.410857508s ago: executing program 1 (id=11426): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) 1.410326608s ago: executing program 0 (id=11437): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) accept(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0, 0x0) 1.170871503s ago: executing program 2 (id=11427): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x100000, 0x800, 0x3, 0x1}, 0x20) set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10) 1.170224583s ago: executing program 6 (id=11439): creat(0x0, 0xc2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180), 0x4, 0x2000000000000357}}, 0x3c) 1.128843674s ago: executing program 2 (id=11428): mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x80, 0x0, 0x0, 0x7, 0x16584, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x80000004, 0x7ffc}, 0x7602, 0x5, 0x0, 0x0, 0x5, 0x6, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.128569084s ago: executing program 1 (id=11429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x3, 0x0, 0x4, 0x2, 0x1, 0x101, 0x7fff, 0x89b, 0x99, 0x8, 0x5, 0x8, 0x49, 0x4, 0x5, 0x4, 0x5f1b6026, 0x9, 0x200, 0x3, 0xb3f, 0x1, 0x0, 0x73a, 0x1d, 0x9, 0x1, 0x4, 0x6, 0x0, 0x81, 0x4, 0x1000, 0x2, 0x8ffc, 0x83, 0x81, 0x8, 0x1, 0xe9, 0x9, 0x7, 0x2, 0xfffffff8, 0x6, 0x2, 0x23, 0x9, 0x1, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x3, 0xfffffffa, 0xc, 0x10001, 0x5, 0x10001, 0x4, 0xfe7, 0x5, 0xa0, 0x0, 0x9, 0x3, 0x2, 0xfffffff1, 0x812, 0x7, 0x2, 0x800, 0x10000, 0x5, 0x7, 0x8, 0x1bd, 0x9, 0x7, 0x3, 0x8, 0x6, 0x9, 0x3, 0x40000, 0x200, 0x0, 0xd4, 0xa1a, 0x588, 0x7, 0x6, 0xe, 0x9, 0x2, 0x6, 0x8000b44, 0x0, 0x4, 0x800, 0x5, 0x9, 0x8, 0x0, 0x2, 0x9, 0x407c, 0x6, 0x6, 0x5, 0x0, 0x7, 0x7, 0xb, 0xd8, 0xfffffff7, 0x4, 0x5, 0x1, 0x80000001, 0x7ff, 0xe, 0x5, 0x80, 0x0, 0x9, 0xe94c, 0x5, 0x6, 0x1, 0x8002, 0x3, 0xbf2d, 0x1ff, 0xfffffffa, 0x101, 0x5, 0x2, 0x10, 0x7fffffff, 0x1, 0x1, 0x1, 0x3, 0x47, 0x22, 0x96e4, 0xd8d0, 0xf0, 0x8000, 0x6, 0x80000000, 0x4, 0x3, 0x5, 0x0, 0x5, 0xd2, 0x2, 0x0, 0x1000, 0xe, 0x8, 0xfd, 0x3, 0xa155, 0x9, 0x4, 0x4, 0x4920, 0x5, 0x5a, 0x2, 0x5, 0x2000c, 0x9, 0x2, 0x101, 0xb094, 0x4, 0x7, 0x6, 0x80000000, 0x81, 0x1, 0x0, 0x200, 0x2, 0x428, 0x2000, 0x0, 0x81, 0x0, 0x80000001, 0x3, 0x400, 0x1, 0x6, 0x6, 0xff, 0x5, 0x6, 0x0, 0x5, 0x8f76, 0x4, 0x8000, 0xffffff01, 0xf, 0x0, 0x6, 0xf, 0x3, 0x9, 0x8000, 0x7, 0xffffffff, 0x7ff, 0x2d, 0x1, 0x2, 0x9, 0x3, 0xffffffff, 0x400, 0xfffffffc, 0x6, 0x1, 0x2, 0x7, 0x80000000, 0x7, 0x0, 0xc, 0x0, 0x9, 0x22fbb94a, 0x1, 0x0, 0x5, 0x3, 0x7, 0x0, 0xfffffde3, 0x4, 0x6, 0xd75, 0x1, 0xbc, 0xa, 0x2, 0x8, 0x5, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7ffb, 0x7, 0x9, 0x3, 0x5, 0x775, 0xffff, 0x800, 0x4, 0x2a28, 0x0, 0x6, 0x8, 0x3f, 0x10000, 0xc, 0x1, 0x7, 0x8, 0xe, 0x8, 0x3, 0x1, 0x7c, 0x1, 0x8000, 0x0, 0xeb3, 0x7, 0x81, 0x7, 0x3cb, 0x3, 0xb, 0x6, 0x1, 0x7, 0x8, 0xe8, 0x6, 0xffff, 0x9, 0x0, 0x6, 0x7f, 0xfffffff7, 0x8, 0x2, 0x3, 0xdd0f, 0xfa, 0x1, 0x77e, 0x20000005, 0x100, 0xffffffff, 0x101, 0x5, 0x0, 0x8, 0x6b, 0x2, 0x0, 0x5, 0x3, 0x4, 0x3, 0x5, 0x4, 0x7f, 0x2, 0x9, 0x4, 0x8000, 0x2, 0x80000001, 0xfffffffa, 0x4004, 0x7, 0x6fc9, 0x9, 0x1, 0x9, 0x7ffe, 0x9, 0x59, 0x2, 0x18fb, 0x2, 0x75f, 0x7, 0x3000000, 0x1, 0x16, 0x4, 0x66cf, 0x0, 0x2003, 0x7, 0xfe, 0x9, 0xa, 0x1, 0x7, 0xb5f, 0x2, 0x3, 0x2, 0x80000000, 0x9, 0x0, 0x1ff, 0x2, 0x10000, 0x8000, 0x8, 0xfff, 0x5256f118, 0x2, 0x1000, 0x8f35, 0x0, 0x7fffffff, 0x492, 0x8, 0x6, 0x4, 0x9, 0x1, 0x6, 0x1, 0xffff, 0xf, 0x38e, 0x5, 0x0, 0x6, 0x7, 0x256056b8, 0x9, 0x1, 0x80, 0x2, 0x7fffffff, 0x6, 0x1, 0x1c9, 0x1, 0x4, 0x6, 0x8001, 0x2, 0x179, 0x7f, 0x4, 0x4, 0x4, 0x100000, 0xfffffffb, 0xe, 0x81, 0xf25, 0x400, 0x0, 0x5, 0x5, 0xfffff41b, 0x2, 0x7ff, 0xffff, 0x8, 0x7, 0x9, 0xffffffff, 0x10001, 0x9e, 0x7, 0x200, 0x6, 0x2, 0x9, 0x8, 0x4, 0x3, 0x401a, 0x3ff, 0x3, 0x7, 0xd, 0x6, 0x1000, 0x9, 0x4, 0xf, 0xffffffff, 0x65, 0x1, 0x8, 0xa, 0x6, 0x8, 0x8001, 0x75, 0x6, 0x8, 0xfffffff9, 0x6, 0x0, 0x7ff, 0xea, 0x8001, 0x2, 0x101, 0x7, 0x80000000, 0x6, 0x2, 0x6, 0x4, 0x2, 0x3, 0x800002, 0x6, 0x7, 0x4, 0x1, 0x0, 0x2, 0x471a, 0x80, 0x40, 0x9e9, 0x80000000, 0x7, 0x3, 0x6, 0xfffffff9, 0x464, 0x1, 0x9, 0xa2a, 0x0, 0x80000001, 0x0, 0x6, 0x10000, 0x0, 0x7, 0xffffffff, 0x9, 0x4, 0x7, 0x5, 0x2, 0x7c2d]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0x3, 0x5, 0x9, {0x5, 0x2, 0x5, 0x0, 0x3, 0xd446}, {0x9, 0x1, 0x2, 0x2, 0x8, 0x9}, 0xfffffffd, 0x6, 0xffffffff}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x4894}, 0x2) 1.103144725s ago: executing program 6 (id=11430): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xdffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 937.478799ms ago: executing program 1 (id=11431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xfffffffc}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="24f5bbd11cb3", 0x6}, {&(0x7f0000000240)="a43b2eaab4000000000080006558", 0xe}], 0x3) 422.34825ms ago: executing program 1 (id=11432): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e0200220035", 0x7}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9376, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x0, 0x4, 0x0, 0x20, 0x8eca}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10ff"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xffc0) 420.44006ms ago: executing program 5 (id=11445): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) 390.897ms ago: executing program 6 (id=11433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x2d, 0x8ff, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x10, 0x4}, {0x2, 0xfff1}, {0xfff2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 390.714891ms ago: executing program 0 (id=11434): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 378.395421ms ago: executing program 1 (id=11436): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x200000000000000e, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8) dup2(r1, r2) tkill(r0, 0x20) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 336.868582ms ago: executing program 0 (id=11438): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) get_mempolicy(0x0, &(0x7f0000000240), 0x705c, &(0x7f00000b0000/0x2000)=nil, 0x3) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x0, 0x80420, 0xf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x3ca7}, 0x1028, 0x3, 0x6, 0x4, 0xff, 0x696, 0xfffd, 0x0, 0x0, 0x0, 0x6}, r2, 0x7, r0, 0x8) 297.329683ms ago: executing program 1 (id=11440): r0 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r0, 0x0, 0xbf5, 0x2000402) renameat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getdents(0xffffffffffffffff, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 276.851653ms ago: executing program 2 (id=11441): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 225.475835ms ago: executing program 6 (id=11442): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) 187.206456ms ago: executing program 5 (id=11443): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) 111.073087ms ago: executing program 0 (id=11444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x3, 0x0, 0x4, 0x2, 0x1, 0x101, 0x7fff, 0x89b, 0x99, 0x8, 0x5, 0x8, 0x49, 0x4, 0x5, 0x4, 0x5f1b6026, 0x9, 0x200, 0x3, 0xb3f, 0x1, 0x0, 0x73a, 0x1d, 0x9, 0x1, 0x4, 0x6, 0x0, 0x81, 0x4, 0x1000, 0x2, 0x8ffc, 0x83, 0x81, 0x8, 0x1, 0xe9, 0x9, 0x7, 0x2, 0xfffffff8, 0x6, 0x2, 0x23, 0x9, 0x1, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x3, 0xfffffffa, 0xc, 0x10001, 0x5, 0x10001, 0x4, 0xfe7, 0x5, 0xa0, 0x0, 0x9, 0x3, 0x2, 0xfffffff1, 0x812, 0x7, 0x2, 0x800, 0x10000, 0x5, 0x7, 0x8, 0x1bd, 0x9, 0x7, 0x3, 0x8, 0x6, 0x9, 0x3, 0x40000, 0x200, 0x0, 0xd4, 0xa1a, 0x588, 0x7, 0x6, 0xe, 0x9, 0x2, 0x6, 0x8000b44, 0x0, 0x4, 0x800, 0x5, 0x9, 0x8, 0x0, 0x2, 0x9, 0x407c, 0x6, 0x6, 0x5, 0x0, 0x7, 0x7, 0xb, 0xd8, 0xfffffff7, 0x4, 0x5, 0x1, 0x80000001, 0x7ff, 0xe, 0x5, 0x80, 0x0, 0x9, 0xe94c, 0x5, 0x6, 0x1, 0x8002, 0x3, 0xbf2d, 0x1ff, 0xfffffffa, 0x101, 0x5, 0x2, 0x10, 0x7fffffff, 0x1, 0x1, 0x1, 0x3, 0x47, 0x22, 0x96e4, 0xd8d0, 0xf0, 0x8000, 0x6, 0x80000000, 0x4, 0x3, 0x5, 0x0, 0x5, 0xd2, 0x2, 0x0, 0x1000, 0xe, 0x8, 0xfd, 0x3, 0xa155, 0x9, 0x4, 0x4, 0x4920, 0x5, 0x5a, 0x2, 0x5, 0x2000c, 0x9, 0x2, 0x101, 0xb094, 0x4, 0x7, 0x6, 0x80000000, 0x81, 0x1, 0x0, 0x200, 0x2, 0x428, 0x2000, 0x0, 0x81, 0x0, 0x80000001, 0x3, 0x400, 0x1, 0x6, 0x6, 0xff, 0x5, 0x6, 0x0, 0x5, 0x8f76, 0x4, 0x8000, 0xffffff01, 0xf, 0x0, 0x6, 0xf, 0x3, 0x9, 0x8000, 0x7, 0xffffffff, 0x7ff, 0x2d, 0x1, 0x2, 0x9, 0x3, 0xffffffff, 0x400, 0xfffffffc, 0x6, 0x1, 0x2, 0x7, 0x80000000, 0x7, 0x0, 0xc, 0x0, 0x9, 0x22fbb94a, 0x1, 0x0, 0x5, 0x3, 0x7, 0x0, 0xfffffde3, 0x4, 0x6, 0xd75, 0x1, 0xbc, 0xa, 0x2, 0x8, 0x5, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7ffb, 0x7, 0x9, 0x3, 0x5, 0x775, 0xffff, 0x800, 0x4, 0x2a28, 0x0, 0x6, 0x8, 0x3f, 0x10000, 0xc, 0x1, 0x7, 0x8, 0xe, 0x8, 0x3, 0x1, 0x7c, 0x1, 0x8000, 0x0, 0xeb3, 0x7, 0x81, 0x7, 0x3cb, 0x3, 0xb, 0x6, 0x1, 0x7, 0x8, 0xe8, 0x6, 0xffff, 0x9, 0x0, 0x6, 0x7f, 0xfffffff7, 0x8, 0x2, 0x3, 0xdd0f, 0xfa, 0x1, 0x77e, 0x20000005, 0x100, 0xffffffff, 0x101, 0x5, 0x0, 0x8, 0x6b, 0x2, 0x0, 0x5, 0x3, 0x4, 0x3, 0x5, 0x4, 0x7f, 0x2, 0x9, 0x4, 0x8000, 0x2, 0x80000001, 0xfffffffa, 0x4004, 0x7, 0x6fc9, 0x9, 0x1, 0x9, 0x7ffe, 0x9, 0x59, 0x2, 0x18fb, 0x2, 0x75f, 0x7, 0x3000000, 0x1, 0x16, 0x4, 0x66cf, 0x0, 0x2003, 0x7, 0xfe, 0x9, 0xa, 0x1, 0x7, 0xb5f, 0x2, 0x3, 0x2, 0x80000000, 0x9, 0x0, 0x1ff, 0x2, 0x10000, 0x8000, 0x8, 0xfff, 0x5256f118, 0x2, 0x1000, 0x8f35, 0x0, 0x7fffffff, 0x492, 0x8, 0x6, 0x4, 0x9, 0x1, 0x6, 0x1, 0xffff, 0xf, 0x38e, 0x5, 0x0, 0x6, 0x7, 0x256056b8, 0x9, 0x1, 0x80, 0x2, 0x7fffffff, 0x6, 0x1, 0x1c9, 0x1, 0x4, 0x6, 0x8001, 0x2, 0x179, 0x7f, 0x4, 0x4, 0x4, 0x100000, 0xfffffffb, 0xe, 0x81, 0xf25, 0x400, 0x0, 0x5, 0x5, 0xfffff41b, 0x2, 0x7ff, 0xffff, 0x8, 0x7, 0x9, 0xffffffff, 0x10001, 0x9e, 0x7, 0x200, 0x6, 0x2, 0x9, 0x8, 0x4, 0x3, 0x401a, 0x3ff, 0x3, 0x7, 0xd, 0x6, 0x1000, 0x9, 0x4, 0xf, 0xffffffff, 0x65, 0x1, 0x8, 0xa, 0x6, 0x8, 0x8001, 0x75, 0x6, 0x8, 0xfffffff9, 0x6, 0x0, 0x7ff, 0xea, 0x8001, 0x2, 0x101, 0x7, 0x80000000, 0x6, 0x2, 0x6, 0x4, 0x2, 0x3, 0x800002, 0x6, 0x7, 0x4, 0x1, 0x0, 0x2, 0x471a, 0x80, 0x40, 0x9e9, 0x80000000, 0x7, 0x3, 0x6, 0xfffffff9, 0x464, 0x1, 0x9, 0xa2a, 0x0, 0x80000001, 0x0, 0x6, 0x10000, 0x0, 0x7, 0xffffffff, 0x9, 0x4, 0x7, 0x5, 0x2, 0x7c2d]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0x3, 0x5, 0x9, {0x5, 0x2, 0x5, 0x0, 0x3, 0xd446}, {0x9, 0x1, 0x2, 0x2, 0x8, 0x9}, 0xfffffffd, 0x6, 0xffffffff}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x4894}, 0x2) 0s ago: executing program 0 (id=11446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xfffffffc}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="24f5bbd11cb3", 0x6}, {&(0x7f0000000240)="a43b2eaab4000000000080006558", 0xe}], 0x3) kernel console output (not intermixed with test programs): value for 'rfdno' [ 600.739043][T10259] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 601.460819][ T28] audit: type=1400 audit(3930878901.390:2531): avc: denied { watch } for pid=32692 comm="syz.4.9850" path="cgroup:[4026532379]" dev="nsfs" ino=4026532379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 601.498290][ T28] audit: type=1400 audit(3930878901.420:2532): avc: denied { ioctl } for pid=32692 comm="syz.4.9850" path="cgroup:[4026532379]" dev="nsfs" ino=4026532379 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 601.623514][T32697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9851'. [ 602.030825][T32712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9855'. [ 602.066533][T32715] netlink: 'syz.1.9857': attribute type 1 has an invalid length. [ 602.094400][T32715] bond1: entered promiscuous mode [ 602.100252][T32715] 8021q: adding VLAN 0 to HW filter on device bond1 [ 602.114544][T32715] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 602.128950][T32715] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 602.140396][T32715] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 602.683855][T32749] loop1: detected capacity change from 0 to 2048 [ 604.155312][ T310] loop1: detected capacity change from 0 to 512 [ 604.203635][ T310] EXT4-fs: Ignoring removed nobh option [ 604.234928][ T310] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c198, mo2=0002] [ 604.243593][ T310] System zones: 1-12 [ 604.249353][ T310] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.9881: corrupted in-inode xattr: e_value size too large [ 604.273221][ T310] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 604.282016][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 604.283527][ T310] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.9881: couldn't read orphan inode 15 (err -117) [ 604.291697][ C1] EXT4-fs (loop1): initial error at time 3930878904: ext4_iget_extra_inode:5180: inode 15 [ 604.291738][ C1] EXT4-fs (loop1): last error at time 3930878904: ext4_iget_extra_inode:5180 [ 604.304269][ T310] loop1: lost filesystem error report for type 5 error -117 [ 604.311070][ C1] : inode 15 [ 604.412647][ T310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.702856][T30903] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.774120][ T408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9916'. [ 606.783271][ T408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.828513][ T408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.861447][ T415] loop4: detected capacity change from 0 to 512 [ 606.872202][ T415] EXT4-fs: Ignoring removed orlov option [ 606.878579][ T415] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 606.890452][ T415] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #16: comm syz.4.9920: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 606.908406][ T415] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 606.908763][ T415] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.9920: couldn't read orphan inode 16 (err -117) [ 606.918204][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 606.918228][ C0] EXT4-fs (loop4): initial error at time 3930878906: ext4_ext_check_inode:521: inode 16 [ 606.918259][ C0] EXT4-fs (loop4): last error at time 3930878906: ext4_ext_check_inode:521: inode 16 [ 606.957581][ T415] loop4: lost filesystem error report for type 5 error -117 [ 606.958089][ T415] EXT4-fs (loop4): 1 orphan inode deleted [ 606.972421][ T415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.000491][ T415] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.9920: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=124 fake=0 [ 607.027176][ T28] audit: type=1400 audit(3930878906.930:2533): avc: denied { write } for pid=414 comm="syz.4.9920" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 607.034893][ T415] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #12: block 7: comm syz.4.9920: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0 [ 607.063390][ T28] audit: type=1400 audit(3930878906.960:2534): avc: denied { write } for pid=414 comm="syz.4.9920" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 607.108586][T26514] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.150494][ T433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.160015][ T433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.504810][ T467] loop1: detected capacity change from 0 to 4096 [ 607.513993][ T467] EXT4-fs: Ignoring removed orlov option [ 607.528221][ T467] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 607.545057][ T467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.567860][ T28] audit: type=1400 audit(3930878907.500:2535): avc: denied { write } for pid=465 comm="syz.1.9940" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 608.006817][T30903] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.057377][ T520] loop1: detected capacity change from 0 to 1024 [ 608.085217][ T520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 608.092180][ T525] sctp: [Deprecated]: syz.6.9960 (pid 525) Use of struct sctp_assoc_value in delayed_ack socket option. [ 608.092180][ T525] Use struct sctp_sack_info instead [ 608.098518][ T520] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.154918][ T28] audit: type=1400 audit(3930878908.090:2536): avc: denied { write } for pid=519 comm="syz.1.9957" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 608.976557][ T551] loop2: detected capacity change from 0 to 7 [ 609.121623][ T7296] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm kworker/u8:18: lblock 0 mapped to illegal pblock 0 (length 6) [ 609.140690][ T557] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9969'. [ 609.184267][ T7296] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 609.219539][ T531] loop6: detected capacity change from 0 to 128 [ 609.220952][ T7296] EXT4-fs (loop1): This should not happen!! Data will be lost [ 609.220952][ T7296] [ 609.284927][ T7296] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:18: lblock 8 mapped to illegal pblock 8 (length 8) [ 609.330251][ T7296] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 609.361358][ T7296] EXT4-fs (loop1): This should not happen!! Data will be lost [ 609.361358][ T7296] [ 609.388841][T30903] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 609.469355][T30903] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 609.546844][ T571] sctp: [Deprecated]: syz.1.9972 (pid 571) Use of struct sctp_assoc_value in delayed_ack socket option. [ 609.546844][ T571] Use struct sctp_sack_info instead [ 609.850879][ T597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9984'. [ 610.017479][ T607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9988'. [ 611.142161][ T682] loop1: detected capacity change from 0 to 512 [ 611.189703][ T682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.233418][ T682] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 611.325087][T30903] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.833981][ T718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10035'. [ 611.857203][ T718] netlink: 'syz.1.10035': attribute type 7 has an invalid length. [ 611.886211][ T718] netlink: 'syz.1.10035': attribute type 8 has an invalid length. [ 611.935037][ T718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10035'. [ 612.251637][ T739] syz.5.10044 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 612.361225][ T28] audit: type=1326 audit(3930878912.290:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=741 comm="syz.6.10045" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f335d80de59 code=0x0 [ 612.624432][ T756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10051'. [ 612.635218][ T758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10052'. [ 612.772406][ T767] loop1: detected capacity change from 0 to 512 [ 612.854346][ T767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.883095][ T767] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.894709][ T28] audit: type=1400 audit(3930878912.830:2538): avc: denied { watch_reads } for pid=772 comm="syz.4.10057" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 612.989639][ T28] audit: type=1400 audit(3930878912.900:2539): avc: denied { write } for pid=764 comm="syz.1.10055" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 613.149081][T30903] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.455701][ T814] sg_write: data in/out 498016/136 bytes for SCSI command 0x0-- guessing data in; [ 613.455701][ T814] program syz.4.10073 not setting count and/or reply_len properly [ 613.535888][ T819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10077'. [ 613.553035][ T820] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10076'. [ 613.555945][ T819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10077'. [ 613.606684][ T819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10077'. [ 614.590043][ T848] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 614.614893][ T848] SELinux: failed to load policy [ 614.683036][ T28] audit: type=1400 audit(3930878914.620:2540): avc: denied { append } for pid=863 comm="syz.5.10093" name="icmp6" dev="proc" ino=4026533197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 614.843086][ T875] loop1: detected capacity change from 0 to 512 [ 614.861766][ T875] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 614.885742][ T875] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #11: comm syz.1.10096: corrupted in-inode xattr: invalid ea_ino [ 614.924066][ T875] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 614.925822][ T875] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.10096: couldn't read orphan inode 11 (err -117) [ 614.935294][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 614.935330][ C0] EXT4-fs (loop1): initial error at time 3930878914: ext4_iget_extra_inode:5180: inode 11 [ 614.935363][ C0] EXT4-fs (loop1): last error at time 3930878914: ext4_iget_extra_inode:5180: inode 11 [ 615.068457][ T862] loop6: detected capacity change from 0 to 512 [ 615.095379][ T875] loop1: lost filesystem error report for type 5 error -117 [ 615.098155][ T875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.306028][T30903] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.466880][ T862] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 615.509316][ T862] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 615.534078][ T862] System zones: 0-1, 15-15, 18-18, 34-34 [ 615.560198][ T862] EXT4-fs (loop6): orphan cleanup on readonly fs [ 615.575068][ T862] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 615.590739][ T862] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 615.611892][ T862] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 615.639292][ T862] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.10091: bad orphan inode 16 [ 615.659103][ T862] loop6: lost filesystem error report for type 5 error -117 [ 615.662103][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 615.682103][ C1] EXT4-fs (loop6): initial error at time 3930878915: ext4_orphan_get:1425 [ 615.696573][ C1] EXT4-fs (loop6): last error at time 3930878915: ext4_orphan_get:1425 [ 615.766927][ T862] ext4_test_bit(bit=15, block=18) = 1 [ 615.779866][ T862] is_bad_inode(inode)=0 [ 615.789268][ T862] NEXT_ORPHAN(inode)=0 [ 615.795883][ T862] max_ino=32 [ 615.811898][ T886] loop1: detected capacity change from 0 to 256 [ 615.846650][ T862] i_nlink=2 [ 615.899250][ T862] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 615.984258][ T28] audit: type=1326 audit(3930878915.890:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=861 comm="syz.6.10091" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f335d80de59 code=0x0 [ 616.082120][ T886] vfat filesystem being mounted at /122/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 616.273011][T31336] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.536805][ T915] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10109'. [ 616.548437][ T915] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10109'. [ 617.086247][ T855] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 617.137115][ T928] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10115'. [ 617.152814][ T928] netlink: 'syz.5.10115': attribute type 7 has an invalid length. [ 617.170985][ T928] netlink: 'syz.5.10115': attribute type 8 has an invalid length. [ 617.214460][ T928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10115'. [ 617.524689][ T945] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10121'. [ 617.604203][ T953] netlink: 'syz.6.10126': attribute type 10 has an invalid length. [ 617.612882][ T953] netlink: 'syz.6.10126': attribute type 11 has an invalid length. [ 617.620987][ T953] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10126'. [ 617.718009][ T961] loop6: detected capacity change from 0 to 1024 [ 617.727687][ T961] EXT4-fs: Ignoring removed bh option [ 617.769821][ T961] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.789267][ T28] audit: type=1400 audit(3930878917.720:2542): avc: denied { write } for pid=960 comm="syz.6.10131" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 617.928145][T31336] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.009566][ T986] loop6: detected capacity change from 0 to 128 [ 618.032917][ T986] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 618.045687][ T986] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 618.069127][ T28] audit: type=1400 audit(3930878918.000:2543): avc: denied { write } for pid=985 comm="syz.6.10141" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 618.104972][T31336] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 618.601776][ T1030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10160'. [ 618.605128][ T1032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10161'. [ 618.627413][ T1032] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10161'. [ 619.087898][ T1044] loop6: detected capacity change from 0 to 256 [ 619.107081][ T1044] msdos filesystem being mounted at /131/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 619.281505][ T1054] netlink: 'syz.2.10170': attribute type 4 has an invalid length. [ 619.340979][ T1054] netlink: 'syz.2.10170': attribute type 4 has an invalid length. [ 619.413883][T28377] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.424824][T28377] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.447259][T28377] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.465555][T28377] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.532212][ T1052] loop4: detected capacity change from 0 to 256 [ 619.709346][ T1066] loop6: detected capacity change from 0 to 512 [ 619.756374][ T1066] EXT4-fs: Ignoring removed oldalloc option [ 619.765748][ T1066] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 619.778938][ T1066] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 619.798168][ T1066] EXT4-fs (loop6): orphan cleanup on readonly fs [ 619.814401][ T1066] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.10176: bad orphan inode 267 [ 619.845110][ T1068] loop1: detected capacity change from 0 to 128 [ 619.846584][ T1066] loop6: lost filesystem error report for type 5 error -117 [ 619.861053][ T1066] EXT4-fs (loop6): Remounting filesystem read-only [ 619.870248][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 619.870269][ C1] EXT4-fs (loop6): initial error at time 3930878919: ext4_orphan_get:1425 [ 619.870294][ C1] EXT4-fs (loop6): last error at time 3930878919: ext4_orphan_get:1425 [ 620.003324][ T1066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 620.733699][ T1052] vfat filesystem being mounted at /409/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 621.131031][ T1113] netlink: 'syz.1.10192': attribute type 1 has an invalid length. [ 621.171202][ T1113] bond2: entered promiscuous mode [ 621.200190][ T1113] 8021q: adding VLAN 0 to HW filter on device bond2 [ 621.232377][ T1066] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.10176: dx entry: limit 0 != root limit 125 [ 621.247302][ T1066] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.10176: Corrupt directory, running e2fsck is recommended [ 621.346339][T31336] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 621.368527][ T1113] veth5: entered promiscuous mode [ 621.381877][ T1113] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 621.504889][ T1141] loop6: detected capacity change from 0 to 512 [ 621.527109][ T1138] program syz.1.10204 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 621.583593][ T1141] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.622560][ T28] audit: type=1400 audit(3930878921.550:2544): avc: denied { write } for pid=1140 comm="syz.6.10205" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 621.644901][ T1150] loop1: detected capacity change from 0 to 1024 [ 621.652550][ T1150] EXT4-fs: Ignoring removed nobh option [ 621.676228][ T1150] EXT4-fs: Ignoring removed i_version option [ 621.687481][ T1141] EXT4-fs error (device loop6): ext4_get_first_dir_block:3537: inode #12: comm syz.6.10205: Directory block failed checksum [ 621.706829][ T28] audit: type=1400 audit(3930878921.620:2545): avc: denied { write } for pid=1140 comm="syz.6.10205" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 621.729328][ T28] audit: type=1400 audit(3930878921.620:2546): avc: denied { write } for pid=1140 comm="syz.6.10205" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 621.768161][T31336] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.779898][ T1150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.836990][T30903] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.843748][ T1161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10212'. [ 621.982967][ T1180] loop4: detected capacity change from 0 to 256 [ 622.015841][ T1180] vfat filesystem being mounted at /419/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 622.108536][ T1193] syz.4.10217: attempt to access beyond end of device [ 622.108536][ T1193] loop4: rw=1, sector=1928, nr_sectors = 32 limit=256 [ 622.156134][ T1193] syz.4.10217: attempt to access beyond end of device [ 622.156134][ T1193] loop4: rw=1, sector=1992, nr_sectors = 32 limit=256 [ 622.203608][ T1193] syz.4.10217: attempt to access beyond end of device [ 622.203608][ T1193] loop4: rw=1, sector=2056, nr_sectors = 32 limit=256 [ 622.234227][ T1193] syz.4.10217: attempt to access beyond end of device [ 622.234227][ T1193] loop4: rw=1, sector=2120, nr_sectors = 32 limit=256 [ 622.279461][ T1193] syz.4.10217: attempt to access beyond end of device [ 622.279461][ T1193] loop4: rw=1, sector=2184, nr_sectors = 32 limit=256 [ 622.342419][ T1193] syz.4.10217: attempt to access beyond end of device [ 622.342419][ T1193] loop4: rw=1, sector=2248, nr_sectors = 32 limit=256 [ 622.409699][ T1193] syz.4.10217: attempt to access beyond end of device [ 622.409699][ T1193] loop4: rw=1, sector=2312, nr_sectors = 32 limit=256 [ 622.463702][ T1193] syz.4.10217: attempt to access beyond end of device [ 622.463702][ T1193] loop4: rw=1, sector=2376, nr_sectors = 32 limit=256 [ 622.511212][ T1193] syz.4.10217: attempt to access beyond end of device [ 622.511212][ T1193] loop4: rw=1, sector=2440, nr_sectors = 32 limit=256 [ 622.541627][ T1193] syz.4.10217: attempt to access beyond end of device [ 622.541627][ T1193] loop4: rw=1, sector=2504, nr_sectors = 32 limit=256 [ 622.593137][ T1219] netlink: 'syz.2.10233': attribute type 1 has an invalid length. [ 622.622609][ T1222] netlink: 'syz.6.10235': attribute type 3 has an invalid length. [ 622.650346][ T1222] netlink: 'syz.6.10235': attribute type 3 has an invalid length. [ 622.701957][ T1219] 8021q: adding VLAN 0 to HW filter on device bond6 [ 622.733243][ T1227] bond6: (slave veth11): Enslaving as an active interface with a down link [ 622.788537][ T1235] bond0: (slave dummy0): Releasing backup interface [ 622.905285][ T1235] dummy0: left promiscuous mode [ 622.923678][ T1235] bond6: (slave dummy0): making interface the new active one [ 622.971537][ T1235] dummy0: entered promiscuous mode [ 623.019920][ T1235] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 623.291226][ T1259] netlink: 200 bytes leftover after parsing attributes in process `syz.6.10246'. [ 623.708616][ T28] audit: type=1400 audit(3930878923.630:2547): avc: denied { read } for pid=1264 comm="syz.6.10249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 624.178997][ T1290] xt_hashlimit: size too large, truncated to 1048576 [ 624.739978][ T1300] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 624.774318][ T1300] batman_adv: batadv0: Adding interface: gretap2 [ 624.800194][ T1300] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.901175][ T1300] batman_adv: batadv0: Interface activated: gretap2 [ 625.120999][T28377] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.134113][T28377] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.214429][T28377] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.235832][T28377] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.306262][T28377] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.333278][T28377] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.414830][T28377] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.426840][T28377] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.635667][T28377] bridge_slave_1: left allmulticast mode [ 625.670165][T28377] bridge_slave_1: left promiscuous mode [ 625.683487][T28377] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.718429][ T1348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.740294][T28377] bridge_slave_0: left allmulticast mode [ 625.743283][ T1348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.746758][T28377] bridge_slave_0: left promiscuous mode [ 625.763994][T28377] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.910169][ T28] audit: type=1400 audit(3930878925.840:2548): avc: denied { write } for pid=1337 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.960835][ T28] audit: type=1400 audit(3930878925.890:2549): avc: denied { write } for pid=1369 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.985027][T28377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.996391][T28377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.006617][T28377] bond0 (unregistering): Released all slaves [ 626.023717][ T3019] 8021q: adding VLAN 0 to HW filter on device eth21 [ 626.058797][ T1374] netlink: 'syz.5.10277': attribute type 3 has an invalid length. [ 626.067386][ T1374] netlink: 'syz.5.10277': attribute type 3 has an invalid length. [ 626.083478][T28377] hsr_slave_0: left promiscuous mode [ 626.089744][T28377] hsr_slave_1: left promiscuous mode [ 626.096305][T28377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.104329][T28377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.115971][T28377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.123792][T28377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.131329][ T1376] netlink: 'syz.1.10278': attribute type 1 has an invalid length. [ 626.143207][T28377] veth1_macvtap: left promiscuous mode [ 626.148912][T28377] veth0_macvtap: left promiscuous mode [ 626.155962][T28377] veth1_vlan: left promiscuous mode [ 626.161388][T28377] veth0_vlan: left promiscuous mode [ 626.237287][T28377] team0 (unregistering): Port device team_slave_0 removed [ 626.302454][ T1376] 8021q: adding VLAN 0 to HW filter on device bond3 [ 626.342765][ T1384] netlink: 'syz.5.10280': attribute type 1 has an invalid length. [ 626.351199][ T1384] netlink: 'syz.5.10280': attribute type 4 has an invalid length. [ 626.360638][ T1384] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.10280'. [ 626.386847][ T1378] bond3: (slave veth7): Enslaving as an active interface with a down link [ 626.409822][ T1379] bond3: (slave dummy0): making interface the new active one [ 626.424045][ T1379] dummy0: entered promiscuous mode [ 626.430334][ T1379] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 626.565349][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.605170][ T1318] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.635855][ T1318] bridge_slave_0: entered allmulticast mode [ 626.661522][ T28] audit: type=1400 audit(3930878926.590:2550): avc: denied { write } for pid=1397 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.668776][ T1318] bridge_slave_0: entered promiscuous mode [ 626.713627][ T28] audit: type=1400 audit(3930878926.640:2551): avc: denied { write } for pid=1408 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.776816][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.804821][ T1318] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.828999][ T1318] bridge_slave_1: entered allmulticast mode [ 626.857602][ T1318] bridge_slave_1: entered promiscuous mode [ 626.892744][ T3019] 8021q: adding VLAN 0 to HW filter on device eth22 [ 626.950591][T28377] IPVS: stop unused estimator thread 0... [ 626.990924][ T1318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.024651][ T1318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.312087][ T1413] loop1: detected capacity change from 0 to 512 [ 627.403128][ T1430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10288'. [ 627.412740][ T1318] team0: Port device team_slave_0 added [ 627.430207][ T1413] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 627.446245][ T1413] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 627.458701][ T1318] team0: Port device team_slave_1 added [ 627.466412][ T1413] System zones: 0-1, 15-15, 18-18, 34-34 [ 627.486306][ T1318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.499414][ T1318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.526244][ T1318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.537811][ T1318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.546777][ T1318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.575446][ T1413] [ 627.593517][ T1318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.619287][ T28] audit: type=1400 audit(3930878927.550:2552): avc: denied { write } for pid=1429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.664742][ T1413] EXT4-fs (loop1): orphan cleanup on readonly fs [ 627.672764][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 627.722990][ T1444] netlink: 'syz.2.10290': attribute type 1 has an invalid length. [ 627.731959][ T1318] hsr_slave_0: entered promiscuous mode [ 627.735587][ T1413] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 627.750371][ T28] audit: type=1400 audit(3930878927.680:2553): avc: denied { write } for pid=1446 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.758243][ T1413] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 627.775348][ T1318] hsr_slave_1: entered promiscuous mode [ 627.819375][ T1444] 8021q: adding VLAN 0 to HW filter on device bond7 [ 627.830824][ T3019] 8021q: adding VLAN 0 to HW filter on device eth23 [ 627.838226][ T1413] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 627.848549][ T1413] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.10284: bad orphan inode 16 [ 627.866457][ T1413] loop1: lost filesystem error report for type 5 error -117 [ 627.868250][ T1449] bond7: (slave veth13): Enslaving as an active interface with a down link [ 627.872458][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 627.900837][ C0] EXT4-fs (loop1): initial error at time 3930878927: ext4_orphan_get:1425 [ 627.916397][ C0] EXT4-fs (loop1): last error at time 3930878927: ext4_orphan_get:1425 [ 628.019297][ T28] audit: type=1400 audit(3930878927.910:2554): avc: denied { write } for pid=1452 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.046342][ T28] audit: type=1400 audit(3930878927.940:2555): avc: denied { write } for pid=1463 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.051792][ T1413] ext4_test_bit(bit=15, block=18) = 1 [ 628.075654][ T1444] bond7: (slave macvlan1): Enslaving as an active interface with a down link [ 628.115573][ T3019] 8021q: adding VLAN 0 to HW filter on device eth24 [ 628.133160][ T1413] is_bad_inode(inode)=0 [ 628.140965][ T1466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10291'. [ 628.164017][ T1413] NEXT_ORPHAN(inode)=0 [ 628.237477][ T1413] max_ino=32 [ 628.250630][ T1413] i_nlink=2 [ 628.280576][ T1471] loop6: detected capacity change from 0 to 4096 [ 628.378169][ T1484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10298'. [ 628.395861][ T1471] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.460507][ T1413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 628.495207][ T1484] 8021q: adding VLAN 0 to HW filter on device bond8 [ 628.499309][ T1488] netlink: 'syz.2.10298': attribute type 10 has an invalid length. [ 628.511053][T31336] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.513268][ T1488] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10298'. [ 628.535618][ T1486] bond6: (slave dummy0): Releasing active interface [ 628.569985][ T1486] dummy0: left promiscuous mode [ 628.583090][ T1492] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10300'. [ 628.606783][ T1486] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 628.635081][ T1495] loop6: detected capacity change from 0 to 512 [ 628.675943][ T1495] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.10301: inode has both inline data and extents flags [ 628.699133][ T1488] dummy0: entered promiscuous mode [ 628.703826][ T1495] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 628.705803][ T1495] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.10301: couldn't read orphan inode 15 (err -117) [ 628.715153][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 628.715172][ C1] EXT4-fs (loop6): initial error at time 3930878928: ext4_orphan_get:1399: inode 15 [ 628.715201][ C1] EXT4-fs (loop6): last error at time 3930878928: ext4_orphan_get:1399: inode 15 [ 628.754465][ T1488] bond8: (slave dummy0): Releasing backup interface [ 628.754768][ T1495] loop6: lost filesystem error report for type 5 error -117 [ 628.762399][ T1495] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.844981][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 628.844999][ T28] audit: type=1326 audit(3930878928.780:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1411 comm="syz.1.10284" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b7719de59 code=0x0 [ 628.896839][ T28] audit: type=1400 audit(3930878928.820:2558): avc: denied { write } for pid=1494 comm="syz.6.10301" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 628.989817][T31336] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.006870][ T28] audit: type=1400 audit(3930878928.940:2559): avc: denied { write } for pid=1502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.100589][T30903] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.111948][ T28] audit: type=1400 audit(3930878929.030:2560): avc: denied { write } for pid=1530 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.172310][ T1531] loop6: detected capacity change from 0 to 512 [ 629.199681][ T1318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 629.408864][ T28] audit: type=1400 audit(3930878929.320:2561): avc: denied { write } for pid=1547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.442084][ T28] audit: type=1400 audit(3930878929.370:2562): avc: denied { write } for pid=1561 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.721388][ T1318] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 629.734370][ T1318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 629.756009][ T28] audit: type=1400 audit(3930878929.690:2563): avc: denied { write } for pid=1563 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.783086][ T1318] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 629.811851][ T1318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 629.853339][ T1318] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 629.872896][ T28] audit: type=1400 audit(3930878929.710:2564): avc: denied { write } for pid=1574 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.909620][ T1318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 629.964617][ T1318] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 630.110116][ T1318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.148622][ T1318] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.178281][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.185410][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.207388][T28377] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.215027][T28377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.358332][ T1601] program syz.1.10314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 630.359193][ T1318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 630.398912][ T1318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 630.464950][ T28] audit: type=1400 audit(3930878930.400:2565): avc: denied { write } for pid=1585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.527094][ T28] audit: type=1400 audit(3930878930.460:2566): avc: denied { write } for pid=1613 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.785690][ T1318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.949216][ T1637] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 631.113153][ T1318] veth0_vlan: entered promiscuous mode [ 631.121318][ T1318] veth1_vlan: entered promiscuous mode [ 631.147323][ T1318] veth0_macvtap: entered promiscuous mode [ 631.164642][ T1318] veth1_macvtap: entered promiscuous mode [ 631.181122][ T1318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.197625][ T1318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.225276][T20278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.237182][T20278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.256701][T20278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.423222][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.476293][ T1664] loop1: detected capacity change from 0 to 164 [ 631.522759][ T1664] iso9660: Unknown parameter 'GPL' [ 632.589103][ T1744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10338'. [ 632.764591][ T1531] EXT4-fs (loop6): 1 orphan inode deleted [ 632.793404][ T1531] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.813759][T20278] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:24: Failed to release dquot type 1 [ 632.839092][T20278] loop6: lost filesystem error report for type 5 error -117 [ 632.892029][ T1531] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 633.404709][T31336] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.797348][ T1841] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.10356'. [ 633.821530][ T1841] netlink: del zone limit has 4 unknown bytes [ 634.019400][ T1853] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=1853 comm=syz.5.10360 [ 634.137183][ T1862] loop1: detected capacity change from 0 to 512 [ 634.166191][ T1862] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 634.209555][ T1862] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 634.226587][ T1862] EXT4-fs (loop1): orphan cleanup on readonly fs [ 634.243998][ T1862] __quota_error: 17 callbacks suppressed [ 634.244079][ T1862] Quota error (device loop1): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 634.279038][ T1862] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 634.316930][ T1862] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 634.357779][ T1862] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.10364: bg 0: block 15: invalid block bitmap [ 634.405372][ T1862] loop1: lost filesystem error report for type 5 error -117 [ 634.406253][ T1862] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 634.414338][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 634.414360][ C0] EXT4-fs (loop1): initial error at time 3930878934: ext4_validate_block_bitmap:432 [ 634.414387][ C0] EXT4-fs (loop1): last error at time 3930878934: ext4_validate_block_bitmap:432 [ 634.532573][ T1862] loop1: lost filesystem error report for type 5 error -117 [ 634.532789][ T1862] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.10364: data will be lost [ 634.553382][ T1862] EXT4-fs (loop1): 1 truncate cleaned up [ 634.587264][ T1862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 634.630006][ T1862] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.10364: iget: bad i_size value: 360287970189639690 [ 634.704841][T30903] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.935804][ T1892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10375'. [ 635.304356][ T1860] kexec: Could not allocate control_code_buffer [ 635.957299][ T1940] loop1: detected capacity change from 0 to 512 [ 635.995273][ T1940] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.10395: bad orphan inode 15 [ 636.022620][ T1940] loop1: lost filesystem error report for type 5 error -117 [ 636.023026][ T1940] ext4_test_bit(bit=14, block=18) = 1 [ 636.036019][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 636.036042][ C1] EXT4-fs (loop1): initial error at time 3930878935: ext4_orphan_get:1425 [ 636.036087][ C1] EXT4-fs (loop1): last error at time 3930878935: ext4_orphan_get:1425 [ 636.060149][ T1940] is_bad_inode(inode)=0 [ 636.064690][ T1940] NEXT_ORPHAN(inode)=1023 [ 636.069121][ T1940] max_ino=32 [ 636.072682][ T1940] i_nlink=0 [ 636.077664][ T1940] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #15: comm syz.1.10395: corrupted xattr block 19: invalid header [ 636.092355][ T1940] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 636.094278][ T1940] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 636.113594][ T1940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 636.127977][ T1940] ext4 filesystem being mounted at /171/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 636.417958][ T1974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10410'. [ 636.450348][ T1975] team0 (unregistering): Port device team_slave_0 removed [ 636.474586][ T1975] team0 (unregistering): Port device team_slave_1 removed [ 637.061680][T30903] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 637.482950][ T1990] loop1: detected capacity change from 0 to 128 [ 637.518837][ T1990] msdos filesystem being mounted at /174/bus supports timestamps until 2107-12-31 (0x10391447e) [ 638.303046][T20278] dummy0: left promiscuous mode [ 638.838096][ T28] audit: type=1400 audit(3930878938.770:2583): avc: denied { write } for pid=2021 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 638.978913][ T28] audit: type=1400 audit(3930878938.910:2584): avc: denied { write } for pid=2050 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.007094][ T2052] ±ÿ]×0¢ÊÞª: renamed from lo [ 640.261658][ T28] audit: type=1400 audit(3930878940.190:2585): avc: denied { write } for pid=2080 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.379875][ T28] audit: type=1400 audit(3930878940.310:2586): avc: denied { write } for pid=2113 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.588483][ T28] audit: type=1400 audit(3930878940.520:2587): avc: denied { write } for pid=2120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.682695][ T28] audit: type=1400 audit(3930878940.600:2588): avc: denied { write } for pid=2142 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.703115][ T2074] kexec: Could not allocate control_code_buffer [ 641.808868][ T2173] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 641.818934][ T28] audit: type=1400 audit(3930878941.750:2589): avc: denied { relabelto } for pid=2172 comm="syz.1.10466" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 641.878190][ T28] audit: type=1400 audit(3930878941.750:2590): avc: denied { associate } for pid=2172 comm="syz.1.10466" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=980 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ssh_exec_t:s0" [ 641.932172][ T28] audit: type=1400 audit(3930878941.800:2591): avc: denied { read } for pid=2172 comm="syz.1.10466" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 641.984278][ T28] audit: type=1400 audit(3930878941.800:2592): avc: denied { open } for pid=2172 comm="syz.1.10466" path="/185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 642.048811][ T28] audit: type=1400 audit(3930878941.910:2593): avc: denied { unlink } for pid=30903 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 642.639149][ T2179] loop0: detected capacity change from 0 to 128 [ 642.712557][ T2179] msdos filesystem being mounted at /31/bus supports timestamps until 2107-12-31 (0x10391447e) [ 643.569328][ T2146] bond0: left promiscuous mode [ 643.574965][ T2146] bond0: left allmulticast mode [ 643.615211][ T2146] geneve2: left promiscuous mode [ 643.620489][ T2146] geneve2: left allmulticast mode [ 643.787077][ T2146] gre2: left promiscuous mode [ 643.787715][ T2184] kexec: Could not allocate control_code_buffer [ 643.807269][ T2146] bond3: left promiscuous mode [ 643.815558][ T2146] ip6gre2: left promiscuous mode [ 643.940298][ T2146] geneve3: left promiscuous mode [ 644.100832][ T2159] batman_adv: batadv0: Interface deactivated: gretap2 [ 644.121447][T28377] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.129959][T28377] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 644.139226][T28377] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 644.194808][T28377] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.205473][T28377] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 644.214491][T28377] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 644.263010][ T2202] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10478'. [ 644.326346][ T2205] loop0: detected capacity change from 0 to 2048 [ 644.342523][T28377] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.351411][T28377] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 644.409604][T28377] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 644.433955][T28377] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.450948][T28377] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 644.469242][T28377] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 644.520584][ T28] audit: type=1400 audit(3930878944.450:2594): avc: denied { write } for pid=2206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.565127][ T2205] Alternate GPT is invalid, using primary GPT. [ 644.572134][ T2205] loop0: p1 p2 p3 [ 644.587232][ T2205] loop0: partition table partially beyond EOD, truncated [ 644.619148][ T2225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10482'. [ 644.685289][ T2228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10483'. [ 644.717747][T14844] udevd[14844]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 644.719387][T14764] udevd[14764]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 644.743647][T14810] udevd[14810]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 644.776652][ T2240] loop0: detected capacity change from 0 to 256 [ 644.814743][T14810] udevd[14810]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 644.828625][T14844] udevd[14844]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 644.840056][T14764] udevd[14764]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 644.855413][ T2240] msdos filesystem being mounted at /34/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 644.911378][ T2248] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.918541][ T2248] bridge0: port 2(bridge_slave_1) entered listening state [ 644.926296][ T2248] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.933892][ T2248] bridge0: port 1(bridge_slave_0) entered listening state [ 644.943829][ T2244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10491'. [ 645.003418][ T2255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10493'. [ 645.023594][ T12] bond3: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 645.028731][ T2257] netlink: 'syz.6.10494': attribute type 1 has an invalid length. [ 645.062657][ T7296] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 645.072528][ T7296] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 645.097573][ T2257] netlink: 224 bytes leftover after parsing attributes in process `syz.6.10494'. [ 645.106933][ T7296] bond2: active interface up! [ 645.246891][ T2271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10499'. [ 645.349859][ T2267] syz.6.10498 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 645.380895][ T2267] CPU: 0 UID: 0 PID: 2267 Comm: syz.6.10498 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 645.380936][ T2267] Tainted: [W]=WARN [ 645.380944][ T2267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 645.381029][ T2267] Call Trace: [ 645.381036][ T2267] [ 645.381043][ T2267] __dump_stack+0x1d/0x30 [ 645.381082][ T2267] dump_stack_lvl+0x95/0xd0 [ 645.381145][ T2267] dump_stack+0x15/0x1b [ 645.381166][ T2267] dump_header+0x80/0x240 [ 645.381221][ T2267] oom_kill_process+0x295/0x350 [ 645.381315][ T2267] out_of_memory+0x981/0xbc0 [ 645.381373][ T2267] try_charge_memcg+0x621/0xa00 [ 645.381406][ T2267] ? __rcu_read_unlock+0x4e/0x70 [ 645.381453][ T2267] __memcg_kmem_charge_page+0x199/0x3a0 [ 645.381561][ T2267] __alloc_frozen_pages_noprof+0x18a/0x350 [ 645.381629][ T2267] alloc_pages_mpol+0xa9/0x1d0 [ 645.381674][ T2267] alloc_pages_noprof+0x8f/0x140 [ 645.381747][ T2267] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 645.381788][ T2267] __kvmalloc_node_noprof+0x3a0/0x590 [ 645.381814][ T2267] ? futex_hash_allocate+0x192/0x920 [ 645.381899][ T2267] ? futex_hash_allocate+0x192/0x920 [ 645.381926][ T2267] ? futex_hash_allocate+0x192/0x920 [ 645.381955][ T2267] futex_hash_allocate+0x192/0x920 [ 645.382058][ T2267] ? cap_task_prctl+0x13f/0x6b0 [ 645.382122][ T2267] futex_hash_prctl+0xd8/0xf0 [ 645.382170][ T2267] __se_sys_prctl+0x4f4/0x13b0 [ 645.382292][ T2267] __x64_sys_prctl+0x67/0x80 [ 645.382322][ T2267] x64_sys_call+0x2533/0x3020 [ 645.382352][ T2267] do_syscall_64+0x136/0x3c0 [ 645.382408][ T2267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.382435][ T2267] RIP: 0033:0x7f335d80de59 [ 645.382456][ T2267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.382517][ T2267] RSP: 002b:00007f335c267028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 645.382545][ T2267] RAX: ffffffffffffffda RBX: 00007f335da95fa0 RCX: 00007f335d80de59 [ 645.382563][ T2267] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 645.382578][ T2267] RBP: 00007f335d8a3e6f R08: 0000000000000000 R09: 0000000000000000 [ 645.382592][ T2267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.382608][ T2267] R13: 00007f335da96038 R14: 00007f335da95fa0 R15: 00007ffe63a893b8 [ 645.382692][ T2267] [ 645.631163][ T2267] memory: usage 2220kB, limit 307200kB, failcnt 1153 [ 645.639004][ T2267] memory+swap: usage 2420kB, limit 9007199254740988kB, failcnt 0 [ 645.647973][ T2267] kmem: usage 2044kB, limit 9007199254740988kB, failcnt 0 [ 645.657945][ T2267] Memory cgroup stats for /syz6: [ 645.658236][ T2267] cache 0 [ 645.673403][ T2267] rss 0 [ 645.678654][ T2267] shmem 0 [ 645.684034][ T2267] mapped_file 0 [ 645.689700][ T2267] dirty 0 [ 645.699942][ T2267] writeback 0 [ 645.703538][ T2267] workingset_refault_anon 948 [ 645.708243][ T2267] workingset_refault_file 1352 [ 645.714697][ T2267] swap 204800 [ 645.718011][ T2267] swapcached 117649408 [ 645.722464][ T2267] pgpgin 396573 [ 645.726062][ T2267] pgpgout 396572 [ 645.729633][ T2267] pgfault 369806 [ 645.734647][ T2267] pgmajfault 400 [ 645.738293][ T2267] inactive_anon 0 [ 645.741949][ T2267] active_anon 0 [ 645.745844][ T2267] inactive_file 0 [ 645.749580][ T2267] active_file 0 [ 645.755003][ T2267] unevictable 0 [ 645.758503][ T2267] hierarchical_memory_limit 314572800 [ 645.778183][ T2267] hierarchical_memsw_limit 9223372036854771712 [ 645.785484][ T2267] total_cache 0 [ 645.789102][ T2267] total_rss 0 [ 645.793254][ T2267] total_shmem 0 [ 645.797124][ T2267] total_mapped_file 0 [ 645.801763][ T2267] total_dirty 0 [ 645.805443][ T2267] total_writeback 0 [ 645.809320][ T2267] total_workingset_refault_anon 948 [ 645.815576][ T2267] total_workingset_refault_file 1352 [ 645.821701][ T2277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10502'. [ 645.824731][ T2267] total_swap 204800 [ 645.854160][ T2267] total_swapcached 117649408 [ 645.878649][ T2267] total_pgpgin 396574 [ 645.890912][ T2267] total_pgpgout 396573 [ 645.896069][ T2267] total_pgfault 369842 [ 645.900301][ T2267] total_pgmajfault 400 [ 645.904716][ T2267] total_inactive_anon 0 [ 645.908983][ T2267] total_active_anon 0 [ 645.913873][ T2267] total_inactive_file 0 [ 645.918122][ T2267] total_active_file 0 [ 645.922827][ T2267] total_unevictable 0 [ 645.927015][ T2267] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.10498,pid=2266,uid=0 [ 645.945773][ T2283] loop1: detected capacity change from 0 to 256 [ 645.954480][ T2267] Memory cgroup out of memory: Killed process 2266 (syz.6.10498) total-vm:96228kB, anon-rss:1240kB, file-rss:22164kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 645.973071][ T2283] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 646.012846][ T2283] vfat filesystem being mounted at /196/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 646.784119][ T2320] loop1: detected capacity change from 0 to 128 [ 646.851431][ T2320] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 646.915384][ T2320] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 646.964570][T30903] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 647.265818][ T9] IPVS: starting estimator thread 0... [ 647.362090][ T2341] IPVS: using max 2352 ests per chain, 117600 per kthread [ 648.329339][ T2378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10539'. [ 648.424505][ T2384] xfrm1: entered allmulticast mode [ 648.447981][ T2384] ip6gretap1: entered promiscuous mode [ 649.570084][ T2426] futex_wake_op: syz.1.10558 tries to shift op by 144; fix this program [ 650.434786][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 650.434813][ T28] audit: type=1400 audit(3930878950.370:2624): avc: denied { lock } for pid=2445 comm="syz.6.10566" path="socket:[97348]" dev="sockfs" ino=97348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 650.626889][ T28] audit: type=1400 audit(3930878950.560:2625): avc: denied { bind } for pid=2450 comm="syz.2.10567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 650.843215][ T2462] loop6: detected capacity change from 0 to 512 [ 650.885775][ T2462] msdos filesystem being mounted at /194/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 651.758975][ T2509] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10589'. [ 651.954403][ T2524] netlink: 'syz.0.10594': attribute type 11 has an invalid length. [ 651.978044][ T2524] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10594'. [ 652.136787][ T2534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10600'. [ 652.181230][ T2534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 652.254315][ T2536] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 652.410348][ T28] audit: type=1326 audit(3930878952.340:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.5.10604" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33f67ade59 code=0x0 [ 654.090264][ T2586] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10628'. [ 654.224134][ T2589] tipc: Enabling of bearer rejected, failed to enable media [ 655.515564][ T28] audit: type=1326 audit(3930878955.450:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2618 comm="syz.5.10631" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33f67ade59 code=0x0 [ 656.217014][ T2636] netlink: 'syz.1.10638': attribute type 19 has an invalid length. [ 656.531287][ T2625] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 656.560962][ T2634] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10636'. [ 656.856481][ T2662] syzkaller0: entered promiscuous mode [ 656.983968][ T2669] SELinux: policydb string length 0 does not match expected length 8 [ 656.996178][ T2669] SELinux: failed to load policy [ 657.037997][ T2669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10652'. [ 658.111591][ T2708] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.10665'. [ 658.585706][ T2720] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10671'. [ 658.597031][ T2720] gretap0: Device is already in use. [ 658.610894][ T2722] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10672'. [ 658.659736][ T2724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10673'. [ 658.874141][ T2732] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10676'. [ 658.964255][ T2735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10678'. [ 659.036093][ T2748] loop1: detected capacity change from 0 to 128 [ 659.044688][ T2748] msdos filesystem being mounted at /232/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 659.099576][ T28] audit: type=1400 audit(3930878959.020:2628): avc: denied { execute } for pid=2743 comm="syz.2.10682" path="/memory.swap.current" dev="ramfs" ino=97815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 659.137892][ T2752] netlink: 96 bytes leftover after parsing attributes in process `syz.6.10683'. [ 659.628370][ T2780] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -6351, delta: 1 [ 659.640291][ T2780] ref_ctr increment failed for inode: 0x3085 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888104811c00 [ 659.994824][ T2737] syz.5.10679 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 660.010071][ T2737] CPU: 1 UID: 0 PID: 2737 Comm: syz.5.10679 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 660.010155][ T2737] Tainted: [W]=WARN [ 660.010164][ T2737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 660.010179][ T2737] Call Trace: [ 660.010187][ T2737] [ 660.010197][ T2737] __dump_stack+0x1d/0x30 [ 660.010279][ T2737] dump_stack_lvl+0x95/0xd0 [ 660.010305][ T2737] dump_stack+0x15/0x1b [ 660.010329][ T2737] dump_header+0x80/0x240 [ 660.010361][ T2737] oom_kill_process+0x295/0x350 [ 660.010403][ T2737] out_of_memory+0x981/0xbc0 [ 660.010510][ T2737] try_charge_memcg+0x621/0xa00 [ 660.010556][ T2737] __memcg_kmem_charge_page+0x199/0x3a0 [ 660.010646][ T2737] __alloc_frozen_pages_noprof+0x18a/0x350 [ 660.010675][ T2737] alloc_pages_mpol+0xa9/0x1d0 [ 660.010703][ T2737] alloc_pages_noprof+0x8f/0x140 [ 660.010789][ T2737] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 660.010904][ T2737] __kvmalloc_node_noprof+0x3a0/0x590 [ 660.010929][ T2737] ? futex_hash_allocate+0x192/0x920 [ 660.010949][ T2737] ? futex_hash_allocate+0x192/0x920 [ 660.011012][ T2737] ? futex_hash_allocate+0x192/0x920 [ 660.011034][ T2737] futex_hash_allocate+0x192/0x920 [ 660.011055][ T2737] ? cap_task_prctl+0x13f/0x6b0 [ 660.011087][ T2737] futex_hash_prctl+0xd8/0xf0 [ 660.011106][ T2737] __se_sys_prctl+0x4f4/0x13b0 [ 660.011161][ T2737] __x64_sys_prctl+0x67/0x80 [ 660.011185][ T2737] x64_sys_call+0x2533/0x3020 [ 660.011247][ T2737] do_syscall_64+0x136/0x3c0 [ 660.011285][ T2737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.011307][ T2737] RIP: 0033:0x7f33f67ade59 [ 660.011324][ T2737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.011394][ T2737] RSP: 002b:00007f33f5207028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 660.011498][ T2737] RAX: ffffffffffffffda RBX: 00007f33f6a35fa0 RCX: 00007f33f67ade59 [ 660.011512][ T2737] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 660.011526][ T2737] RBP: 00007f33f6843e6f R08: 0000000000000000 R09: 0000000000000000 [ 660.011585][ T2737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.011598][ T2737] R13: 00007f33f6a36038 R14: 00007f33f6a35fa0 R15: 00007fff402e98b8 [ 660.011629][ T2737] [ 660.011723][ T2737] memory: usage 307200kB, limit 307200kB, failcnt 1360 [ 660.250883][ T28] audit: type=1400 audit(3930878960.180:2629): avc: denied { write } for pid=2790 comm="syz.0.10699" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 660.285327][ T2737] memory+swap: usage 140864kB, limit 9007199254740988kB, failcnt 0 [ 660.294225][ T2737] kmem: usage 139256kB, limit 9007199254740988kB, failcnt 0 [ 660.302282][ T2737] Memory cgroup stats for /syz5: [ 660.302660][ T2737] cache 0 [ 660.311177][ T2737] rss 65536 [ 660.314477][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 660.314553][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 660.331917][ T2737] shmem 0 [ 660.335525][ T2737] mapped_file 0 [ 660.346666][ T2737] dirty 0 [ 660.349697][ T2737] writeback 0 [ 660.362007][ T2737] workingset_refault_anon 5870 [ 660.367017][ T2737] workingset_refault_file 128 [ 660.377017][ T2737] swap 1126400 [ 660.385092][ T2737] swapcached 44904448 [ 660.392173][ T2737] pgpgin 541745 [ 660.400317][ T2737] pgpgout 541728 [ 660.407420][ T2737] pgfault 411580 [ 660.415326][ T2737] pgmajfault 2345 [ 660.430227][ T2737] inactive_anon 0 [ 660.454358][ T2737] active_anon 53248 [ 660.465953][ T2737] inactive_file 0 [ 660.477228][ T2737] active_file 0 [ 660.489324][ T2737] unevictable 0 [ 660.496109][ T2737] hierarchical_memory_limit 314572800 [ 660.507735][ T2737] hierarchical_memsw_limit 9223372036854771712 [ 660.522433][ T2737] total_cache 0 [ 660.526705][ T2737] total_rss 65536 [ 660.530477][ T2737] total_shmem 0 [ 660.537711][ T2737] total_mapped_file 0 [ 660.546459][ T2737] total_dirty 0 [ 660.566144][ T2737] total_writeback 0 [ 660.574753][ T2737] total_workingset_refault_anon 5870 [ 660.581938][ T2737] total_workingset_refault_file 128 [ 660.587923][ T2800] bond0: (slave team0): Releasing backup interface [ 660.593767][ T2737] total_swap 1126400 [ 660.598571][ T2737] total_swapcached 44904448 [ 660.604139][ T2737] total_pgpgin 541745 [ 660.608259][ T2737] total_pgpgout 541728 [ 660.612464][ T2737] total_pgfault 411580 [ 660.616878][ T2737] total_pgmajfault 2345 [ 660.621149][ T2737] total_inactive_anon 0 [ 660.633798][ T2800] bridge_slave_0: left allmulticast mode [ 660.639989][ T2737] total_active_anon 53248 [ 660.654315][ T2737] total_inactive_file 0 [ 660.654732][ T2800] bridge_slave_0: left promiscuous mode [ 660.658890][ T2737] total_active_file 0 [ 660.665281][ T2800] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.677158][ T2737] total_unevictable 0 [ 660.681247][ T2737] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.10679,pid=2736,uid=0 [ 660.714433][ T2737] Memory cgroup out of memory: Killed process 2737 (syz.5.10679) total-vm:96360kB, anon-rss:1356kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:0 [ 660.737260][ T2800] bridge_slave_1: left allmulticast mode [ 660.743831][ T2800] bridge_slave_1: left promiscuous mode [ 660.757728][ T2800] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.953288][ T2800] bond0: (slave bond_slave_0): Releasing backup interface [ 660.971392][ T2800] bond0: (slave bond_slave_1): Releasing backup interface [ 661.004979][ T2800] team0: Port device team_slave_0 removed [ 661.022610][ T2800] team0: Port device team_slave_1 removed [ 661.033607][ T2800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.042390][ T2800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.051406][ T2800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.059619][ T2800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.293657][ T2830] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10714'. [ 661.477638][ T2845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10720'. [ 662.023340][ T28] audit: type=1400 audit(3930878961.960:2630): avc: denied { unmount } for pid=2876 comm="syz.2.10732" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 662.300490][ T2888] bond1: entered allmulticast mode [ 662.354376][ T2893] macvlan2: entered promiscuous mode [ 662.390470][ T2893] macvlan2: entered allmulticast mode [ 662.415309][ T2893] bond1: (slave macvlan2): Opening slave failed [ 662.597572][T29077] hid-generic 0006:0008:0008.000C: unknown main item tag 0x0 [ 662.605286][T29077] hid-generic 0006:0008:0008.000C: unknown main item tag 0x0 [ 662.613835][T29077] hid-generic 0006:0008:0008.000C: unknown main item tag 0x0 [ 662.661386][T29077] hid-generic 0006:0008:0008.000C: unknown main item tag 0x0 [ 662.727260][T29077] hid-generic 0006:0008:0008.000C: unknown main item tag 0x0 [ 662.762764][T29077] hid-generic 0006:0008:0008.000C: unknown main item tag 0x0 [ 662.805190][T29077] hid-generic 0006:0008:0008.000C: unknown main item tag 0x0 [ 662.828258][T29077] hid-generic 0006:0008:0008.000C: unknown main item tag 0x0 [ 662.868660][T29077] hid-generic 0006:0008:0008.000C: unknown main item tag 0x0 [ 662.891549][T29077] hid-generic 0006:0008:0008.000C: unknown main item tag 0x0 [ 662.921266][T29077] hid-generic 0006:0008:0008.000C: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 662.986437][ T2914] fido_id[2914]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 663.741743][ T28] audit: type=1326 audit(3930878963.670:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.1.10748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7719de59 code=0x7ffc0000 [ 663.770320][ T28] audit: type=1326 audit(3930878963.670:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.1.10748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7719de59 code=0x7ffc0000 [ 663.799235][ T28] audit: type=1326 audit(3930878963.700:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.1.10748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7719de59 code=0x7ffc0000 [ 663.826970][ T28] audit: type=1326 audit(3930878963.700:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.1.10748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7719de59 code=0x7ffc0000 [ 663.854180][ T28] audit: type=1326 audit(3930878963.700:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.1.10748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f0b7719de59 code=0x7ffc0000 [ 663.919917][ T28] audit: type=1326 audit(3930878963.700:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.1.10748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7719de59 code=0x7ffc0000 [ 663.982387][ T28] audit: type=1326 audit(3930878963.700:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.1.10748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7719de59 code=0x7ffc0000 [ 664.045849][ T28] audit: type=1326 audit(3930878963.700:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.1.10748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7719de59 code=0x7ffc0000 [ 664.073702][ T2940] __nla_validate_parse: 1 callbacks suppressed [ 664.073720][ T2940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10753'. [ 664.105563][ T2940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10753'. [ 664.138348][ T28] audit: type=1326 audit(3930878963.700:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.1.10748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7719de59 code=0x7ffc0000 [ 665.225413][ T2972] loop1: detected capacity change from 0 to 256 [ 665.331394][ T2958] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 666.112952][ T3005] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 666.576300][ T3038] syzkaller0: entered promiscuous mode [ 666.592338][ T3038] syzkaller0: entered allmulticast mode [ 666.783204][ T3050] netlink: 'syz.0.10786': attribute type 4 has an invalid length. [ 666.798470][ T3050] netlink: 'syz.0.10786': attribute type 4 has an invalid length. [ 667.025790][ T3047] loop6: detected capacity change from 0 to 764 [ 667.055274][ T3047] rock: directory entry would overflow storage [ 667.069722][ T3047] rock: sig=0x4654, size=5, remaining=4 [ 667.146721][ T3072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10795'. [ 667.466919][ T3079] loop6: detected capacity change from 0 to 512 [ 667.492189][ T3079] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 667.513402][ T3079] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.10796: bad orphan inode 131083 [ 667.543142][ T3079] loop6: lost filesystem error report for type 5 error -117 [ 667.545110][ T3079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 667.595813][ T3090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10801'. [ 667.713673][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 667.713691][ T28] audit: type=1400 audit(3930879223.652:2679): avc: denied { write } for pid=3078 comm="syz.6.10796" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 667.848824][ T28] audit: type=1400 audit(3930879223.782:2680): avc: denied { mount } for pid=3107 comm="syz.0.10807" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 667.904830][T31336] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.650597][ T3139] wg2: entered promiscuous mode [ 668.713608][ T3139] wg2: entered allmulticast mode [ 668.898218][ T3146] netlink: 830 bytes leftover after parsing attributes in process `syz.2.10818'. [ 669.025377][ T3154] loop6: detected capacity change from 0 to 2048 [ 669.035643][ T3154] ext4: Unknown parameter 'smackfstransmute' [ 669.108675][ T3159] loop6: detected capacity change from 0 to 1024 [ 669.137871][ T3159] EXT4-fs: inline encryption not supported [ 669.170282][ T3159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.290884][ T3176] bond3: entered allmulticast mode [ 669.296240][ T3176] ip6gre2: entered allmulticast mode [ 669.296804][T31336] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.303165][ T3175] bond3: left allmulticast mode [ 669.316513][ T3175] ip6gre2: left allmulticast mode [ 669.351862][ T3180] netlink: 'syz.5.10831': attribute type 21 has an invalid length. [ 669.360346][ T3180] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10831'. [ 669.397434][ T28] audit: type=1400 audit(3930879225.332:2681): avc: denied { map } for pid=3183 comm="syz.1.10834" path="socket:[99018]" dev="sockfs" ino=99018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 669.444886][ T3188] loop1: detected capacity change from 0 to 512 [ 669.465096][ T3188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.494565][ T3188] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 669.543146][ T28] audit: type=1400 audit(3930879225.482:2682): avc: denied { write } for pid=3187 comm="syz.1.10835" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 669.574070][ T3188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.604620][ T28] audit: type=1400 audit(3930879225.482:2683): avc: denied { write } for pid=3187 comm="syz.1.10835" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 669.853973][ T3198] netlink: 51 bytes leftover after parsing attributes in process `syz.2.10838'. [ 670.112077][ T3209] loop6: detected capacity change from 0 to 512 [ 670.146535][ T3209] EXT4-fs: inline encryption not supported [ 670.180847][ T3209] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 670.196072][ T3209] EXT4-fs (loop6): 1 truncate cleaned up [ 670.204053][ T3209] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 670.243281][ T28] audit: type=1400 audit(3930879226.182:2684): avc: denied { write } for pid=3207 comm="syz.6.10842" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 670.269611][ T3208] EXT4-fs error (device loop6): __ext4_expand_extra_isize:6455: inode #15: comm syz.6.10842: bad extra_isize 62 (inode size 256) [ 670.290504][ T3208] EXT4-fs error (device loop6): __ext4_expand_extra_isize:6455: inode #15: comm syz.6.10842: bad extra_isize 62 (inode size 256) [ 670.320051][ T3208] EXT4-fs error (device loop6): __ext4_expand_extra_isize:6455: inode #15: comm syz.6.10842: bad extra_isize 62 (inode size 256) [ 670.352689][ T3208] EXT4-fs error (device loop6): __ext4_expand_extra_isize:6455: inode #15: comm syz.6.10842: bad extra_isize 62 (inode size 256) [ 670.373412][ T3208] EXT4-fs error (device loop6): __ext4_expand_extra_isize:6455: inode #15: comm syz.6.10842: bad extra_isize 62 (inode size 256) [ 670.406010][ T3208] EXT4-fs error (device loop6): __ext4_expand_extra_isize:6455: inode #15: comm syz.6.10842: bad extra_isize 62 (inode size 256) [ 670.436712][ T3208] EXT4-fs error (device loop6): __ext4_expand_extra_isize:6455: inode #15: comm syz.6.10842: bad extra_isize 62 (inode size 256) [ 670.473878][ T3208] EXT4-fs error (device loop6): __ext4_expand_extra_isize:6455: inode #15: comm syz.6.10842: bad extra_isize 62 (inode size 256) [ 670.502132][ T3208] EXT4-fs error (device loop6): __ext4_expand_extra_isize:6455: inode #15: comm syz.6.10842: bad extra_isize 62 (inode size 256) [ 670.533034][ T3208] EXT4-fs error (device loop6): __ext4_expand_extra_isize:6455: inode #15: comm syz.6.10842: bad extra_isize 62 (inode size 256) [ 670.907034][ T3237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10852'. [ 671.288527][T31336] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.947484][ T3272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10867'. [ 672.284371][ T3291] loop0: detected capacity change from 0 to 512 [ 672.320312][ T3291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.335794][ T3291] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 672.398421][ T3291] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 18: comm syz.0.10874: lblock 23 mapped to illegal pblock 18 (length 1) [ 672.424226][ T3291] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 18: comm syz.0.10874: lblock 23 mapped to illegal pblock 18 (length 1) [ 672.440453][ T28] audit: type=1400 audit(3930879228.362:2685): avc: denied { write } for pid=3290 comm="syz.0.10874" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 672.469668][ T3291] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.10874: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 672.495634][ T3291] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 12: comm syz.0.10874: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 672.518563][ T3291] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 13: comm syz.0.10874: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 672.542178][ T3298] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 18: comm syz.0.10874: lblock 23 mapped to illegal pblock 18 (length 1) [ 672.576858][ T3291] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 18: comm syz.0.10874: lblock 23 mapped to illegal pblock 18 (length 1) [ 672.600680][ T3291] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 18: comm syz.0.10874: lblock 23 mapped to illegal pblock 18 (length 1) [ 672.621909][ T3291] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.10874: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 672.645287][ T3291] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 12: comm syz.0.10874: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 672.681469][ T1318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.947914][ T3309] syzkaller1: entered promiscuous mode [ 672.953737][ T3309] syzkaller1: entered allmulticast mode [ 673.256121][ T3325] netlink: 'syz.1.10886': attribute type 1 has an invalid length. [ 673.342356][ T3325] 8021q: adding VLAN 0 to HW filter on device bond5 [ 673.370352][ T3325] bond4: (slave bond5): making interface the new active one [ 673.394960][ T3325] bond4: (slave bond5): Enslaving as an active interface with an up link [ 673.456316][ T3333] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 673.504073][ T3333] bond6 (unregistering): Released all slaves [ 673.605978][ T3345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10892'. [ 673.632271][ T3345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10892'. [ 673.663941][ T3352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10895'. [ 673.684011][T28377] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.684539][ T3352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10895'. [ 673.697703][T28377] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.757198][ T3352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10895'. [ 673.766609][T28377] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.778698][T28377] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.067363][ T3379] loop0: detected capacity change from 0 to 1024 [ 674.082677][ T3379] ext4: Unknown parameter 'nojournal' [ 674.204642][ T3322] loop6: detected capacity change from 0 to 512 [ 674.368514][ T3322] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 674.423962][ T3417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10914'. [ 674.435626][ T3417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10914'. [ 674.711350][ T3322] EXT4-fs (loop6): 1 truncate cleaned up [ 674.741584][ T3322] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.835468][ T3434] loop0: detected capacity change from 0 to 512 [ 674.847765][ T3434] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 674.905656][ T3434] EXT4-fs (loop0): 1 truncate cleaned up [ 674.912990][ T3434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.953412][ T28] audit: type=1400 audit(3930879230.872:2686): avc: denied { write } for pid=3433 comm="syz.0.10923" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 675.116739][ T28] audit: type=1400 audit(3930879231.042:2687): avc: denied { write } for pid=3321 comm="syz.6.10884" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 675.156188][ T28] audit: type=1400 audit(3930879231.052:2688): avc: denied { write } for pid=3321 comm="syz.6.10884" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 675.318973][T31336] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.367604][ T3457] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10931'. [ 675.420963][ T3459] netlink: 'syz.1.10932': attribute type 8 has an invalid length. [ 675.541778][ T3477] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10941'. [ 675.554842][ T1318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.560841][ T3477] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10941'. [ 675.564332][ T7283] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.584552][ T7283] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.637994][ T3482] bond6: entered allmulticast mode [ 675.647467][ T7283] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.667360][ T7283] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.682049][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.689474][ C1] bridge0: topology change detected, propagating [ 675.696082][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.703475][ C1] bridge0: topology change detected, propagating [ 675.720504][ T3492] ip6gre1: entered promiscuous mode [ 675.726072][ T3492] ip6gre1: entered allmulticast mode [ 675.732620][ T3492] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 675.743943][ T3492] bond6: (slave ip6gre1): Error -95 calling set_mac_address [ 675.996128][ T3520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10958'. [ 676.028232][ T28] audit: type=1326 audit(3930879231.962:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.0.10946" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61bb0ede59 code=0x0 [ 676.063833][ T3528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10961'. [ 676.083631][ T3532] loop6: detected capacity change from 0 to 128 [ 676.100555][ T3532] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 676.118061][ T3532] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 676.522514][T31336] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 676.689545][ T3561] bond3: entered allmulticast mode [ 677.185109][ T3561] 8021q: adding VLAN 0 to HW filter on device bond3 [ 677.470810][ T3589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10984'. [ 678.204234][ T3604] netlink: 'syz.2.10991': attribute type 1 has an invalid length. [ 678.368129][ T3608] netlink: 'syz.2.10991': attribute type 10 has an invalid length. [ 678.379900][ T3608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10991'. [ 679.019248][ T3604] 8021q: adding VLAN 0 to HW filter on device bond9 [ 679.035357][ T3606] bond9: (slave gretap3): Enslaving as a backup interface with an up link [ 679.044802][ T3607] dummy0: left promiscuous mode [ 679.080291][ T3607] bond9: (slave dummy0): Enslaving as a backup interface with an up link [ 679.095937][ T3614] netlink: 'syz.0.10995': attribute type 10 has an invalid length. [ 679.114985][ T3615] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10996'. [ 679.134425][T28377] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 679.145775][ T3608] dummy0: entered promiscuous mode [ 679.152996][ T3608] bond9: (slave dummy0): Releasing backup interface [ 679.165908][ T3614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.177571][ T3614] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 679.195707][ T3622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.228256][ T3622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.310663][ T12] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 679.333843][ T3622] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 679.348901][ T3622] bond0 (unregistering): Released all slaves [ 680.461217][ T3684] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11025'. [ 680.480062][ T3685] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.11024'. [ 682.302926][ T3711] netlink: 'syz.1.11037': attribute type 1 has an invalid length. [ 682.318553][ T3711] 8021q: adding VLAN 0 to HW filter on device bond7 [ 682.359599][ T3711] bond7: (slave geneve2): making interface the new active one [ 682.369338][ T3711] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 682.486794][ T3720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11041'. [ 682.503864][ T3720] bond0: entered promiscuous mode [ 682.509454][ T3720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.560126][ T3720] bridge1: entered promiscuous mode [ 682.567393][ T3720] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 683.926817][ T3763] netlink: 'syz.1.11057': attribute type 13 has an invalid length. [ 683.986362][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.993921][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.037405][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.130916][ T3765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.215882][T28377] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.229610][T28377] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.251702][ T28] audit: type=1400 audit(3930879240.182:2690): avc: denied { unmount } for pid=3779 comm="syz.5.11063" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 684.273070][T28377] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.292671][T28377] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.310232][ T3783] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 684.341678][T28377] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.355424][T28377] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.365067][T28377] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.379910][T28377] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.478330][ T3791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11067'. [ 684.585072][ T3805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11068'. [ 684.595366][ T3805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11068'. [ 684.909705][ T3810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11074'. [ 685.002944][ T3812] syzkaller0: entered promiscuous mode [ 685.008694][ T3812] syzkaller0: entered allmulticast mode [ 685.087567][ T3826] netlink: 'syz.5.11081': attribute type 27 has an invalid length. [ 685.168075][ T3830] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.233397][ T3830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 685.243948][ T3830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 685.256132][ T3830] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 685.265838][ T3830] veth1_vlan: left promiscuous mode [ 685.271812][ T3830] veth0_vlan: left promiscuous mode [ 685.279631][ T3830] veth0_vlan: entered promiscuous mode [ 685.286595][ T3830] veth1_vlan: entered promiscuous mode [ 685.295058][ T3830] veth1_macvtap: left promiscuous mode [ 685.301786][ T3830] veth0_macvtap: left promiscuous mode [ 685.308302][ T3830] veth0_macvtap: entered promiscuous mode [ 685.315127][ T3830] veth1_macvtap: entered promiscuous mode [ 685.325607][ T3830] 8021q: adding VLAN 0 to HW filter on device eth0 [ 685.333975][ T3830] 8021q: adding VLAN 0 to HW filter on device eth1 [ 685.341887][ T3830] 8021q: adding VLAN 0 to HW filter on device eth2 [ 685.349940][ T3830] 8021q: adding VLAN 0 to HW filter on device eth3 [ 685.359496][ T3830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 685.422368][ T3830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.458725][ T3830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 685.484610][ T3830] 8021q: adding VLAN 0 to HW filter on device bond3 [ 685.498468][ T3830] 8021q: adding VLAN 0 to HW filter on device bond4 [ 685.550900][ T7283] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.561008][ T7283] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.573635][T29079] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.611342][ T7275] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.620684][ T7275] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.629741][ T7275] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 685.638967][ T7275] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.647452][ T7275] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.658545][ T7275] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 685.680361][ T7275] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.689553][ T7275] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.700435][ T7275] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 685.742070][ T7275] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.750538][ T7275] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.759643][ T7275] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 685.853103][T29076] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.998332][ T3864] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11093'. [ 686.011396][ T3864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11093'. [ 686.023926][ T3864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11093'. [ 686.296925][ T3889] netlink: 'syz.0.11101': attribute type 1 has an invalid length. [ 686.312611][ T3384] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 686.313182][ T3889] 8021q: adding VLAN 0 to HW filter on device bond2 [ 686.390161][ T3889] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 686.451590][ T3889] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 686.497703][ T3889] netlink: 'syz.0.11101': attribute type 10 has an invalid length. [ 686.506189][ T3889] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11101'. [ 686.516291][ T3889] dummy0: entered promiscuous mode [ 686.529902][ T3889] bond2: (slave dummy0): Releasing backup interface [ 687.187740][ T3925] Set syz1 is full, maxelem 6117 reached [ 688.169402][ T3969] netlink: 'syz.6.11126': attribute type 4 has an invalid length. [ 688.238552][ T3968] netlink: 'syz.6.11126': attribute type 4 has an invalid length. [ 688.493759][ T3990] tmpfs: Bad value for 'mpol' [ 688.520614][ T28] audit: type=1326 audit(3930879244.452:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.11134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b7719de59 code=0x0 [ 688.588884][ T4000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4000 comm=syz.5.11140 [ 688.624997][ T4003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11141'. [ 688.635191][ T28] audit: type=1326 audit(3930879244.572:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.11134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7719de59 code=0x7ffc0000 [ 688.663911][ T4003] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11141'. [ 688.676831][ T28] audit: type=1326 audit(3930879244.572:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.11134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7719de59 code=0x7ffc0000 [ 688.723125][ T28] audit: type=1326 audit(3930879244.572:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.11134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7719de59 code=0x7ffc0000 [ 688.752162][ T28] audit: type=1326 audit(3930879244.572:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.11134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7719de59 code=0x7ffc0000 [ 688.779180][ T28] audit: type=1326 audit(3930879244.572:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.11134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0b7719de59 code=0x7ffc0000 [ 688.818640][ T28] audit: type=1326 audit(3930879244.572:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.11134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7719de59 code=0x7ffc0000 [ 688.847273][ T28] audit: type=1326 audit(3930879244.572:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.11134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7719de59 code=0x7ffc0000 [ 688.873995][ T28] audit: type=1326 audit(3930879244.612:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.11134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7715e68e code=0x7ffc0000 [ 689.252702][ T28] kauditd_printk_skb: 284 callbacks suppressed [ 689.252721][ T28] audit: type=1326 audit(3930879245.192:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.11134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7715e68e code=0x7ffc0000 [ 689.286357][ T28] audit: type=1326 audit(3930879245.202:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.11134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7715e68e code=0x7ffc0000 [ 689.323541][ T28] audit: type=1326 audit(3930879245.202:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.11134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7715e68e code=0x7ffc0000 [ 689.349616][ T28] audit: type=1326 audit(3930879245.202:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.11134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7715e68e code=0x7ffc0000 [ 689.375805][ T28] audit: type=1326 audit(3930879245.202:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.11134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7715e68e code=0x7ffc0000 [ 689.401903][ T28] audit: type=1326 audit(3930879245.202:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.11134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7715e68e code=0x7ffc0000 [ 689.431352][ T28] audit: type=1326 audit(3930879245.202:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.11134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7715e68e code=0x7ffc0000 [ 689.432088][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 689.458101][ T28] audit: type=1326 audit(3930879245.212:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.11134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7715e68e code=0x7ffc0000 [ 689.492265][ T28] audit: type=1326 audit(3930879245.212:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.11134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7715e68e code=0x7ffc0000 [ 689.519369][ T28] audit: type=1326 audit(3930879245.212:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.11134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b7715e68e code=0x7ffc0000 [ 689.564312][ T4037] loop0: detected capacity change from 0 to 512 [ 689.589857][ T4037] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 689.654907][ T4037] EXT4-fs (loop0): 1 truncate cleaned up [ 689.661378][ T4037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 689.884124][ T1318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.919274][ T4050] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11154'. [ 690.909839][ T4079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11166'. [ 690.919193][ T4079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11166'. [ 692.266987][ T4134] syzkaller0: entered promiscuous mode [ 692.272898][ T4134] syzkaller0: entered allmulticast mode [ 692.581216][ T4148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.588999][ T4148] batadv_slave_1: entered promiscuous mode [ 692.922178][ T4161] netlink: 'syz.1.11199': attribute type 4 has an invalid length. [ 693.019986][ T4170] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.11203'. [ 693.381668][ T4193] tipc: Enabling of bearer rejected, failed to enable media [ 693.382176][ T4189] ref_ctr increment failed for inode: 0x751 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104801500 [ 693.665111][ T4220] netlink: 'syz.1.11223': attribute type 1 has an invalid length. [ 693.694619][ T4220] 8021q: adding VLAN 0 to HW filter on device bond8 [ 694.939533][ T4237] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 695.098070][ T4245] netlink: 51 bytes leftover after parsing attributes in process `syz.5.11234'. [ 695.134056][ T4247] netlink: 'syz.6.11233': attribute type 1 has an invalid length. [ 695.188672][ T4247] 8021q: adding VLAN 0 to HW filter on device bond2 [ 695.629078][ T4274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11241'. [ 695.705958][ T4276] wg2: entered promiscuous mode [ 695.711817][ T4276] wg2: entered allmulticast mode [ 695.854793][ T4282] netlink: 'syz.2.11249': attribute type 1 has an invalid length. [ 695.893094][ T4282] 8021q: adding VLAN 0 to HW filter on device bond10 [ 696.216808][ T4307] loop0: detected capacity change from 0 to 4096 [ 696.268709][ T4307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.323166][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 696.323199][ T28] audit: type=1400 audit(3930879252.262:3059): avc: denied { write } for pid=4303 comm="syz.0.11257" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 696.430446][ T1318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.820196][ T4324] wg2: entered promiscuous mode [ 696.891497][ T4324] wg2: entered allmulticast mode [ 697.432134][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 698.814727][ T4363] loop6: detected capacity change from 0 to 4096 [ 698.871595][ T4363] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 698.909169][ T28] audit: type=1400 audit(3930879254.842:3060): avc: denied { write } for pid=4356 comm="syz.6.11269" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 699.925133][T31336] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.833760][ T4409] loop0: detected capacity change from 0 to 512 [ 700.840812][ T4409] EXT4-fs: inline encryption not supported [ 700.863810][ T4409] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 700.882491][ T4409] EXT4-fs (loop0): 1 truncate cleaned up [ 700.888721][ T4409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 700.927696][ T28] audit: type=1400 audit(3930879256.862:3061): avc: denied { write } for pid=4403 comm="syz.0.11299" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 700.954967][ T4405] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6455: inode #15: comm syz.0.11299: bad extra_isize 62 (inode size 256) [ 700.968803][ T4405] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6455: inode #15: comm syz.0.11299: bad extra_isize 62 (inode size 256) [ 700.982880][ T4405] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6455: inode #15: comm syz.0.11299: bad extra_isize 62 (inode size 256) [ 700.996918][ T4405] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6455: inode #15: comm syz.0.11299: bad extra_isize 62 (inode size 256) [ 701.010918][ T4405] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6455: inode #15: comm syz.0.11299: bad extra_isize 62 (inode size 256) [ 701.024879][ T4405] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6455: inode #15: comm syz.0.11299: bad extra_isize 62 (inode size 256) [ 701.039821][ T4405] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6455: inode #15: comm syz.0.11299: bad extra_isize 62 (inode size 256) [ 701.061486][ T4405] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6455: inode #15: comm syz.0.11299: bad extra_isize 62 (inode size 256) [ 701.080404][ T4405] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6455: inode #15: comm syz.0.11299: bad extra_isize 62 (inode size 256) [ 701.094519][ T4405] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6455: inode #15: comm syz.0.11299: bad extra_isize 62 (inode size 256) [ 701.302213][ T28] audit: type=1400 audit(3930879257.242:3062): avc: denied { listen } for pid=4421 comm="syz.2.11295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 702.295884][ T1318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.529174][ T4449] loop6: detected capacity change from 0 to 512 [ 702.873094][ T4449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.889724][ T4449] ext4 filesystem being mounted at /306/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 702.937844][ T4449] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #2: block 18: comm syz.6.11302: lblock 23 mapped to illegal pblock 18 (length 1) [ 702.964299][ T4449] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #2: block 18: comm syz.6.11302: lblock 23 mapped to illegal pblock 18 (length 1) [ 702.969173][ T28] audit: type=1400 audit(3930879258.902:3063): avc: denied { write } for pid=4442 comm="syz.6.11302" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 703.082205][ T4449] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz.6.11302: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 703.406227][ T4464] netlink: 'syz.5.11309': attribute type 4 has an invalid length. [ 703.467360][ T4465] netlink: 'syz.5.11309': attribute type 4 has an invalid length. [ 703.555312][ T4449] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 12: comm syz.6.11302: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 703.606166][ T4461] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #2: block 18: comm syz.6.11302: lblock 23 mapped to illegal pblock 18 (length 1) [ 703.641340][ T4449] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 13: comm syz.6.11302: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 703.669706][ T4461] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #2: block 18: comm syz.6.11302: lblock 23 mapped to illegal pblock 18 (length 1) [ 703.697294][ T4461] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #2: block 18: comm syz.6.11302: lblock 23 mapped to illegal pblock 18 (length 1) [ 703.715461][ T4449] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz.6.11302: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 703.742189][ T4449] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 12: comm syz.6.11302: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 703.794238][T31336] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.981386][ T4510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11321'. [ 705.178509][ T4517] loop6: detected capacity change from 0 to 4096 [ 705.209784][ T4517] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.243099][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11326'. [ 705.255792][ T28] audit: type=1400 audit(3930879261.192:3064): avc: denied { write } for pid=4516 comm="syz.6.11323" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 705.257399][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11326'. [ 705.307896][T28377] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.317083][T28377] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.363353][T28377] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 705.388244][T28390] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.398093][T28390] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.406788][T28390] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 705.427715][T28390] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.482609][T28390] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.491119][T28390] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 705.500312][T28390] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.509261][T28390] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.518457][T28390] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 705.973977][ T4555] loop0: detected capacity change from 0 to 512 [ 705.993982][ T4555] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.11339: bad orphan inode 15 [ 706.004809][ T4555] loop0: lost filesystem error report for type 5 error -117 [ 706.005003][ T4555] ext4_test_bit(bit=14, block=18) = 1 [ 706.012985][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 706.013010][ C0] EXT4-fs (loop0): initial error at time 3930879261: ext4_orphan_get:1425 [ 706.013056][ C0] EXT4-fs (loop0): last error at time 3930879261: ext4_orphan_get:1425 [ 706.043818][ T4555] is_bad_inode(inode)=0 [ 706.048066][ T4555] NEXT_ORPHAN(inode)=1023 [ 706.053093][ T4555] max_ino=32 [ 706.056394][ T4555] i_nlink=0 [ 706.059833][ T4555] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #15: comm syz.0.11339: corrupted xattr block 19: invalid header [ 706.077357][ T4555] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 706.077747][ T4555] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 706.099002][ T4555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 706.114129][ T4555] ext4 filesystem being mounted at /212/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 706.204040][ T4560] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set [ 706.274449][T31336] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.358966][ T4571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11344'. [ 706.369107][ T1318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 706.668804][ T4594] loop0: detected capacity change from 0 to 4096 [ 706.690641][ T4594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.692139][ T4599] bond11: entered allmulticast mode [ 706.751513][ T28] audit: type=1400 audit(3930879262.682:3065): avc: denied { write } for pid=4593 comm="syz.0.11354" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 706.959396][ T4596] loop6: detected capacity change from 0 to 1024 [ 707.018784][ T4596] ext4: Unknown parameter 'nojournal' [ 707.795481][ T28] audit: type=1400 audit(3930879263.722:3066): avc: denied { bind } for pid=4617 comm="syz.1.11360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 707.837306][ T1318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.935534][ T4624] loop0: detected capacity change from 0 to 128 [ 707.966272][ T4624] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 707.981001][ T4624] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 708.145012][ T1318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 708.154473][ T4628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11375'. [ 708.164911][ T4628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11375'. [ 708.245380][ T4635] netlink: 'syz.0.11378': attribute type 1 has an invalid length. [ 708.276363][ T4635] 8021q: adding VLAN 0 to HW filter on device bond3 [ 708.306186][ T4638] vlan2: entered allmulticast mode [ 708.311549][ T4638] veth0_to_bond: entered allmulticast mode [ 708.321265][ T4638] bond3: (slave vlan2): making interface the new active one [ 708.330468][ T4638] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 709.185087][ T4657] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11374'. [ 714.098530][ T4683] loop0: detected capacity change from 0 to 512 [ 714.218660][ T4706] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11394'. [ 714.238844][ T4683] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 714.269379][ T4683] EXT4-fs (loop0): 1 truncate cleaned up [ 714.304133][ T4683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.320387][ T4715] ªªªªªª: renamed from vlan0 [ 714.455385][ T28] audit: type=1400 audit(3930879270.392:3067): avc: denied { write } for pid=4682 comm="syz.0.11386" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 714.487218][ T28] audit: type=1400 audit(3930879270.392:3068): avc: denied { write } for pid=4682 comm="syz.0.11386" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 714.653006][ T1318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.895458][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11403'. [ 714.939769][ T4749] netlink: 'syz.6.11410': attribute type 1 has an invalid length. [ 715.160041][ T4756] netlink: 'syz.6.11410': attribute type 10 has an invalid length. [ 715.271364][ T4749] 8021q: adding VLAN 0 to HW filter on device bond3 [ 715.274543][ T4756] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11410'. [ 715.310985][ T4753] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 715.382204][ T7275] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 715.404187][ T4756] dummy0: entered promiscuous mode [ 715.519589][ T7275] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 715.627288][ T4773] netlink: 'syz.5.11418': attribute type 1 has an invalid length. [ 715.645963][ T4773] 8021q: adding VLAN 0 to HW filter on device bond5 [ 715.846539][ T4784] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11421'. [ 715.889110][ T28] audit: type=1326 audit(3930879271.822:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.2.11424" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef1cde59 code=0x7ffc0000 [ 715.916293][ T28] audit: type=1326 audit(3930879271.852:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.2.11424" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef1cde59 code=0x7ffc0000 [ 715.949950][ T28] audit: type=1326 audit(3930879271.852:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.2.11424" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef1cde59 code=0x7ffc0000 [ 715.996346][ T28] audit: type=1326 audit(3930879271.852:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.2.11424" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef1cde59 code=0x7ffc0000 [ 716.031048][ T28] audit: type=1326 audit(3930879271.852:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.2.11424" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef1cde59 code=0x7ffc0000 [ 716.057307][ T28] audit: type=1400 audit(3930879271.852:3074): avc: denied { watch watch_reads } for pid=4778 comm="syz.5.11420" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 716.083731][ T28] audit: type=1326 audit(3930879271.882:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.2.11424" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fcaef1cde59 code=0x7ffc0000 [ 716.087060][ T4794] netlink: 'syz.1.11426': attribute type 10 has an invalid length. [ 716.111478][ T28] audit: type=1326 audit(3930879271.882:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.2.11424" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef1cde59 code=0x7ffc0000 [ 716.125882][ T4794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.152928][ T4794] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 716.167124][ T4798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.187119][ T4798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.198496][ T4798] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 716.207843][ T4798] bond0 (unregistering): Released all slaves [ 716.555199][ T4820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11431'. [ 717.081862][ T4825] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.11445'. [ 717.364345][ T4845] netlink: 'syz.6.11442': attribute type 10 has an invalid length. [ 717.483796][ T4853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11446'. [ 717.510440][ T4836] ================================================================== [ 717.518943][ T4836] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 717.526345][ T4836] [ 717.528684][ T4836] read-write to 0xffffc9000470fe30 of 8 bytes by task 4849 on cpu 1: [ 717.536756][ T4836] shmem_writeout+0x2eb/0x8f0 [ 717.541470][ T4836] shrink_folio_list+0x1ebb/0x2780 [ 717.546850][ T4836] evict_folios+0x20e2/0x2d80 [ 717.551653][ T4836] try_to_shrink_lruvec+0x7c5/0xb10 [ 717.556969][ T4836] shrink_lruvec+0x25e/0x1b60 [ 717.561743][ T4836] shrink_node+0x69d/0x20f0 [ 717.566442][ T4836] do_try_to_free_pages+0x408/0xc90 [ 717.571647][ T4836] try_to_free_mem_cgroup_pages+0x201/0x420 [ 717.577636][ T4836] try_charge_memcg+0x375/0xa00 [ 717.582503][ T4836] __memcg_kmem_charge_page+0x199/0x3a0 [ 717.588064][ T4836] __alloc_frozen_pages_noprof+0x18a/0x350 [ 717.593883][ T4836] alloc_pages_mpol+0xa9/0x1d0 [ 717.598846][ T4836] alloc_pages_noprof+0x8f/0x140 [ 717.603796][ T4836] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 717.609725][ T4836] __kvmalloc_node_noprof+0x3a0/0x590 [ 717.615109][ T4836] futex_hash_allocate+0x192/0x920 [ 717.620324][ T4836] futex_hash_prctl+0xd8/0xf0 [ 717.625021][ T4836] __se_sys_prctl+0x4f4/0x13b0 [ 717.629800][ T4836] __x64_sys_prctl+0x67/0x80 [ 717.634431][ T4836] x64_sys_call+0x2533/0x3020 [ 717.639119][ T4836] do_syscall_64+0x136/0x3c0 [ 717.643732][ T4836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.649639][ T4836] [ 717.651971][ T4836] read to 0xffffc9000470fe30 of 8 bytes by task 4836 on cpu 0: [ 717.659529][ T4836] shmem_fallocate+0x589/0x8f0 [ 717.664318][ T4836] vfs_fallocate+0x3ac/0x400 [ 717.668969][ T4836] __x64_sys_fallocate+0x7a/0xd0 [ 717.674086][ T4836] x64_sys_call+0x298e/0x3020 [ 717.678799][ T4836] do_syscall_64+0x136/0x3c0 [ 717.683507][ T4836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.689410][ T4836] [ 717.691739][ T4836] value changed: 0x0000000000000461 -> 0x000000000000046e [ 717.699110][ T4836] [ 717.701432][ T4836] Reported by Kernel Concurrency Sanitizer on: [ 717.707589][ T4836] CPU: 0 UID: 0 PID: 4836 Comm: syz.1.11440 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 717.718622][ T4836] Tainted: [W]=WARN [ 717.722425][ T4836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 717.732574][ T4836] ================================================================== [ 718.536602][ T4845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.545030][ T4845] bond0: (slave batadv0): Enslaving as an active interface with an up link