last executing test programs: 4.176039757s ago: executing program 4 (id=607): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noinit_itable}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$eJzs3M9vFFUcAPDvTH/w21bEHyBIFY3EHy0tP+TgRaMJB01M9IDxVNtCKgs1tCZCiFYPeDQk3o3/hfGkF6NeNPGqd0NCDBdQL2tmZwaWZbfd0m0X2M8nme57M6/73ndm3u6bebsbQM8ayf4kEVsj4o+IGMqztxYYyR+uX70w9c/VC1NJVKtv/53Uyl27emGqLFr+35Y8U60W+Q1N6r34XsRkpTJztsiPLZz+cGz+3PkXZ09Pnpw5OXNm4ujRQwf3DB6ZONyROLO4ru36ZG73zmPvXnpz6vil939O0sjjjoY4OmUk37tNPdPpyrpsW1066a/fsvfXm+lmZwLd1BcR2eEaqPX/oeiLTTe2DcXrn3e1ccCaqlar1SVelRerwH0siW63AOiO8o0+u/4tl3UaetwVrrySXwBlcV8vlnxLf6R5Yu9Aw/Xt1g7WPxIRxxf//TpbYo3uQwAA1Ps+G/+80Gz8l8YjeWIw+/NAMYcyHBEPRsT2iHgoInZExMMRtbKPRsRjK6y/cYbk9vFPevmOg2tDNv57uZjbunX8l5ZFhvuK3LZa/APJidnKzIFin+yPgQ0nZpOZ8SXq+OG1379sta1+/JctWf3lWLBox+X+hht005MLk6uJud6VzyJ29TeLP4lyGieJiJ0RsesO65h9rr/ltuXjX0Lrp21b9ZuIZ/PjvxgN8ZeSlvOT4y8dmTg8tjEqMwfGyrPidr/8dvGtVvWvKv4OyI7/5qbn/434h5ONEfPnzp+qzdfOr+jps64TF//8ouU1TRF/1r3aOf+PbSvO/8HkndqKwWLDx5MLC2fHIwaTN25fP3Hz2cp8WT6Lf/++5v1/e9zcE49HxO6I2BMRT2QXhUXbn4yIpyJi3xI74adXn/5gmfibHP/1mSvN4p9e7vhH/fFfeaLv1I/fLR//xohodfwP1VL7izXtvP6128DV7DsAAAC4V+SfgU/S0RvpNB0dzT/DvyM2p5W5+YXnT8x9dGY6n/cejoG0vNM1VHc/dLy4N1zmJxryB4v7xl/1barlR6fmKtPdDh563JYW/T/zV1+3WwesuQ7MowH3KP0fepf+D70p0f+hp+n/0Lua9f9PW5Ye/XZNGwOsK+//0Lva6P+L+UPrUQFwb/L+D71L/4ee1PK78emqvvK/7on/it8zvFvac/8nIr0rmnH/J/rb/jGLFSSqQ3n/z9ZsaFqm269MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfF/AAAA//8Qi+Nc") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.308256854s ago: executing program 2 (id=613): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000003600)={0x0, 0x0, 0x0, &(0x7f00000035c0)="98c9935562ed", 0x2, r2, 0x4}, 0x38) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) 3.14931207s ago: executing program 4 (id=616): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.629851456s ago: executing program 2 (id=621): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8006f, 0x1, @perf_config_ext={0xe98, 0x7}, 0x10c0e8, 0x0, 0x0, 0x8, 0x4, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffdffffff}, r0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x18000, &(0x7f0000000ac0)={[{@journal_dev={'journal_dev', 0x3d, 0x8001}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4a464f54}}, {@quota}, {@noload}, {@barrier}, {@errors_continue}, {@jqfmt_vfsv1}, {@quota}, {@auto_da_alloc}]}, 0x1, 0x644, &(0x7f0000000440)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) recvmmsg(r2, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000000, 0x0) close_range(r1, r2, 0x0) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008802, &(0x7f0000000180)={[{@resgid={'resgid', 0x3d, 0xee01}}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0xac9}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@init_itable}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x24, 0x0) 2.629599036s ago: executing program 3 (id=622): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff001, {0x0, 0x0, 0x0, r6, {0xf000, 0x7}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socketpair$unix(0x1, 0x2, 0x0, 0x0) 2.448347942s ago: executing program 3 (id=623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4d}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) 1.783804873s ago: executing program 4 (id=626): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x7}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) listen(r0, 0xfffffffe) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r4, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) 1.683742107s ago: executing program 2 (id=627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x10}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mlock2(&(0x7f0000751000/0x3000)=nil, 0x3000, 0x0) munlockall() mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x6, 0x1000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe02a}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="180300000000000000000000040000008510000006000000180000000a0000000000000000000000650000000300000018000000000000000000000000000000950000000000000074030000000600009500000000000000da8b9dd52077159e57c77d01ab179db0a63ed6aaee5cdae2d5746df72ed9759651b727c9c619327532974b2f5f3fb75896bd71660302cced81564ed639c3068b3d8ca678098a21af6d3209c044565bbf70b6bfa7263922bfd079bed8b418b97cb68b84a4cc320ec44decb96c9897de1016641bc9547c2c"], &(0x7f0000000000)='GPL\x00'}, 0x94) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000080)='objref\x00', 0x0, r0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x0) 1.56178438s ago: executing program 4 (id=629): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10101, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_setup(0x86, &(0x7f0000000440)) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) 1.519930202s ago: executing program 3 (id=630): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x114}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x1) fcntl$getflags(0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000001000020004001000080001400400", 0x56}], 0x1) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, 0x0) 1.384129316s ago: executing program 3 (id=632): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r7, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008081}, 0x24040812) close_range(r0, 0xffffffffffffffff, 0x0) 1.323306298s ago: executing program 1 (id=633): unshare(0x2028400) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x1, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 1.119696875s ago: executing program 0 (id=634): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000240000000000800014000000000180003801400010069705f7674693000000000000000000014000000110001"], 0x80}}, 0x40000) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) close(r0) 1.119294095s ago: executing program 3 (id=635): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x20084, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000), 0x5, 0x4ba, &(0x7f00000002c0)="$eJzs3N9rHNUeAPDvbJJNe9vc7O291x/9YVerGPyRNGnVPgj+QKEvgqAP9TGmaalNG2ki2BJsFKmP0r+g+ij4F/ikL6KCoPiqj4IIRfLS2gcZmd2dZLPZjZs0m22Tzwe2OWfOzJxzZubMnjmnswFsW+XsnyRid0T8HBGD1ejyFcrVPzcX5ib+XJibSCJNX/sjqax3Y2FuIl81325XLTJUiCh8mMS+JvnOXLx0dnxqavJCLT4ye+7tkZmLl548c2789OTpyfNjx44dPTL6zNNjT21IPQeysu59b3r//cffuPrKxImrb377eVbe3bX0GwtzxeVblPLA3ohIG/f3fBt5lqO8/FjWeWRtxb/jDdSFk94uFoQ16YmI7HT1Vdr/YPTE0skbjJc/iCh0tXxA56RpmvavWJrdFXZmgfkU2MKS6HYJgO7Iv/Gz5/j8s8ldkK66/kL1ASir983ap5rSW3nyKZeqz0YDHcq/HAcj4ta1E/O3rkXDeAoAQCd8mfV/nmjW/yvEPXXr/bs2N1SKiP9ExJ6I+G9E/C8i/h9RWffeiLiv3YyT5lMjK/s/P+5cZ9XakvX/nq3NbS3v/y2Oe5d6arGBSv37klNnpiYP147JUPT1Z/HRVfL46qWfPm6VVo6IrO+Xf7L8875grRy/9zYM0J0cnx2/nTrXu34wYm9vs/onizMBSexY9/4HihFnHvtsf6v0f67/KjZgnin9NOLR6vmfj4b655LV5ydHdsTU5OGR/KpY6bsfrrzaKv/bqv8GuP5+xL+aXv+L9S8l9fO1M2vOovfKLx+1fKZZ7/VfTF6vhPNJ23fHZ2cvjEYUk/mVy8eWts3j+fpZ/YcONW//eyL++qS23b6IyC7iAxHxQETlqS0r+4MR8VBEHFrlAHzz4sNvZX+/X1f9Oyur/8k1nf/6QF80LmkW6Dn79Ret8m/v/B+thIZqS5buf2lPq/1WM8/vW60LeFsHDwAAAO4Shcr/gU+SiOq4ye66tGL2HD09M/v4qel3zp+sppWir5CPdA3WjYeO1saG8/hYQ/xIZdw4TdN0ZyU+PDE91ak5daA9u6rtvzC8eC8oFIaHq2m/NYyuPdeVEgIdtaZ5tFZvtAF3pfbav4YPW9Fi+1/5JmBO44ctqtr+ewa7XQ5g8/m9Fti+mrX/yxE3u1AUYJP5/oftS/uH7Wut7b/UoXIAm8/3P2xLy1+JL0Ybr/O3FdhzfGP2szUDkSwd+Z5ul6d/fZtH4Q45mPWBpElSYXHJgV/zH4YotL3n4oYULFZbpz8i2t3h5disg9ntOxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDG+DsAAP//KI/hOg==") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911300000000000850000002e0000009500000000000000358bb9f43d86b13600"/50], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.115795495s ago: executing program 2 (id=644): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x26008884}, 0x4054) 1.098308565s ago: executing program 1 (id=636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000004000000040000001500000000000000", @ANYRES32, @ANYBLOB="0000000000003635000000000000000000006faf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000340), &(0x7f0000000180)=""/122}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r4 = timerfd_create(0x7, 0x800) timerfd_gettime(r4, &(0x7f0000000140)) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x8, 0xfff3}, {}, {0xf, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) dup3(r5, r1, 0x0) 958.2866ms ago: executing program 1 (id=637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x3}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001bc0), 0x20c, &(0x7f0000001c80)=ANY=[], 0x70}, 0x4048044) 943.84285ms ago: executing program 0 (id=638): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 790.189915ms ago: executing program 0 (id=639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="8c3fe11ab92631892c08002ce7ae", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5}, 0x14) 720.538037ms ago: executing program 1 (id=640): perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x2010, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810754, &(0x7f00000001c0), 0x4, 0x4b1, &(0x7f0000000bc0)="$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") r1 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000088) socket$inet_udp(0x2, 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) 664.562369ms ago: executing program 2 (id=641): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sync() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) epoll_create1(0x80000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 572.138302ms ago: executing program 0 (id=642): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) 571.929592ms ago: executing program 4 (id=643): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0xfffffffe, 0x61, 0x11, 0x8f}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbb8, &(0x7f0000000c00)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x6883, 0x7, 0x1) r0 = socket(0x2, 0x80805, 0x0) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000440)="0700000002000000", 0x8) get_mempolicy(0x0, 0x0, 0x9b, &(0x7f0000ffc000/0x1000)=nil, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 291.668481ms ago: executing program 2 (id=645): gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x4, 0x9484, 0x2001, 0x402, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) fsmount(0xffffffffffffffff, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@data_journal}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@dax}]}, 0x1, 0x438, &(0x7f0000000340)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0dff"], 0x14}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 290.842021ms ago: executing program 0 (id=646): epoll_create1(0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x5000011, 0x11, r2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) timer_delete(r1) 262.529472ms ago: executing program 1 (id=647): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7a38, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0x34c}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x30) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r1, 0x0, 0x1, 0xa) 36.12743ms ago: executing program 1 (id=648): bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x46, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x1, 0x6}, {0x0, 0x0, 0x400000003, 0x4}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in=@rand_addr=0x64010102, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0xb7, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 24.31118ms ago: executing program 4 (id=649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000004000000040000001500000000000000", @ANYRES32, @ANYBLOB="0000000000003635000000000000000000006faf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000340), &(0x7f0000000180)=""/122}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r4 = timerfd_create(0x7, 0x800) timerfd_gettime(r4, &(0x7f0000000140)) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x8, 0xfff3}, {}, {0xf, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) dup3(r5, r1, 0x0) 21.00546ms ago: executing program 3 (id=650): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x7fff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 0 (id=651): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffe) kernel console output (not intermixed with test programs): erface not active [ 36.256415][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.263809][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.290907][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.302630][ T3297] team0: Port device team_slave_0 added [ 36.313519][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.320834][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.347078][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.373588][ T3297] team0: Port device team_slave_1 added [ 36.389426][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.400518][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.437339][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.444698][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.472210][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.495542][ T3303] team0: Port device team_slave_0 added [ 36.501742][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.508840][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.534966][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.557842][ T3303] team0: Port device team_slave_1 added [ 36.575462][ T3305] hsr_slave_0: entered promiscuous mode [ 36.581550][ T3305] hsr_slave_1: entered promiscuous mode [ 36.587458][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 36.593275][ T3305] Cannot create hsr debugfs directory [ 36.606959][ T3302] hsr_slave_0: entered promiscuous mode [ 36.613339][ T3302] hsr_slave_1: entered promiscuous mode [ 36.619434][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 36.625480][ T3302] Cannot create hsr debugfs directory [ 36.637649][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.644800][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.671041][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.682907][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.690006][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.716529][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.747969][ T3297] hsr_slave_0: entered promiscuous mode [ 36.754409][ T3297] hsr_slave_1: entered promiscuous mode [ 36.760455][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 36.766384][ T3297] Cannot create hsr debugfs directory [ 36.818756][ T3303] hsr_slave_0: entered promiscuous mode [ 36.824979][ T3303] hsr_slave_1: entered promiscuous mode [ 36.831075][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 36.836821][ T3303] Cannot create hsr debugfs directory [ 36.961395][ T3298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.970220][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.989814][ T3298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.998538][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.018936][ T3298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.027917][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.046959][ T3298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.056032][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.098871][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.109921][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.118683][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.127796][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.139193][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.148612][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.163182][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.172253][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.193822][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.203677][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.211780][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.221026][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.229706][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.239260][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.247699][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.257041][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.296450][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.306216][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.326389][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.335775][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.351908][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.359360][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.368410][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.376874][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.385833][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.423456][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.431244][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.440967][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.449405][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.458285][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.471535][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.480592][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.489305][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.498691][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.513436][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.520588][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.529875][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.537067][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.574653][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.596353][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.620660][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.635783][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.643202][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.656218][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.667880][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.675008][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.693651][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.701344][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.716230][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.729625][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.736853][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.753481][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.770173][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.777295][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.797347][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.819733][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.827300][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.841260][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.864797][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.873297][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.899794][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.907173][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.926952][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.987294][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.144608][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.204832][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.246492][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.282638][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.337676][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.471637][ T3302] veth0_vlan: entered promiscuous mode [ 38.478808][ T3303] veth0_vlan: entered promiscuous mode [ 38.493549][ T3297] veth0_vlan: entered promiscuous mode [ 38.501193][ T3302] veth1_vlan: entered promiscuous mode [ 38.515022][ T3303] veth1_vlan: entered promiscuous mode [ 38.524006][ T3297] veth1_vlan: entered promiscuous mode [ 38.570886][ T3302] veth0_macvtap: entered promiscuous mode [ 38.578650][ T3305] veth0_vlan: entered promiscuous mode [ 38.590213][ T3302] veth1_macvtap: entered promiscuous mode [ 38.601838][ T3303] veth0_macvtap: entered promiscuous mode [ 38.616161][ T3305] veth1_vlan: entered promiscuous mode [ 38.623563][ T3298] veth0_vlan: entered promiscuous mode [ 38.633395][ T3303] veth1_macvtap: entered promiscuous mode [ 38.640176][ T3297] veth0_macvtap: entered promiscuous mode [ 38.651835][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.659447][ T3297] veth1_macvtap: entered promiscuous mode [ 38.674708][ T3298] veth1_vlan: entered promiscuous mode [ 38.685533][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.696684][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.716376][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.729218][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.736722][ T405] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.745739][ T405] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.764072][ T405] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.772934][ T405] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.784479][ T3305] veth0_macvtap: entered promiscuous mode [ 38.793363][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.802498][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.817149][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.826963][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.836015][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.846460][ T3305] veth1_macvtap: entered promiscuous mode [ 38.860863][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 38.860883][ T28] audit: type=1400 audit(1781583624.161:146): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.RLIp5X/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.869680][ T405] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.901673][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.904219][ T28] audit: type=1400 audit(1781583624.161:147): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.935670][ T28] audit: type=1400 audit(1781583624.221:148): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.RLIp5X/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.953341][ T3298] veth0_macvtap: entered promiscuous mode [ 38.963782][ T28] audit: type=1400 audit(1781583624.221:149): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.992311][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.994391][ T28] audit: type=1400 audit(1781583624.221:150): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.RLIp5X/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.004428][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.026628][ T28] audit: type=1400 audit(1781583624.221:151): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.RLIp5X/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.061786][ T28] audit: type=1400 audit(1781583624.231:152): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.082754][ T28] audit: type=1400 audit(1781583624.241:153): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.086607][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.112301][ T28] audit: type=1400 audit(1781583624.241:154): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="gadgetfs" ino=3838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.147582][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.158564][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.171924][ T3298] veth1_macvtap: entered promiscuous mode [ 39.185093][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.208460][ T28] audit: type=1400 audit(1781583624.511:155): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.236619][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.252617][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.279601][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.294659][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.335559][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.371839][ T3474] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.389177][ T3474] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.400208][ T3474] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.410664][ T3474] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.566845][ T3516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 39.636470][ T3516] syz.3.4 (3516) used greatest stack depth: 10176 bytes left [ 39.912334][ T3528] loop3: detected capacity change from 0 to 512 [ 39.950063][ T3528] EXT4-fs: Ignoring removed bh option [ 40.163777][ T3528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.213763][ T3528] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.347725][ T3536] loop1: detected capacity change from 0 to 4096 [ 40.371379][ T3536] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 40.423789][ T3542] tipc: Failed to remove unknown binding: 66,0,0/0:3970447942/3970447944 [ 40.445525][ T3542] tipc: Failed to remove unknown binding: 66,0,0/0:3970447942/3970447943 [ 40.462529][ T3542] tipc: Failed to remove unknown binding: 66,0,0/0:3970447942/3970447944 [ 40.488812][ T3542] tipc: Failed to remove unknown binding: 66,0,0/0:3970447942/3970447943 [ 40.516011][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.653486][ T3556] syzkaller0: entered promiscuous mode [ 40.665253][ T3551] loop0: detected capacity change from 0 to 512 [ 40.675897][ T3556] syzkaller0: entered allmulticast mode [ 40.824008][ T3549] loop2: detected capacity change from 0 to 512 [ 40.886081][ T3551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.915661][ T3551] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.124070][ T3549] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.16: bad orphan inode 13 [ 41.332940][ T3549] loop2: lost filesystem error report for type 5 error -117 [ 41.340792][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 41.354644][ C1] EXT4-fs (loop2): initial error at time 1781583626: ext4_orphan_get:1425 [ 41.363502][ C1] EXT4-fs (loop2): last error at time 1781583626: ext4_orphan_get:1425 [ 41.413978][ T3549] ext4_test_bit(bit=12, block=4) = 1 [ 41.451593][ T3549] is_bad_inode(inode)=0 [ 41.479433][ T3549] NEXT_ORPHAN(inode)=0 [ 41.511060][ T3549] max_ino=32 [ 41.527269][ T3549] i_nlink=1 [ 41.644961][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.659970][ T3579] syz.4.27 uses obsolete (PF_INET,SOCK_PACKET) [ 41.690948][ T3578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 41.803123][ T3585] loop1: detected capacity change from 0 to 512 [ 41.841788][ T3585] ======================================================= [ 41.841788][ T3585] WARNING: The mand mount option has been deprecated and [ 41.841788][ T3585] and is ignored by this kernel. Remove the mand [ 41.841788][ T3585] option from the mount to silence this warning. [ 41.841788][ T3585] ======================================================= [ 41.922625][ T3581] syzkaller0: entered promiscuous mode [ 41.950034][ T3581] syzkaller0: entered allmulticast mode [ 41.975438][ T3585] EXT4-fs: Ignoring removed oldalloc option [ 42.003866][ T3585] EXT4-fs: Ignoring removed nobh option [ 42.034768][ T3585] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.29: iget: bad extra_isize 90 (inode size 256) [ 42.065140][ T3549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.099919][ T3585] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.100781][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 42.116672][ C0] EXT4-fs (loop1): initial error at time 1781583627: ext4_xattr_inode_iget:441: inode 11 [ 42.126591][ C0] EXT4-fs (loop1): last error at time 1781583627: ext4_xattr_inode_iget:441: inode 11 [ 42.139618][ T3585] EXT4-fs (loop1): Remounting filesystem read-only [ 42.147932][ T3585] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.182178][ T3585] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 42.223779][ T3585] EXT4-fs (loop1): 1 orphan inode deleted [ 42.238097][ T3585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.915136][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.707374][ T3606] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 43.707411][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.800991][ T3613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 43.916622][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 43.916643][ T28] audit: type=1400 audit(1781583629.211:225): avc: denied { mounton } for pid=3610 comm="syz.3.35" path="/6/file0" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.162963][ T28] audit: type=1400 audit(1781583629.471:226): avc: denied { setopt } for pid=3630 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.187308][ T28] audit: type=1400 audit(1781583629.471:227): avc: denied { bind } for pid=3630 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.207690][ T28] audit: type=1400 audit(1781583629.471:228): avc: denied { name_bind } for pid=3630 comm="syz.0.43" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 44.209690][ T3633] loop2: detected capacity change from 0 to 128 [ 44.229588][ T28] audit: type=1400 audit(1781583629.471:229): avc: denied { node_bind } for pid=3630 comm="syz.0.43" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 44.229627][ T28] audit: type=1400 audit(1781583629.491:230): avc: denied { name_connect } for pid=3630 comm="syz.0.43" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 44.229660][ T28] audit: type=1400 audit(1781583629.491:231): avc: denied { getopt } for pid=3632 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.374116][ T3636] Zero length message leads to an empty skb [ 44.376852][ T3393] IPVS: starting estimator thread 0... [ 44.454363][ T28] audit: type=1400 audit(1781583629.761:232): avc: denied { shutdown } for pid=3642 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.474315][ T3637] IPVS: using max 2208 ests per chain, 110400 per kthread [ 44.483087][ T3633] FAT-fs (loop2): bogus number of FAT structure [ 44.485927][ T28] audit: type=1400 audit(1781583629.781:233): avc: denied { write } for pid=3642 comm="syz.4.48" lport=56882 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 44.532704][ T3633] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 44.552107][ T3633] FAT-fs (loop2): Can't find a valid FAT filesystem [ 44.616340][ T3633] netlink: 220 bytes leftover after parsing attributes in process `syz.2.44'. [ 44.627688][ T3633] tc_dump_action: action bad kind [ 44.698344][ T28] audit: type=1400 audit(1781583630.001:234): avc: denied { read } for pid=3648 comm="syz.3.50" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.820050][ T3651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'. [ 45.032774][ T3665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.54'. [ 45.103700][ T3685] syzkaller0: entered promiscuous mode [ 45.115294][ T3685] syzkaller0: entered allmulticast mode [ 45.507251][ T3729] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: 1 [ 45.532831][ T3729] ref_ctr increment failed for inode: 0x41 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881020a3f00 [ 45.557901][ T3729] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: -1 [ 45.631744][ T3729] ref_ctr decrement failed for inode: 0x41 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881020a3f00 [ 45.655468][ T3729] uprobe: syz.3.62:3729 failed to unregister, leaking uprobe [ 47.201180][ T3811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.73'. [ 47.613106][ T3824] loop0: detected capacity change from 0 to 512 [ 47.643777][ T3824] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.661551][ T3824] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.672826][ T3824] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 47.685851][ T3824] System zones: 1-12 [ 47.696666][ T3824] EXT4-fs (loop0): 1 truncate cleaned up [ 47.703014][ T3824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.717883][ T3830] capability: warning: `syz.4.80' uses 32-bit capabilities (legacy support in use) [ 47.870821][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.026942][ T3838] loop4: detected capacity change from 0 to 1024 [ 48.048197][ T3838] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.065293][ T3838] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.091133][ T3838] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 48.102865][ T3841] loop2: detected capacity change from 0 to 8192 [ 48.109893][ T3838] EXT4-fs (loop4): orphan cleanup on readonly fs [ 48.135142][ T3838] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.84: Freeing blocks not in datazone - block = 0, count = 4096 [ 48.182829][ T3838] loop4: lost filesystem error report for type 5 error -117 [ 48.186353][ T3838] EXT4-fs (loop4): 1 orphan inode deleted [ 48.194004][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 48.194049][ C1] EXT4-fs (loop4): initial error at time 1781583633: ext4_free_blocks:6718 [ 48.194152][ C1] EXT4-fs (loop4): last error at time 1781583633: ext4_free_blocks:6718 [ 48.233523][ T3838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.538168][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.879521][ T3856] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 48.994692][ T3856] syzkaller0: entered promiscuous mode [ 49.002638][ T3856] syzkaller0: entered allmulticast mode [ 49.109435][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 49.109489][ T28] audit: type=1400 audit(1781583634.411:310): avc: denied { ioctl } for pid=3864 comm="syz.3.92" path="socket:[6332]" dev="sockfs" ino=6332 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.147028][ T3870] netlink: 40 bytes leftover after parsing attributes in process `syz.1.93'. [ 49.225755][ T3874] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.255956][ T3843] Set syz1 is full, maxelem 65536 reached [ 49.284784][ T3874] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.299769][ T3881] loop0: detected capacity change from 0 to 128 [ 49.320305][ T3881] EXT4-fs: test_dummy_encryption option not supported [ 49.330184][ T28] audit: type=1400 audit(1781583634.631:311): avc: denied { watch } for pid=3878 comm="syz.3.96" path="/18/file0" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.362538][ T3874] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.421397][ T3881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'. [ 49.436551][ T3874] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.506281][ T3775] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.525614][ T3775] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.534418][ T28] audit: type=1400 audit(1781583634.841:312): avc: denied { unmount } for pid=3892 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.551702][ T3775] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.583782][ T3775] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.889806][ T28] audit: type=1400 audit(1781583635.191:313): avc: denied { setopt } for pid=3909 comm="syz.3.109" lport=58730 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 50.180866][ T28] audit: type=1400 audit(1781583635.481:314): avc: denied { mount } for pid=3926 comm="syz.1.116" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 50.283035][ T28] audit: type=1400 audit(1781583635.581:315): avc: denied { watch } for pid=3932 comm="syz.1.119" path="/18/control" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.429551][ T28] audit: type=1400 audit(1781583635.731:316): avc: denied { getopt } for pid=3937 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.462458][ T3938] loop4: detected capacity change from 0 to 512 [ 50.484735][ T3938] EXT4-fs: test_dummy_encryption option not supported [ 50.513961][ T28] audit: type=1400 audit(1781583635.821:317): avc: denied { create } for pid=3937 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.776820][ T28] audit: type=1400 audit(1781583636.081:318): avc: denied { setopt } for pid=3951 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.866687][ T28] audit: type=1326 audit(1781583636.171:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.1.124" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5802f6ce59 code=0x7ffc0000 [ 51.068368][ T3960] xt_socket: unknown flags 0x58 [ 52.360460][ T3972] netlink: 'syz.4.131': attribute type 1 has an invalid length. [ 52.499736][ T3974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 52.523968][ T3972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.667295][ T3974] bond1 (unregistering): Released all slaves [ 53.361950][ T3980] capability: warning: `syz.3.134' uses deprecated v2 capabilities in a way that may be insecure [ 53.900966][ T3992] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 54.135940][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 54.135958][ T28] audit: type=1400 audit(1781583639.441:381): avc: denied { accept } for pid=4007 comm="syz.1.144" lport=58363 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.414127][ T28] audit: type=1400 audit(1781583639.721:382): avc: denied { connect } for pid=4014 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.491147][ T28] audit: type=1400 audit(1781583639.791:383): avc: denied { bpf } for pid=4016 comm="syz.4.148" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 54.556212][ T28] audit: type=1400 audit(1781583639.831:384): avc: denied { perfmon } for pid=4016 comm="syz.4.148" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 54.870666][ T28] audit: type=1400 audit(1781583640.171:385): avc: denied { read } for pid=4023 comm="syz.4.151" name="qrtr-tun" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.936907][ T28] audit: type=1400 audit(1781583640.171:386): avc: denied { open } for pid=4023 comm="syz.4.151" path="/dev/qrtr-tun" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.027848][ T28] audit: type=1400 audit(1781583640.201:387): avc: denied { create } for pid=4023 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 55.086689][ T28] audit: type=1400 audit(1781583640.201:388): avc: denied { connect } for pid=4023 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 55.174283][ T28] audit: type=1400 audit(1781583640.301:389): avc: denied { connect } for pid=4027 comm="syz.3.152" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.240280][ T28] audit: type=1400 audit(1781583640.301:390): avc: denied { write } for pid=4027 comm="syz.3.152" laddr=fe80::b lport=2 faddr=::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.728872][ T4042] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 56.703162][ T4056] netlink: 'syz.1.162': attribute type 21 has an invalid length. [ 56.732221][ T4056] IPv6: NLM_F_CREATE should be specified when creating new route [ 56.754691][ T4058] netlink: 'syz.1.162': attribute type 21 has an invalid length. [ 56.755239][ T4056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 56.770929][ T4056] IPv6: NLM_F_CREATE should be set when creating new route [ 56.778452][ T4056] IPv6: NLM_F_CREATE should be set when creating new route [ 56.786083][ T4056] IPv6: NLM_F_CREATE should be set when creating new route [ 56.793842][ T4058] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 56.892619][ T4065] loop4: detected capacity change from 0 to 128 [ 56.916777][ T4065] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 56.951726][ T4067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.966212][ T4056] vlan2: entered promiscuous mode [ 56.984136][ T4056] bridge0: entered promiscuous mode [ 56.993700][ T4067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.035850][ T4067] netlink: 'syz.2.165': attribute type 4 has an invalid length. [ 57.080349][ T4067] netlink: 'syz.2.165': attribute type 4 has an invalid length. [ 57.098088][ T4071] syzkaller0: entered promiscuous mode [ 57.104093][ T4071] syzkaller0: entered allmulticast mode [ 57.227345][ T4073] loop4: detected capacity change from 0 to 128 [ 57.350956][ T4076] syz.4.168: attempt to access beyond end of device [ 57.350956][ T4076] loop4: rw=2049, sector=145, nr_sectors = 360 limit=128 [ 57.397119][ T4076] syz.4.168: attempt to access beyond end of device [ 57.397119][ T4076] loop4: rw=2049, sector=513, nr_sectors = 8 limit=128 [ 57.440675][ T4076] syz.4.168: attempt to access beyond end of device [ 57.440675][ T4076] loop4: rw=2049, sector=529, nr_sectors = 8 limit=128 [ 57.492372][ T4076] syz.4.168: attempt to access beyond end of device [ 57.492372][ T4076] loop4: rw=2049, sector=545, nr_sectors = 8 limit=128 [ 57.540852][ T4076] syz.4.168: attempt to access beyond end of device [ 57.540852][ T4076] loop4: rw=2049, sector=561, nr_sectors = 8 limit=128 [ 57.571653][ T4073] syz.4.168: attempt to access beyond end of device [ 57.571653][ T4073] loop4: rw=524288, sector=145, nr_sectors = 216 limit=128 [ 57.591841][ T4076] syz.4.168: attempt to access beyond end of device [ 57.591841][ T4076] loop4: rw=2049, sector=577, nr_sectors = 8 limit=128 [ 57.610911][ T4073] syz.4.168: attempt to access beyond end of device [ 57.610911][ T4073] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 57.626415][ T4076] syz.4.168: attempt to access beyond end of device [ 57.626415][ T4076] loop4: rw=2049, sector=593, nr_sectors = 8 limit=128 [ 57.662945][ T4078] syz.4.168: attempt to access beyond end of device [ 57.662945][ T4078] loop4: rw=0, sector=150, nr_sectors = 1 limit=128 [ 57.704044][ T4073] Buffer I/O error on dev loop4, logical block 145, async page read [ 57.725266][ T4073] Buffer I/O error on dev loop4, logical block 146, async page read [ 57.758871][ T4073] Buffer I/O error on dev loop4, logical block 147, async page read [ 57.776956][ T4073] Buffer I/O error on dev loop4, logical block 148, async page read [ 57.807854][ T4073] Buffer I/O error on dev loop4, logical block 149, async page read [ 57.829765][ T4073] Buffer I/O error on dev loop4, logical block 150, async page read [ 57.850842][ T4073] Buffer I/O error on dev loop4, logical block 151, async page read [ 57.867988][ T4073] Buffer I/O error on dev loop4, logical block 152, async page read [ 57.887253][ T4073] Buffer I/O error on dev loop4, logical block 145, async page read [ 57.901089][ T4073] Buffer I/O error on dev loop4, logical block 146, async page read [ 58.055613][ T4084] loop2: detected capacity change from 0 to 4096 [ 58.156794][ T4084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.462322][ T4101] veth0_to_team: entered promiscuous mode [ 58.494607][ T4101] pimreg: entered allmulticast mode [ 58.508004][ T4102] syzkaller0: entered allmulticast mode [ 58.522083][ T4101] pimreg: left allmulticast mode [ 58.921123][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.936329][ T4116] syzkaller0: entered promiscuous mode [ 58.949961][ T4116] syzkaller0: entered allmulticast mode [ 59.040017][ T4123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.182'. [ 59.059643][ T4123] bond1: entered promiscuous mode [ 59.066384][ T4123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.097633][ T4123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.109943][ T4123] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 59.122723][ T4123] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 59.136672][ T4129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 59.143975][ T4129] IPv6: NLM_F_CREATE should be set when creating new route [ 59.151416][ T4129] IPv6: NLM_F_CREATE should be set when creating new route [ 59.162773][ T4128] loop3: detected capacity change from 0 to 128 [ 59.170022][ T4128] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 59.182022][ T4129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 59.208866][ T4129] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 59.221865][ T4129] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 59.393897][ T4136] loop4: detected capacity change from 0 to 8192 [ 59.444615][ T4136] loop4: p1 < > p2 < > p3 p4 < > [ 59.452026][ T4136] loop4: partition table partially beyond EOD, truncated [ 59.480862][ T4136] loop4: p1 start 67108864 is beyond EOD, truncated [ 59.500157][ T4140] loop3: detected capacity change from 0 to 128 [ 59.510984][ T4136] loop4: p3 start 100859904 is beyond EOD, truncated [ 59.660683][ T4140] netlink: 'syz.3.187': attribute type 21 has an invalid length. [ 59.674224][ T4140] netlink: 132 bytes leftover after parsing attributes in process `syz.3.187'. [ 59.791524][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 59.791544][ T28] audit: type=1400 audit(1781583645.101:404): avc: denied { setopt } for pid=4149 comm="syz.4.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.820820][ T4147] loop3: detected capacity change from 0 to 8192 [ 59.867042][ T28] audit: type=1400 audit(1781583645.121:405): avc: denied { bind } for pid=4149 comm="syz.4.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.923109][ T28] audit: type=1400 audit(1781583645.121:406): avc: denied { name_bind } for pid=4149 comm="syz.4.190" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 59.982260][ T28] audit: type=1400 audit(1781583645.121:407): avc: denied { node_bind } for pid=4149 comm="syz.4.190" saddr=fe80::bb src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 60.033777][ T28] audit: type=1400 audit(1781583645.131:408): avc: denied { write } for pid=4149 comm="syz.4.190" name="icmp" dev="proc" ino=4026532415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 60.095170][ T28] audit: type=1400 audit(1781583645.131:409): avc: denied { write } for pid=4149 comm="syz.4.190" path="socket:[6041]" dev="sockfs" ino=6041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.155379][ T28] audit: type=1400 audit(1781583645.281:410): avc: denied { setopt } for pid=4146 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.347442][ T28] audit: type=1400 audit(1781583646.651:411): avc: denied { write } for pid=4177 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.460129][ T28] audit: type=1400 audit(1781583646.651:412): avc: denied { nlmsg_write } for pid=4177 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.539674][ T4199] loop3: detected capacity change from 0 to 128 [ 62.585047][ T4199] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.623364][ T4199] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.719553][ T28] audit: type=1400 audit(1781583648.001:413): avc: denied { write } for pid=4197 comm="syz.3.207" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.788253][ T4206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 62.902480][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.999027][ T4213] netlink: 48 bytes leftover after parsing attributes in process `syz.3.211'. [ 63.057699][ T4218] process 'syz.0.214' launched './file1' with NULL argv: empty string added [ 63.143859][ T4221] netlink: 'syz.0.215': attribute type 6 has an invalid length. [ 63.156903][ T4223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.167361][ T4223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.256491][ T4225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 63.500580][ T3400] IPVS: starting estimator thread 0... [ 63.590974][ T4230] IPVS: using max 2112 ests per chain, 105600 per kthread [ 63.814255][ T4225] syz.0.217 (4225) used greatest stack depth: 9472 bytes left [ 64.239993][ T4256] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.374915][ T4245] loop1: detected capacity change from 0 to 164 [ 64.395369][ T4256] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.718383][ T4256] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.863987][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 64.864024][ T28] audit: type=1400 audit(1781583650.171:442): avc: denied { setopt } for pid=4263 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.906670][ T4256] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.026541][ T28] audit: type=1400 audit(1781583650.201:443): avc: denied { connect } for pid=4263 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 65.101505][ T4269] syzkaller0: entered promiscuous mode [ 65.116154][ T28] audit: type=1400 audit(1781583650.391:444): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.138657][ T4269] syzkaller0: entered allmulticast mode [ 65.147847][ T4271] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 65.154738][ T4271] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 65.188825][ T3775] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.199443][ T3775] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.212898][ T28] audit: type=1400 audit(1781583650.471:445): avc: denied { ioctl } for pid=4268 comm="syz.2.233" path="socket:[7272]" dev="sockfs" ino=7272 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.242086][ T4271] vhci_hcd vhci_hcd.0: Device attached [ 65.273545][ T3775] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.297467][ T4275] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 65.305302][ T4275] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 65.324999][ T3775] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.386715][ T4282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.236'. [ 65.399656][ T4275] vhci_hcd vhci_hcd.0: Device attached [ 65.420858][ T281] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 65.436150][ T4277] vhci_hcd: connection closed [ 65.436403][ T3775] vhci_hcd vhci_hcd.1: stop threads [ 65.436448][ T4272] vhci_hcd: connection closed [ 65.442197][ T3775] vhci_hcd vhci_hcd.1: release socket [ 65.470994][ T3775] vhci_hcd vhci_hcd.1: disconnect device [ 65.480841][ T281] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 65.517536][ T3775] vhci_hcd vhci_hcd.1: stop threads [ 65.539139][ T3775] vhci_hcd vhci_hcd.1: release socket [ 65.559776][ T3775] vhci_hcd vhci_hcd.1: disconnect device [ 65.639351][ T4285] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 65.678302][ T4291] netlink: 24 bytes leftover after parsing attributes in process `syz.2.238'. [ 65.698239][ T28] audit: type=1400 audit(1781583651.001:446): avc: denied { create } for pid=4281 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 65.729691][ T4289] loop1: detected capacity change from 0 to 4096 [ 65.759444][ T3775] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 65.774517][ T4289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.813916][ T3775] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 65.825845][ T28] audit: type=1400 audit(1781583651.051:447): avc: denied { write } for pid=4281 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 65.855706][ T4294] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4294 comm=syz.2.238 [ 65.893362][ T4282] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 65.928259][ T4282] bond1 (unregistering): Released all slaves [ 65.980383][ T3775] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 65.992440][ T3775] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 66.026716][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.069207][ T28] audit: type=1400 audit(1781583651.371:448): avc: denied { bind } for pid=4302 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.112556][ T28] audit: type=1400 audit(1781583651.401:449): avc: denied { setopt } for pid=4302 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.133301][ T28] audit: type=1400 audit(1781583651.401:450): avc: denied { write } for pid=4302 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.330651][ T28] audit: type=1326 audit(1781583651.591:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4313 comm="syz.2.246" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8233b4ce59 code=0x0 [ 66.819794][ T4327] tipc: Started in network mode [ 66.847651][ T4327] tipc: Node identity 4, cluster identity 4711 [ 66.875888][ T4327] tipc: Node number set to 4 [ 67.591897][ T4335] syzkaller0: entered promiscuous mode [ 67.598350][ T4335] syzkaller0: entered allmulticast mode [ 68.586675][ T4359] syzkaller0: entered promiscuous mode [ 68.609165][ T4359] syzkaller0: entered allmulticast mode [ 68.622645][ T4359] tipc: Started in network mode [ 68.627817][ T4359] tipc: Node identity eee41e57fa6a, cluster identity 4711 [ 68.635553][ T4359] tipc: Enabled bearer , priority 0 [ 68.644892][ T4358] tipc: Resetting bearer [ 68.662197][ T4358] tipc: Disabling bearer [ 68.668887][ T4366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 68.678213][ T4366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.265'. [ 68.688484][ T4366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.265'. [ 68.855131][ T4372] loop3: detected capacity change from 0 to 2048 [ 69.070705][ T4372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.167073][ T4368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 69.323735][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.767980][ T4385] loop4: detected capacity change from 0 to 1024 [ 69.779368][ T4387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.788326][ T4387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.835805][ T4385] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ee018, mo2=0002] [ 69.862367][ T4385] System zones: 0-1, 3-8 [ 69.876385][ T4385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.920968][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 69.920983][ T28] audit: type=1400 audit(1781583655.221:457): avc: denied { connect } for pid=4392 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.970648][ T4385] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.992622][ T28] audit: type=1400 audit(1781583655.261:459): avc: denied { read } for pid=4388 comm="syz.2.272" lport=36973 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 70.070906][ T28] audit: type=1400 audit(1781583655.261:458): avc: denied { write } for pid=4392 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.143154][ T28] audit: type=1400 audit(1781583655.361:460): avc: denied { write } for pid=4384 comm="syz.4.271" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.168805][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 70.305047][ T4403] loop2: detected capacity change from 0 to 512 [ 70.305463][ T28] audit: type=1400 audit(1781583655.521:461): avc: denied { ioctl } for pid=4399 comm="syz.2.274" path="socket:[7499]" dev="sockfs" ino=7499 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.337425][ T4404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.275'. [ 70.344747][ T4403] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.276: bg 0: block 127: padding at end of block bitmap is not set [ 70.385651][ T4403] loop2: lost filesystem error report for type 5 error -117 [ 70.389034][ T4403] ------------[ cut here ]------------ [ 70.396556][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 70.396583][ C1] EXT4-fs (loop2): initial error at time 1781583655: ext4_validate_block_bitmap:441 [ 70.396615][ C1] EXT4-fs (loop2): last error at time 1781583655: ext4_validate_block_bitmap:441 [ 70.407484][ T28] audit: type=1400 audit(1781583655.711:462): avc: denied { bind } for pid=4401 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.409304][ T4403] EA inode 11 i_nlink=0 [ 70.447589][ T4403] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#1: syz.2.276/4403 [ 70.462699][ T4403] Modules linked in: [ 70.466728][ T4403] CPU: 1 UID: 0 PID: 4403 Comm: syz.2.276 Not tainted syzkaller #0 PREEMPT(lazy) [ 70.476089][ T4403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 70.486590][ T4403] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 70.493621][ T4403] Code: 76 5d 98 ff 49 8d 7e 40 4c 8d 2d ab c6 5b 05 e8 96 0e b6 ff 49 8b 6e 40 4c 89 e7 e8 ca 09 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 f1 a8 d5 03 90 90 90 90 90 90 90 [ 70.514275][ T4403] RSP: 0018:ffffc9001249b7f8 EFLAGS: 00010246 [ 70.517724][ T281] usb 3-1: enqueue for inactive port 0 [ 70.520537][ T4403] RAX: ffff8881049a9c30 RBX: ffff88810d2411f8 RCX: ffffffff81c10356 [ 70.534401][ T4403] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871cc9f0 [ 70.536426][ T281] usb 3-1: enqueue for inactive port 0 [ 70.542638][ T4403] RBP: 000000000000000b R08: 000188810d2411ab R09: 0000000000000000 [ 70.557215][ T4403] R10: ffffc9001249b728 R11: 0001c9001249b728 R12: ffff88810d2411a8 [ 70.565275][ T4403] R13: ffffffff871cc9f0 R14: ffff88810d241160 R15: 0000000000000001 [ 70.573400][ T4403] FS: 00007f823259f6c0(0000) GS:ffff8882ae9fd000(0000) knlGS:0000000000000000 [ 70.582432][ T4403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.589241][ T4403] CR2: 00007ffb463da000 CR3: 000000011cf58000 CR4: 00000000003506f0 [ 70.597291][ T4403] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.605607][ T4403] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 70.613653][ T4403] Call Trace: [ 70.616988][ T4403] [ 70.619960][ T4403] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 70.626003][ T4403] ext4_xattr_delete_inode+0x6b5/0x790 [ 70.631547][ T4403] ext4_evict_inode+0xb18/0xdf0 [ 70.636566][ T4403] ? __pfx_ext4_evict_inode+0x10/0x10 [ 70.642089][ T281] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 70.642104][ T4403] evict+0x2a5/0x510 [ 70.652519][ T4403] iput+0x430/0x5a0 [ 70.656376][ T4403] ext4_process_orphan+0x1a4/0x1c0 [ 70.661703][ T4403] ext4_orphan_cleanup+0x6a6/0xa10 [ 70.667614][ T4403] ? ext4_register_li_request+0x14c/0x440 [ 70.673558][ T4403] ext4_fill_super+0x33d5/0x3780 [ 70.678875][ T4403] ? set_blocksize+0x14c/0x270 [ 70.683782][ T4403] ? __pfx_ext4_fill_super+0x10/0x10 [ 70.689228][ T4403] get_tree_bdev_flags+0x291/0x300 [ 70.694583][ T4403] ? __pfx_ext4_fill_super+0x10/0x10 [ 70.700007][ T4403] get_tree_bdev+0x1f/0x30 [ 70.704539][ T4403] ext4_get_tree+0x1c/0x30 [ 70.709025][ T4403] vfs_get_tree+0x57/0x1d0 [ 70.713707][ T4403] do_new_mount+0x288/0x8d0 [ 70.718382][ T4403] path_mount+0x4ad/0xb90 [ 70.722909][ T4403] __se_sys_mount+0x28c/0x2e0 [ 70.727838][ T4403] __x64_sys_mount+0x67/0x80 [ 70.732687][ T4403] x64_sys_call+0x2d61/0x3020 [ 70.737561][ T4403] do_syscall_64+0x136/0x3c0 [ 70.742312][ T4403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.748350][ T4403] RIP: 0033:0x7f8233b4e0ca [ 70.753214][ T4403] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.774696][ T4403] RSP: 002b:00007f823259ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.783548][ T4403] RAX: ffffffffffffffda RBX: 00007f823259eee0 RCX: 00007f8233b4e0ca [ 70.793825][ T4403] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f823259eea0 [ 70.802219][ T4403] RBP: 0000200000000180 R08: 00007f823259eee0 R09: 0000000000000000 [ 70.810508][ T4403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 70.818717][ T4403] R13: 00007f823259eea0 R14: 0000000000000476 R15: 00002000000001c0 [ 70.826913][ T4403] [ 70.830040][ T4403] ---[ end trace 0000000000000000 ]--- [ 70.836387][ T4403] EXT4-fs error (device loop2): ext4_free_inode:356: comm syz.2.276: bit already cleared for inode 11 [ 70.858838][ T4403] loop2: lost filesystem error report for type 5 error -117 [ 70.859164][ T4403] EXT4-fs (loop2): 1 orphan inode deleted [ 70.885028][ T4403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.899887][ T28] audit: type=1400 audit(1781583656.201:463): avc: denied { ioctl } for pid=4407 comm="syz.4.278" path="socket:[7166]" dev="sockfs" ino=7166 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.018991][ T4403] netlink: 60 bytes leftover after parsing attributes in process `syz.2.276'. [ 71.068325][ T28] audit: type=1400 audit(1781583656.371:464): avc: denied { sqpoll } for pid=4413 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 71.091824][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.311498][ T28] audit: type=1400 audit(1781583656.611:465): avc: denied { setopt } for pid=4420 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 71.425679][ T28] audit: type=1400 audit(1781583656.731:466): avc: denied { write } for pid=4422 comm="syz.2.283" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 71.944605][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'. [ 71.996719][ T4431] netlink: 'syz.1.285': attribute type 1 has an invalid length. [ 72.173089][ T281] IPVS: starting estimator thread 0... [ 72.272269][ T4436] IPVS: using max 2160 ests per chain, 108000 per kthread [ 72.545523][ T4443] No such timeout policy "syz1" [ 72.553992][ T4445] netlink: 'syz.2.291': attribute type 4 has an invalid length. [ 72.699103][ T4453] netlink: 66512 bytes leftover after parsing attributes in process `syz.4.294'. [ 72.714350][ T4453] netlink: zone id is out of range [ 72.719922][ T4453] netlink: zone id is out of range [ 72.728596][ T4453] netlink: zone id is out of range [ 72.735825][ T4453] netlink: zone id is out of range [ 72.741857][ T4453] netlink: zone id is out of range [ 72.747719][ T4453] netlink: zone id is out of range [ 72.755508][ T4453] netlink: zone id is out of range [ 72.776924][ T4453] netlink: zone id is out of range [ 72.810257][ T4453] netlink: zone id is out of range [ 72.817142][ T4453] netlink: zone id is out of range [ 72.830430][ T4457] bridge_slave_0: left allmulticast mode [ 72.864970][ T4457] bridge_slave_0: left promiscuous mode [ 72.872561][ T4457] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.883831][ T4457] bridge_slave_1: left allmulticast mode [ 72.895048][ T4460] netlink: 'syz.4.298': attribute type 21 has an invalid length. [ 72.906771][ T4457] bridge_slave_1: left promiscuous mode [ 72.913481][ T4460] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.922950][ T4457] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.926401][ T4460] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.941338][ T4460] IPv6: NLM_F_CREATE should be set when creating new route [ 72.947367][ T4462] netlink: 'syz.4.298': attribute type 21 has an invalid length. [ 72.950881][ T4460] IPv6: NLM_F_CREATE should be set when creating new route [ 72.966599][ T4460] IPv6: NLM_F_CREATE should be set when creating new route [ 72.974877][ T4462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.988223][ T4457] bond0: (slave bond_slave_0): Releasing backup interface [ 73.001458][ T4457] bond0: (slave bond_slave_1): Releasing backup interface [ 73.015802][ T4457] team0: Port device team_slave_0 removed [ 73.026308][ T4457] team0: Port device team_slave_1 removed [ 73.033937][ T4457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.041793][ T4457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.051079][ T4457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.059079][ T4457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.075483][ T4458] team0: Port device xfrm0 added [ 73.084016][ T4461] tipc: Enabled bearer , priority 0 [ 73.134329][ T4460] vlan2: entered promiscuous mode [ 73.146668][ T4460] bridge0: entered promiscuous mode [ 73.247009][ T4466] netlink: 66512 bytes leftover after parsing attributes in process `syz.0.309'. [ 73.274706][ T4475] syz_tun: entered promiscuous mode [ 73.285295][ T4475] vlan2: entered promiscuous mode [ 73.384200][ T4489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.306'. [ 73.482777][ T4489] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4489 comm=syz.4.306 [ 73.608057][ T4497] loop1: detected capacity change from 0 to 8192 [ 73.678824][ T4497] loop1: p1 < > p2 < > p3 p4 < > [ 73.691211][ T4497] loop1: partition table partially beyond EOD, truncated [ 73.699221][ T4497] loop1: p1 start 67108864 is beyond EOD, truncated [ 73.717175][ T4497] loop1: p3 start 100859904 is beyond EOD, truncated [ 73.734509][ T2981] loop1: p1 < > p2 < > p3 p4 < > [ 73.743272][ T2981] loop1: partition table partially beyond EOD, truncated [ 73.768144][ T2981] loop1: p1 start 67108864 is beyond EOD, truncated [ 73.782521][ T2981] loop1: p3 start 100859904 is beyond EOD, truncated [ 73.884825][ T4502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'. [ 74.037259][ T4508] bridge_slave_0: left allmulticast mode [ 74.045606][ T4510] netlink: 'syz.0.314': attribute type 21 has an invalid length. [ 74.057304][ T4508] bridge_slave_0: left promiscuous mode [ 74.073595][ T4508] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.080146][ T4510] IPv6: NLM_F_CREATE should be specified when creating new route [ 74.093277][ T4508] bridge_slave_1: left allmulticast mode [ 74.099501][ T4514] netlink: 'syz.0.314': attribute type 21 has an invalid length. [ 74.109318][ T4510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.112635][ T4508] bridge_slave_1: left promiscuous mode [ 74.116755][ T4510] IPv6: NLM_F_CREATE should be set when creating new route [ 74.130955][ T4510] IPv6: NLM_F_CREATE should be set when creating new route [ 74.138352][ T4510] IPv6: NLM_F_CREATE should be set when creating new route [ 74.145833][ T4514] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.155864][ T4508] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.180211][ T4508] bond0: (slave bond_slave_0): Releasing backup interface [ 74.208014][ T4508] bond0: (slave bond_slave_1): Releasing backup interface [ 74.236417][ T4508] team0: Port device team_slave_0 removed [ 74.265490][ T4508] team0: Port device team_slave_1 removed [ 74.273079][ T4508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.290836][ T4508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.315557][ T4508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.323891][ T4508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.354883][ T4512] team0: Port device xfrm0 added [ 74.383845][ T4515] tipc: Enabled bearer , priority 0 [ 74.429629][ T4510] vlan2: entered promiscuous mode [ 74.444691][ T4510] bridge0: entered promiscuous mode [ 74.603975][ T4527] netlink: 66512 bytes leftover after parsing attributes in process `syz.1.317'. [ 74.778812][ T4541] syz_tun: entered promiscuous mode [ 74.794211][ T4541] vlan2: entered promiscuous mode [ 74.905138][ T4552] netlink: 'syz.3.327': attribute type 1 has an invalid length. [ 74.938130][ T4552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.958252][ T4552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'. [ 74.972281][ T4552] bond1 (unregistering): Released all slaves [ 74.985855][ T4547] loop4: detected capacity change from 0 to 256 [ 75.125132][ T4547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 75.391102][ T3368] tipc: Node number set to 344858199 [ 75.946367][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 75.946397][ T28] audit: type=1400 audit(1781583661.251:471): avc: denied { mount } for pid=4573 comm="syz.1.335" name="/" dev="ramfs" ino=7787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 76.494906][ T4590] syzkaller0: entered promiscuous mode [ 76.500562][ T4590] syzkaller0: entered allmulticast mode [ 76.573097][ T4588] 8021q: VLANs not supported on ip6tnl0 [ 76.654259][ T4594] loop2: detected capacity change from 0 to 512 [ 76.662907][ T4594] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.689141][ T4594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.828260][ T4594] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.883824][ T28] audit: type=1400 audit(1781583662.171:472): avc: denied { create } for pid=4593 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 77.234135][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.211002][ T4643] loop1: detected capacity change from 0 to 512 [ 79.304787][ T4643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.321268][ T4650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 79.342672][ T4650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 79.367271][ T4643] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.461351][ T28] audit: type=1400 audit(1781583664.761:473): avc: denied { setattr } for pid=4642 comm="syz.1.360" path="/73/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.492243][ T4643] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.360: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 79.538661][ T28] audit: type=1400 audit(1781583664.831:474): avc: denied { listen } for pid=4655 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.570705][ T28] audit: type=1400 audit(1781583664.831:475): avc: denied { accept } for pid=4655 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.633684][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.674693][ T4667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 79.779127][ T28] audit: type=1400 audit(1781583665.081:476): avc: denied { ioctl } for pid=4675 comm="syz.0.371" path="socket:[8618]" dev="sockfs" ino=8618 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 79.813094][ T28] audit: type=1400 audit(1781583665.121:477): avc: denied { create } for pid=4675 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.048509][ T28] audit: type=1400 audit(1781583665.121:478): avc: denied { getopt } for pid=4675 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.108411][ T4680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.372'. [ 80.238457][ T28] audit: type=1400 audit(1781583665.541:479): avc: denied { name_bind } for pid=4681 comm="syz.1.373" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 80.538382][ T4688] loop4: detected capacity change from 0 to 128 [ 80.662306][ T4690] loop3: detected capacity change from 0 to 512 [ 80.672244][ T4690] EXT4-fs: test_dummy_encryption option not supported [ 80.847858][ T28] audit: type=1326 audit(1781583666.151:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4691 comm="syz.2.377" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8233b4ce59 code=0x7ffc0000 [ 80.951523][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 80.951543][ T28] audit: type=1326 audit(1781583666.261:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4691 comm="syz.2.377" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8233b0d68e code=0x7ffc0000 [ 81.078398][ T28] audit: type=1326 audit(1781583666.291:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4691 comm="syz.2.377" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8233b0d68e code=0x7ffc0000 [ 81.144696][ T4706] netlink: 'syz.1.380': attribute type 1 has an invalid length. [ 81.190058][ T4709] netlink: 'syz.2.381': attribute type 1 has an invalid length. [ 81.202884][ T28] audit: type=1326 audit(1781583666.301:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4691 comm="syz.2.377" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8233b0d68e code=0x7ffc0000 [ 81.243303][ T4706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.245608][ T28] audit: type=1326 audit(1781583666.301:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4691 comm="syz.2.377" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8233b4ce59 code=0x7ffc0000 [ 81.275815][ T28] audit: type=1326 audit(1781583666.301:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4691 comm="syz.2.377" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8233b4ce59 code=0x7ffc0000 [ 81.301732][ T28] audit: type=1326 audit(1781583666.361:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4691 comm="syz.2.377" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8233b4ce59 code=0x7ffc0000 [ 81.327709][ T28] audit: type=1326 audit(1781583666.361:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4691 comm="syz.2.377" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8233b4ce59 code=0x7ffc0000 [ 81.430983][ T4710] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 81.498403][ T4709] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.641599][ T28] audit: type=1400 audit(1781583666.951:503): avc: denied { write } for pid=4717 comm="syz.3.383" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 81.665103][ T4713] bond1: (slave veth5): Enslaving as an active interface with a down link [ 81.709556][ T4715] vlan2: entered allmulticast mode [ 81.719722][ T4715] veth0_to_bond: entered allmulticast mode [ 81.727826][ T28] audit: type=1400 audit(1781583666.951:504): avc: denied { open } for pid=4717 comm="syz.3.383" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 81.758807][ T4715] veth0_to_bond: entered promiscuous mode [ 81.777548][ T4715] veth0_to_bond: left promiscuous mode [ 81.798873][ T4715] bond1: (slave vlan2): making interface the new active one [ 81.811099][ T28] audit: type=1400 audit(1781583666.951:505): avc: denied { ioctl } for pid=4717 comm="syz.3.383" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 81.839492][ T4715] veth0_to_bond: entered promiscuous mode [ 81.851174][ T4715] vlan2: entered promiscuous mode [ 81.862704][ T4715] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 81.884151][ T4706] bond2: entered promiscuous mode [ 81.889357][ T4706] bond2: entered allmulticast mode [ 81.906372][ T4710] macvlan2: entered promiscuous mode [ 81.915512][ T4710] macvlan2: entered allmulticast mode [ 81.937246][ T4710] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 81.966407][ T4727] loop2: detected capacity change from 0 to 512 [ 81.975416][ T4727] EXT4-fs: Ignoring removed i_version option [ 82.024591][ T4727] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 82.152315][ T4737] netlink: 68 bytes leftover after parsing attributes in process `syz.2.387'. [ 83.053076][ T4752] loop4: detected capacity change from 0 to 128 [ 83.090749][ T4755] netlink: 66512 bytes leftover after parsing attributes in process `syz.2.392'. [ 83.100979][ T4755] net_ratelimit: 4591 callbacks suppressed [ 83.101001][ T4755] netlink: zone id is out of range [ 83.111963][ T4753] loop1: detected capacity change from 0 to 256 [ 83.128056][ T4755] netlink: zone id is out of range [ 83.135792][ T4755] netlink: zone id is out of range [ 83.145406][ T4755] netlink: zone id is out of range [ 83.157228][ T4752] netlink: 'syz.4.393': attribute type 21 has an invalid length. [ 83.169800][ T4752] netlink: 132 bytes leftover after parsing attributes in process `syz.4.393'. [ 83.182325][ T4755] netlink: zone id is out of range [ 83.190468][ T4755] netlink: zone id is out of range [ 83.210381][ T4755] netlink: zone id is out of range [ 83.253848][ T4755] netlink: zone id is out of range [ 83.274130][ T4755] netlink: zone id is out of range [ 83.337267][ T4759] loop4: detected capacity change from 0 to 512 [ 83.345662][ T4755] netlink: zone id is out of range [ 83.382329][ T4759] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.446081][ T4759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.483323][ T4759] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.493867][ T4753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.402'. [ 83.616475][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.372712][ T4766] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 85.017996][ T4791] loop2: detected capacity change from 0 to 128 [ 85.067945][ T4791] netlink: 'syz.2.406': attribute type 21 has an invalid length. [ 85.079000][ T4791] netlink: 132 bytes leftover after parsing attributes in process `syz.2.406'. [ 85.412000][ T4800] netlink: 66512 bytes leftover after parsing attributes in process `syz.3.407'. [ 85.429990][ T4802] loop2: detected capacity change from 0 to 256 [ 85.469723][ T4807] loop3: detected capacity change from 0 to 512 [ 85.486520][ T4807] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.516572][ T4807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.540854][ T4807] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.661554][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.720369][ T4802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 87.275206][ T4833] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 87.644478][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 87.644494][ T28] audit: type=1400 audit(1781583672.951:507): avc: denied { connect } for pid=4851 comm="syz.4.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.759750][ T28] audit: type=1400 audit(1781583672.981:508): avc: denied { read } for pid=4851 comm="syz.4.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.169928][ T4855] syzkaller0: entered promiscuous mode [ 88.178908][ T4855] syzkaller0: entered allmulticast mode [ 88.289226][ T4869] xt_socket: unknown flags 0x58 [ 88.654743][ T4879] loop4: detected capacity change from 0 to 512 [ 88.780866][ T4879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.800265][ T4879] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.832185][ T4879] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #2: comm syz.4.437: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 88.926813][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.946284][ T4887] loop2: detected capacity change from 0 to 512 [ 89.422122][ T4887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.489064][ T4887] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.606535][ T4887] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #2: comm syz.2.450: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 89.668144][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.968833][ T4905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.443'. [ 91.820315][ T4909] loop4: detected capacity change from 0 to 512 [ 91.861504][ T4909] EXT4-fs: test_dummy_encryption option not supported [ 91.889369][ T4919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.448'. [ 92.022275][ T4926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.451'. [ 92.047067][ T4915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.446'. [ 92.186718][ T4929] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 92.296850][ T4929] syzkaller0: entered promiscuous mode [ 92.322744][ T4929] syzkaller0: entered allmulticast mode [ 93.363389][ T4917] net_ratelimit: 3056 callbacks suppressed [ 93.363411][ T4917] Set syz1 is full, maxelem 65536 reached [ 93.429166][ T28] audit: type=1400 audit(1781583678.711:509): avc: denied { remount } for pid=4934 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.262038][ T3775] vlan2: left promiscuous mode [ 95.464629][ T4982] loop3: detected capacity change from 0 to 512 [ 95.506782][ T4988] tipc: Started in network mode [ 95.513935][ T4990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.472'. [ 95.529475][ T4988] tipc: Node identity 4, cluster identity 4711 [ 95.546275][ T4988] tipc: Node number set to 4 [ 95.559803][ T4982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.580511][ T4982] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.594126][ T28] audit: type=1326 audit(1781583680.901:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.4.474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc66a8ce59 code=0x0 [ 95.656123][ T4982] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #2: comm syz.3.471: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 95.721477][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.747367][ T3400] IPVS: starting estimator thread 0... [ 95.774905][ T5004] loop3: detected capacity change from 0 to 512 [ 95.794505][ T5004] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.830687][ T5004] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 95.839103][ T5004] System zones: 1-12 [ 95.844299][ T5004] EXT4-fs (loop3): 1 truncate cleaned up [ 95.850714][ T5004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.863244][ T5002] IPVS: using max 2208 ests per chain, 110400 per kthread [ 95.876002][ T28] audit: type=1400 audit(1781583681.181:511): avc: denied { write } for pid=5003 comm="syz.3.477" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.898354][ T28] audit: type=1400 audit(1781583681.181:512): avc: denied { add_name } for pid=5003 comm="syz.3.477" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.921463][ T28] audit: type=1400 audit(1781583681.211:513): avc: denied { read append } for pid=5003 comm="syz.3.477" path="/98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 95.976828][ T28] audit: type=1400 audit(1781583681.281:514): avc: denied { ioctl } for pid=5003 comm="syz.3.477" path="/98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop3" ino=18 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 96.050385][ T5015] loop1: detected capacity change from 0 to 128 [ 96.059613][ T5015] EXT4-fs: test_dummy_encryption option not supported [ 96.100306][ T5015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 96.201325][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.436213][ T5021] netlink: 'syz.3.485': attribute type 1 has an invalid length. [ 96.445082][ T28] audit: type=1326 audit(1781583681.741:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.1.496" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5802f6ce59 code=0x0 [ 96.484307][ T5021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.508498][ T5021] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 96.525322][ T5021] bond1: entered promiscuous mode [ 96.530606][ T5021] bond1: entered allmulticast mode [ 96.568984][ T5021] macvlan2: entered promiscuous mode [ 96.581854][ T5021] macvlan2: entered allmulticast mode [ 96.595792][ T5030] loop4: detected capacity change from 0 to 512 [ 96.599271][ T5021] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 96.644756][ T5030] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 96.671646][ T5033] netlink: 40 bytes leftover after parsing attributes in process `syz.0.489'. [ 96.722282][ T5030] EXT4-fs (loop4): orphan cleanup on readonly fs [ 96.762916][ T5030] EXT4-fs warning (device loop4): ext4_enable_quotas:7267: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 96.763334][ T5030] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 96.776375][ T5030] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.486: bad orphan inode 768 [ 96.803735][ T5030] loop4: lost filesystem error report for type 5 error -117 [ 96.838456][ T5030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.920903][ T5030] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 96.976059][ T5030] EXT4-fs warning (device loop4): ext4_enable_quotas:7267: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 97.084270][ T3773] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.142210][ T3773] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.209356][ T3773] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.280074][ T5047] netlink: 28 bytes leftover after parsing attributes in process `syz.3.493'. [ 97.308105][ T5049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'. [ 97.319674][ T3773] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.404690][ T5049] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 97.431433][ T3784] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.442983][ T3784] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.490043][ T5049] bond3 (unregistering): (slave geneve2): Releasing backup interface [ 97.509084][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.519998][ T5049] bond3 (unregistering): Released all slaves [ 97.541077][ T3784] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.571048][ T3784] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.612342][ T3773] bridge_slave_1: left allmulticast mode [ 97.621096][ T3773] bridge_slave_1: left promiscuous mode [ 97.633782][ T5063] loop4: detected capacity change from 0 to 512 [ 97.644013][ T3773] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.665247][ T5063] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.677733][ T3773] bridge_slave_0: left allmulticast mode [ 97.684212][ T3773] bridge_slave_0: left promiscuous mode [ 97.690508][ T5063] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 97.708892][ T5063] System zones: 1-12 [ 97.714137][ T3773] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.733136][ T5063] EXT4-fs (loop4): 1 truncate cleaned up [ 97.747180][ T5063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.809630][ T28] audit: type=1400 audit(1781583683.111:516): avc: denied { write } for pid=5061 comm="syz.4.498" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.906051][ T28] audit: type=1400 audit(1781583683.211:517): avc: denied { write } for pid=5067 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.979876][ T28] audit: type=1400 audit(1781583683.261:518): avc: denied { write } for pid=5082 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.057126][ T3773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.082014][ T3773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.105026][ T3773] bond0 (unregistering): Released all slaves [ 98.121497][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.139505][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 98.178386][ T3773] hsr_slave_0: left promiscuous mode [ 98.189699][ T3773] hsr_slave_1: left promiscuous mode [ 98.198434][ T3773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.210391][ T3773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.219916][ T3773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.229446][ T3773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.241133][ T3773] veth1_macvtap: left promiscuous mode [ 98.247788][ T3773] veth0_macvtap: left promiscuous mode [ 98.253735][ T3773] veth1_vlan: left promiscuous mode [ 98.261122][ T3773] veth0_vlan: left promiscuous mode [ 98.354611][ T3773] team0 (unregistering): Port device team_slave_1 removed [ 98.369544][ T3773] team0 (unregistering): Port device team_slave_0 removed [ 98.687673][ T28] audit: type=1400 audit(1781583683.991:519): avc: denied { write } for pid=5085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.785748][ T28] audit: type=1400 audit(1781583684.091:520): avc: denied { write } for pid=5112 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.810543][ T5050] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.824754][ T5050] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.843129][ T5050] bridge_slave_0: entered allmulticast mode [ 98.861721][ T5050] bridge_slave_0: entered promiscuous mode [ 98.869608][ T5050] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.883989][ T5050] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.894452][ T5097] loop4: detected capacity change from 0 to 2048 [ 98.905439][ T5050] bridge_slave_1: entered allmulticast mode [ 98.918426][ T5050] bridge_slave_1: entered promiscuous mode [ 98.929363][ T3773] IPVS: stop unused estimator thread 0... [ 98.945717][ T5114] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.011401][ T5097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.035814][ T5110] syzkaller0: entered promiscuous mode [ 99.041602][ T5110] syzkaller0: entered allmulticast mode [ 99.049366][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 99.117925][ T5097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.501'. [ 99.118172][ T5050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.121801][ T5050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.156617][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.169636][ T5114] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.248106][ T5114] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.269848][ T5050] team0: Port device team_slave_0 added [ 99.283165][ T5050] team0: Port device team_slave_1 added [ 99.311159][ T5114] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.332684][ T5050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.362616][ T5050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.416746][ T5050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.459164][ T5050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.467637][ T5050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.496356][ T5050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.507289][ T3769] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.516515][ T3769] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.525075][ T28] audit: type=1400 audit(1781583684.821:521): avc: denied { write } for pid=5123 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.575216][ T3773] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.583696][ T3773] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.602269][ T28] audit: type=1400 audit(1781583684.911:522): avc: denied { write } for pid=5135 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.625846][ T5050] hsr_slave_0: entered promiscuous mode [ 99.633299][ T5050] hsr_slave_1: entered promiscuous mode [ 99.639431][ T5050] debugfs: 'hsr0' already exists in 'hsr' [ 99.645563][ T5050] Cannot create hsr debugfs directory [ 99.691632][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 99.977294][ T28] audit: type=1400 audit(1781583685.281:523): avc: denied { write } for pid=5143 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.063563][ T28] audit: type=1400 audit(1781583685.361:524): avc: denied { write } for pid=5156 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.147589][ T5050] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.168608][ T5050] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.189871][ T5050] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.201264][ T5050] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.217037][ T5050] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.231190][ T5050] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.239337][ T5050] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.251508][ T5050] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.337506][ T5050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.360042][ T28] audit: type=1400 audit(1781583685.661:525): avc: denied { write } for pid=5160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.386552][ T5050] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.397355][ T3775] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.404592][ T3775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.418927][ T3773] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.426073][ T3773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.457619][ T28] audit: type=1400 audit(1781583685.761:526): avc: denied { write } for pid=5178 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.643362][ T28] audit: type=1400 audit(1781583685.951:527): avc: denied { write } for pid=5182 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.748942][ T28] audit: type=1400 audit(1781583686.051:528): avc: denied { write } for pid=5205 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.789945][ T5050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.794300][ T5204] loop4: detected capacity change from 0 to 164 [ 101.079690][ T5232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 101.099353][ T5050] veth0_vlan: entered promiscuous mode [ 101.122903][ T5050] veth1_vlan: entered promiscuous mode [ 101.175145][ T5050] veth0_macvtap: entered promiscuous mode [ 101.198875][ T5050] veth1_macvtap: entered promiscuous mode [ 101.241371][ T5050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.276581][ T5050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.308324][ T3775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.330314][ T3775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.344098][ T3775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.354103][ T3775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.494220][ T5254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.515'. [ 101.515640][ T3385] IPVS: starting estimator thread 0... [ 101.567595][ T5269] netlink: 'syz.4.520': attribute type 1 has an invalid length. [ 101.597595][ T5269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.614247][ T5263] IPVS: using max 2208 ests per chain, 110400 per kthread [ 101.626912][ T5271] netlink: 48 bytes leftover after parsing attributes in process `syz.0.522'. [ 101.671700][ T5269] bond1: (slave veth5): Enslaving as an active interface with a down link [ 101.698440][ T5269] vlan3: entered allmulticast mode [ 101.705486][ T5269] veth0_to_bond: entered allmulticast mode [ 101.714072][ T5269] veth0_to_bond: entered promiscuous mode [ 101.723265][ T5269] veth0_to_bond: left promiscuous mode [ 101.730091][ T5269] bond1: (slave vlan3): making interface the new active one [ 101.744298][ T5269] veth0_to_bond: entered promiscuous mode [ 101.752737][ T5269] vlan3: entered promiscuous mode [ 101.759922][ T5269] bond1: (slave vlan3): Enslaving as an active interface with an up link [ 101.837160][ T5277] syzkaller0: entered promiscuous mode [ 101.850377][ T5277] syzkaller0: entered allmulticast mode [ 102.126876][ T5279] loop0: detected capacity change from 0 to 1024 [ 102.162421][ T5279] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 102.253870][ T5279] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.311867][ T5279] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 102.362531][ T5279] EXT4-fs (loop0): orphan cleanup on readonly fs [ 102.369620][ T5279] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.524: Freeing blocks not in datazone - block = 0, count = 4096 [ 102.383163][ T5279] loop0: lost filesystem error report for type 5 error -117 [ 102.390756][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 102.405349][ C1] EXT4-fs (loop0): initial error at time 1781583687: ext4_free_blocks:6718 [ 102.414024][ C1] EXT4-fs (loop0): last error at time 1781583687: ext4_free_blocks:6718 [ 102.424175][ T5279] EXT4-fs (loop0): 1 orphan inode deleted [ 102.436338][ T5279] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.470859][ T5287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'. [ 102.615682][ T5291] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: 1 [ 102.624565][ T5291] ref_ctr increment failed for inode: 0x22e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881052e0000 [ 102.636633][ T5291] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: -1 [ 102.663547][ T5291] ref_ctr decrement failed for inode: 0x22e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881052e0000 [ 102.700862][ T5291] uprobe: syz.2.527:5291 failed to unregister, leaking uprobe [ 102.723428][ T5293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 102.735538][ T5050] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.185267][ T5310] loop4: detected capacity change from 0 to 512 [ 103.262458][ T5310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.290433][ T5312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.533'. [ 103.308717][ T5310] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.476144][ T5321] loop2: detected capacity change from 0 to 512 [ 103.498387][ T5321] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 103.555741][ T5321] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 103.591825][ T5321] System zones: 1-12 [ 103.606172][ T5321] EXT4-fs (loop2): 1 truncate cleaned up [ 103.623429][ T5321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.909835][ T5325] netlink: 'syz.0.539': attribute type 1 has an invalid length. [ 103.993570][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.006147][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.022261][ T5325] bond0: (slave veth3): Enslaving as an active interface with an up link [ 104.154015][ T5331] loop4: detected capacity change from 0 to 4096 [ 104.172190][ T5331] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 104.194845][ T5326] vlan2: entered allmulticast mode [ 104.200105][ T5326] veth0_to_bond: entered allmulticast mode [ 104.206515][ T5326] veth0_to_bond: entered promiscuous mode [ 104.214069][ T5326] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 104.272361][ T5334] syzkaller0: entered promiscuous mode [ 104.285717][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 104.285735][ T28] audit: type=1400 audit(1781583689.591:534): avc: denied { listen } for pid=5329 comm="syz.4.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.335136][ T5334] syzkaller0: entered allmulticast mode [ 105.090011][ T5353] loop4: detected capacity change from 0 to 512 [ 105.103576][ T5353] EXT4-fs: Ignoring removed bh option [ 105.139027][ T5353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.173409][ T5353] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.277584][ T28] audit: type=1400 audit(1781583690.581:535): avc: denied { write } for pid=5352 comm="syz.4.549" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.315828][ T28] audit: type=1400 audit(1781583690.581:536): avc: denied { write } for pid=5352 comm="syz.4.549" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.467473][ T5341] syzkaller0: entered promiscuous mode [ 105.486040][ T5341] syzkaller0: entered allmulticast mode [ 105.496873][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.738231][ T5362] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.836068][ T5362] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.908292][ T5362] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.908680][ T5364] loop2: detected capacity change from 0 to 164 [ 106.040423][ T5362] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.169958][ T3771] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.205800][ T3771] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.243021][ T3771] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.269331][ T3771] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.304719][ T5370] loop2: detected capacity change from 0 to 4096 [ 106.326569][ T5370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.456798][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.485086][ T28] audit: type=1326 audit(1781583691.791:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5376 comm="syz.4.568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc66a8ce59 code=0x0 [ 106.518563][ T5378] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.552097][ T5351] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 106.727426][ T5378] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.780009][ T5387] syzkaller0: entered promiscuous mode [ 106.786762][ T5387] syzkaller0: entered allmulticast mode [ 106.798553][ T5378] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.863411][ T5378] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.965845][ T3775] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.949718][ T3775] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.003867][ T3775] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.012429][ T3775] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.249215][ T5404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'. [ 108.489418][ T5409] loop4: detected capacity change from 0 to 128 [ 108.517027][ T28] audit: type=1400 audit(1781583693.791:538): avc: denied { read } for pid=5408 comm="syz.4.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 108.558305][ T5396] loop2: detected capacity change from 0 to 2048 [ 108.591845][ T5409] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.618480][ T5409] ext4 filesystem being mounted at /122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.731147][ T5396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.733076][ T28] audit: type=1400 audit(1781583694.041:539): avc: denied { write } for pid=5408 comm="syz.4.566" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.749737][ T5419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.570'. [ 108.783294][ T28] audit: type=1400 audit(1781583694.091:540): avc: denied { write } for pid=5408 comm="syz.4.566" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.784859][ T28] audit: type=1400 audit(1781583694.091:541): avc: denied { write } for pid=5408 comm="syz.4.566" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.826184][ T5396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 108.901830][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.994893][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.075466][ T5432] loop1: detected capacity change from 0 to 1024 [ 109.092551][ T5432] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.103814][ T5432] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.117821][ T5432] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 109.130968][ T5432] EXT4-fs (loop1): orphan cleanup on readonly fs [ 109.140228][ T5432] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.572: Freeing blocks not in datazone - block = 0, count = 4096 [ 109.155084][ T5432] loop1: lost filesystem error report for type 5 error -117 [ 109.156800][ T5432] EXT4-fs (loop1): 1 orphan inode deleted [ 109.166698][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 109.166746][ C0] EXT4-fs (loop1): initial error at time 1781583694: ext4_free_blocks:6718 [ 109.166812][ C0] EXT4-fs (loop1): last error at time 1781583694: ext4_free_blocks:6718 [ 109.207753][ T5432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.369611][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.422160][ T5438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.469624][ T5443] loop1: detected capacity change from 0 to 512 [ 109.501700][ T5443] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 109.528916][ T5443] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 109.543085][ T5443] System zones: 1-12 [ 109.550780][ T5443] EXT4-fs (loop1): 1 truncate cleaned up [ 109.560302][ T5443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.578258][ T28] audit: type=1400 audit(1781583694.881:542): avc: denied { write } for pid=5442 comm="syz.1.574" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.658138][ T5454] loop3: detected capacity change from 0 to 512 [ 109.665619][ T5454] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 109.731402][ T5454] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 109.746955][ T28] audit: type=1400 audit(1781583695.051:543): avc: denied { read } for pid=5453 comm="syz.3.582" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 109.832376][ T28] audit: type=1400 audit(1781583695.051:544): avc: denied { open } for pid=5453 comm="syz.3.582" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 109.937271][ T28] audit: type=1400 audit(1781583695.051:545): avc: denied { bind } for pid=5453 comm="syz.3.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.965921][ T5462] loop0: detected capacity change from 0 to 128 [ 109.977910][ T5450] syzkaller0: entered promiscuous mode [ 109.986463][ T5450] syzkaller0: entered allmulticast mode [ 109.988196][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.005318][ T5462] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.006071][ T28] audit: type=1400 audit(1781583695.051:546): avc: denied { name_bind } for pid=5453 comm="syz.3.582" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 110.041886][ T28] audit: type=1400 audit(1781583695.051:547): avc: denied { node_bind } for pid=5453 comm="syz.3.582" saddr=224.0.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 110.056257][ T5462] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.076692][ T5428] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 110.142136][ T5466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'. [ 110.176354][ T5468] netlink: 44 bytes leftover after parsing attributes in process `syz.3.588'. [ 110.198600][ T28] audit: type=1400 audit(1781583695.501:548): avc: denied { write } for pid=5461 comm="syz.0.584" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.241641][ T28] audit: type=1400 audit(1781583695.531:549): avc: denied { write } for pid=5461 comm="syz.0.584" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.264800][ T28] audit: type=1400 audit(1781583695.531:550): avc: denied { write } for pid=5461 comm="syz.0.584" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.290441][ T5470] bond3: entered promiscuous mode [ 110.295775][ T5470] bond3: entered allmulticast mode [ 110.308706][ T5050] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.437271][ T5474] loop3: detected capacity change from 0 to 1024 [ 110.483768][ T5474] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.510519][ T5474] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.540474][ T5474] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 110.550003][ T5474] EXT4-fs (loop3): orphan cleanup on readonly fs [ 110.558024][ T5474] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.590: Freeing blocks not in datazone - block = 0, count = 4096 [ 110.574000][ T5474] loop3: lost filesystem error report for type 5 error -117 [ 110.575230][ T5474] EXT4-fs (loop3): 1 orphan inode deleted [ 110.582862][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 110.582932][ C1] EXT4-fs (loop3): initial error at time 1781583695: ext4_free_blocks:6718 [ 110.582994][ C1] EXT4-fs (loop3): last error at time 1781583695: ext4_free_blocks:6718 [ 110.624646][ T5474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.323350][ T5501] loop0: detected capacity change from 0 to 512 [ 111.346712][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.373634][ T5501] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.410594][ T5501] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 111.422537][ T5501] System zones: 1-12 [ 111.427733][ T5501] EXT4-fs (loop0): 1 truncate cleaned up [ 111.434630][ T5501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.561271][ T28] audit: type=1400 audit(1781583696.841:551): avc: denied { write } for pid=5499 comm="syz.0.597" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.873572][ T5050] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.920913][ T5520] netlink: 'syz.2.604': attribute type 3 has an invalid length. [ 111.957986][ T5520] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.604'. [ 112.412194][ T5527] loop0: detected capacity change from 0 to 512 [ 112.513049][ T5527] EXT4-fs (loop0): orphan cleanup on readonly fs [ 112.529494][ T5530] loop4: detected capacity change from 0 to 512 [ 112.541138][ T5527] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.606: bad orphan inode 15 [ 112.557053][ T5530] EXT4-fs: Ignoring removed orlov option [ 112.569532][ T5530] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.577713][ T5530] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.607: corrupted in-inode xattr: e_value size too large [ 112.587145][ T5527] loop0: lost filesystem error report for type 5 error -117 [ 112.602541][ T5527] ext4_test_bit(bit=14, block=18) = 1 [ 112.615466][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 112.615497][ C1] EXT4-fs (loop0): initial error at time 1781583697: ext4_orphan_get:1425 [ 112.615517][ C1] EXT4-fs (loop0): last error at time 1781583697: ext4_orphan_get:1425 [ 112.639567][ T5530] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 112.640743][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 112.659390][ C1] EXT4-fs (loop4): initial error at time 1781583697: ext4_iget_extra_inode:5128: inode 15 [ 112.671028][ C1] EXT4-fs (loop4): last error at time 1781583697: ext4_iget_extra_inode:5128: inode 15 [ 112.685602][ T5530] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.607: couldn't read orphan inode 15 (err -117) [ 112.708781][ T5530] loop4: lost filesystem error report for type 5 error -117 [ 112.709114][ T5527] is_bad_inode(inode)=0 [ 112.718263][ T5530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.025753][ T5527] NEXT_ORPHAN(inode)=1023 [ 113.035251][ T5527] max_ino=32 [ 113.041064][ T5527] i_nlink=0 [ 113.052356][ T5527] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #15: comm syz.0.606: corrupted xattr block 19: e_value size too large [ 113.071472][ T5527] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 113.071702][ T5527] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 113.091746][ T5527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-2400-000000000000 ro without journal. Quota mode: none. [ 113.147893][ T5539] syzkaller0: entered promiscuous mode [ 113.153557][ T5539] syzkaller0: entered allmulticast mode [ 113.201590][ T5539] tipc: Enabled bearer , priority 0 [ 113.298824][ T5538] tipc: Resetting bearer [ 113.319273][ T5538] tipc: Disabling bearer [ 113.404606][ T5050] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-2400-000000000000. [ 113.542983][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.632746][ T5547] loop0: detected capacity change from 0 to 2048 [ 113.777470][ T5547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.844373][ T5564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'. [ 113.854286][ T5564] netlink: 'syz.1.619': attribute type 1 has an invalid length. [ 113.873941][ T5547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.612'. [ 113.910118][ T5050] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.177916][ T5575] loop2: detected capacity change from 0 to 1024 [ 114.200463][ T5575] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 114.232401][ T5575] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.244229][ T5575] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 114.254685][ T5575] EXT4-fs (loop2): orphan cleanup on readonly fs [ 114.262386][ T5575] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.621: Freeing blocks not in datazone - block = 0, count = 4096 [ 114.276915][ T5575] loop2: lost filesystem error report for type 5 error -117 [ 114.278705][ T5575] EXT4-fs (loop2): 1 orphan inode deleted [ 114.286291][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 114.286334][ C0] EXT4-fs (loop2): initial error at time 1781583699: ext4_free_blocks:6718 [ 114.286370][ C0] EXT4-fs (loop2): last error at time 1781583699: ext4_free_blocks:6718 [ 114.318785][ T5575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.951468][ T3773] vlan3: left promiscuous mode [ 115.018616][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.106363][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 115.106383][ T28] audit: type=1326 audit(1781583700.411:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09daf3ce59 code=0x7ffc0000 [ 115.147519][ T28] audit: type=1326 audit(1781583700.441:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09daf3ce59 code=0x7ffc0000 [ 115.180381][ T28] audit: type=1326 audit(1781583700.441:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09daf3ce59 code=0x7ffc0000 [ 115.248877][ T28] audit: type=1326 audit(1781583700.441:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09daf3ce59 code=0x7ffc0000 [ 115.340613][ T28] audit: type=1326 audit(1781583700.441:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f09daf3ce59 code=0x7ffc0000 [ 115.403176][ T28] audit: type=1400 audit(1781583700.441:565): avc: denied { write } for pid=5595 comm="syz.0.625" path="socket:[12588]" dev="sockfs" ino=12588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.427818][ T5617] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 115.448351][ T28] audit: type=1400 audit(1781583700.441:566): avc: denied { read } for pid=5595 comm="syz.0.625" path="socket:[12588]" dev="sockfs" ino=12588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.479378][ T28] audit: type=1400 audit(1781583700.451:567): avc: denied { read } for pid=5605 comm="syz.4.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.516733][ T28] audit: type=1326 audit(1781583700.531:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f09daefd68e code=0x7ffc0000 [ 115.543271][ T28] audit: type=1326 audit(1781583700.531:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f09daefd68e code=0x7ffc0000 [ 115.699839][ T5621] loop3: detected capacity change from 0 to 512 [ 115.824460][ T5622] batman_adv: batadv0: Adding interface: macvtap1 [ 115.836811][ T5622] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.865027][ T5621] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.635: bad orphan inode 13 [ 115.877069][ T5622] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 115.923712][ T5621] loop3: lost filesystem error report for type 5 error -117 [ 115.929961][ T5621] ext4_test_bit(bit=12, block=4) = 1 [ 115.940941][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 115.941051][ C0] EXT4-fs (loop3): initial error at time 1781583701: ext4_orphan_get:1425 [ 115.941324][ C0] EXT4-fs (loop3): last error at time 1781583701: ext4_orphan_get:1425 [ 115.958695][ T5635] syzkaller0: entered promiscuous mode [ 115.958740][ T5635] syzkaller0: entered allmulticast mode [ 116.033650][ T5621] is_bad_inode(inode)=0 [ 116.046260][ T5621] NEXT_ORPHAN(inode)=0 [ 116.058670][ T5621] max_ino=32 [ 116.069339][ T5621] i_nlink=1 [ 116.214181][ T5621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.294412][ T5648] loop4: detected capacity change from 0 to 4096 [ 116.387320][ T5648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.446329][ T5656] loop2: detected capacity change from 0 to 512 [ 116.471820][ T5656] EXT4-fs: dax option not supported [ 116.673700][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.702896][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.807118][ T5668] loop3: detected capacity change from 0 to 4096 [ 116.868841][ T5668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.309360][ T3775] ================================================================== [ 117.317605][ T3775] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 117.327288][ T3775] [ 117.329625][ T3775] write to 0xffff888108f814d3 of 3 bytes by task 5673 on cpu 1: [ 117.337262][ T3775] copy_folio_from_iter_atomic+0x728/0x10a0 [ 117.343371][ T3775] generic_perform_write+0x2c4/0x490 [ 117.348869][ T3775] ext4_buffered_write_iter+0x2e2/0x480 [ 117.354694][ T3775] ext4_file_write_iter+0x38e/0xef0 [ 117.360011][ T3775] iter_file_splice_write+0x6a0/0xa60 [ 117.365523][ T3775] direct_splice_actor+0x156/0x280 [ 117.370671][ T3775] splice_direct_to_actor+0x2f9/0x680 [ 117.376103][ T3775] do_splice_direct+0x119/0x1a0 [ 117.380990][ T3775] do_sendfile+0x37d/0x640 [ 117.385815][ T3775] __x64_sys_sendfile64+0x105/0x150 [ 117.391497][ T3775] x64_sys_call+0x2dc4/0x3020 [ 117.396253][ T3775] do_syscall_64+0x136/0x3c0 [ 117.400873][ T3775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.406986][ T3775] [ 117.409461][ T3775] read to 0xffff888108f81000 of 4096 bytes by task 3775 on cpu 0: [ 117.417567][ T3775] copy_folio_from_iter_atomic+0x728/0x10a0 [ 117.423508][ T3775] generic_perform_write+0x2c4/0x490 [ 117.428837][ T3775] shmem_file_write_iter+0xc5/0xf0 [ 117.433993][ T3775] lo_rw_aio+0x67a/0x730 [ 117.438355][ T3775] loop_process_work+0x567/0xac0 [ 117.443373][ T3775] loop_workfn+0x31/0x40 [ 117.448010][ T3775] process_scheduled_works+0x4d4/0x9a0 [ 117.453836][ T3775] worker_thread+0x569/0x750 [ 117.458469][ T3775] kthread+0x221/0x270 [ 117.462903][ T3775] ret_from_fork+0x146/0x330 [ 117.469106][ T3775] ret_from_fork_asm+0x1a/0x30 [ 117.475250][ T3775] [ 117.477594][ T3775] Reported by Kernel Concurrency Sanitizer on: [ 117.483849][ T3775] CPU: 0 UID: 0 PID: 3775 Comm: kworker/u8:15 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 117.495493][ T3775] Tainted: [W]=WARN [ 117.499319][ T3775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 117.511769][ T3775] Workqueue: loop3 loop_workfn [ 117.516877][ T3775] ================================================================== [ 117.718351][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.