last executing test programs: 8m15.021661349s ago: executing program 32 (id=1777): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000000"], 0x38}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x20000400) bind$can_j1939(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000000001010400000000141a00000200000014001080080003400000580508000140000000090001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000002a9c2851c5f8830b156302aa05db1ea50b354b3bba797a619967300a987d5e01c34c7e781f5cf4408c2e37ac7c6aa2c535c75d1e3169c2a1c1e415b94fea3cf3168a0bfbb4bfbfa775ae7cfdb08f955199ffad760fea44a1"], 0x78}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0) set_mempolicy_home_node(&(0x7f00002a4000/0x2000)=nil, 0x2000, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280009000000000500000000", @ANYBLOB], 0x28}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syncfs(r6) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@rdma_dest={0x18, 0x114, 0x2, {0x0, 0x4}}, @rdma_args={0x48, 0x114, 0x1, {{0x1, 0x6}, {0x0}, 0x0, 0x0, 0x82, 0x3}}], 0x60}, 0x0) lseek(r6, 0x2000, 0x0) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc}, 0xc) 5m21.952970715s ago: executing program 3 (id=3172): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48001}, 0x20044095) 5m21.81212519s ago: executing program 3 (id=3173): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x100, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) sendmmsg$inet(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000002c0)="e4e3b566ca4f987be34b31b7e0fb1e2f9a6241679f7e9896ed63b769f0f92845b69889cdf89719118770ed5422538739b8a498e2409c", 0x36}, {0x0}], 0x2}}], 0x1, 0x0) r1 = dup2(r0, r0) recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x7fbfffff}], 0x1, 0x2000, 0x0) 5m21.746910832s ago: executing program 3 (id=3174): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x11) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 5m20.168543332s ago: executing program 3 (id=3177): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000203050000000000000000004885000208000100"], 0x1c}}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010022"], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r1) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="11002dbd7000fcdbdf250200"], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) 5m19.749267935s ago: executing program 3 (id=3179): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 5m19.648468419s ago: executing program 3 (id=3183): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x6c000000, 0x61, 0x10, 0x4b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r1, &(0x7f00000000c0)=""/144, 0x90, 0x5e) 5m4.521647119s ago: executing program 33 (id=3183): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x6c000000, 0x61, 0x10, 0x4b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r1, &(0x7f00000000c0)=""/144, 0x90, 0x5e) 4m26.796229647s ago: executing program 0 (id=3518): unshare(0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002020, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) 4m25.859658806s ago: executing program 0 (id=3527): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0xafd}], 0x1, 0x40018141, 0x0) 4m25.621821964s ago: executing program 4 (id=3530): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000002c0)={0x84, @broadcast, 0x4e21, 0x3, 'lblcr\x00', 0x11, 0x10000004, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12c61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x18, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4m25.604691054s ago: executing program 0 (id=3531): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000001100)="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"/1453, 0x5ad, 0x10000800, &(0x7f0000000080)={0xa, 0x5e1f, 0x3, @mcast2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0xffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x10000, 0x4) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0) 4m25.411626181s ago: executing program 0 (id=3532): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x103011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 4m25.356534233s ago: executing program 4 (id=3534): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000002c0)=""/95, 0x5f) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 4m25.291419175s ago: executing program 0 (id=3536): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000ec0), 0x1, 0xb87, &(0x7f00000017c0)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdras7W5LYcuQ9vNJZve9eSzvO02++9503nQC2LFGs5c0Yn9EfJ5EjBT704gYzEtDEYutf3dv6dpktiWxvPzOv0kkEXF36dpk+/9Kivc92Us1/2T89UvEM5W1/c4tXL3QaDanrxT1sfmLH47NLVw9PHuxcX76/PSlI6+OH5147diJV47d/9DQox3rwvH0sz/ffOO7G+e+/uPHEy98msSp2Fu0dR5Hv4zG6MrPpFM1It7rd2clqRTH0+04AQB48qQdc7j9MRKVvNQyEvXZUoMDAAAA+uKTiFgGAAAAtrnE+T8AAABsc+11AHeXrk22t3JXJACPy53TEVFr5X/7/v5WSzUW8/ehGIiI4XtJx51Brfu9a33ofzQifvjq+IFsiy26Dx/obvF6RDzXbfxP8vyvFX90Y3X+pxEx3of+R1fV5T88Pt3yv3VesHH+n+pD//IfAAAAAAAA+ufm6daF/LXX/9OV9T/R5fpfpcu1u4ex8fW/9HYfugG6uHM64vWOZ/vc68j/Qq1S1J7K1wMMJDOzzenxiHg6Ig7FwK6sPrFOH9/+dPLvXm2d6/+yLeu/vRawiON2ddf/PzPVmG88yjEDLXeuRzxf7Zb/ycr4n/RY//v2A/bx29mfZ3q1bZz/wFZZ/ibiYNfx//4T3ZL1n883ls8HxtqzgrXOvvjr9736l/9Qnmz8H14//2tJ5/M65zbfx/jw4fO92h52/j+YnMmfKjpY7Pu4MT9/ZSJiMHlr7f4jm48ZtqN2PrTzJcv/Qy91P/9fb/6fJdn7xbdEGhGN4j2rf7Cqz13nfv+iVzzGfyhPlv9Tmxr/N1/48t2lM736f7Dx/1g+ph8q9vj9H6zvQRO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSZJGxN5I0vpKOU3r9Yg9EfFsDKfNy3PzL89c/ujSVNYWUYuBdGa2OT0eESOtepLVJ/Ly/fqRVfWjEbEvIm6M7M7r9cnLzamyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAVeyJibyRpPSLSvJym9Xqr7Z+RsqMDAAAA+qZWdgAAAADAlnP+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj2nfg5q0kIhZP7s63zGDRNlBqZMBWS8sOAChNpewAgNJUyw4AKI1zfCDZoH2oZ4sZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBOcnD/zVtJRCye3J1vmcGibaDUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftQzxYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdZG7h6oVGszl9RWHdQjUinoAwFBQeU6HsbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2s/8CAAD//yT3/f8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x8080c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x2e12, 0x8001, 0x1, 0x3}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) 4m25.100227171s ago: executing program 0 (id=3538): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) 4m24.995335884s ago: executing program 34 (id=3538): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) 4m23.998608806s ago: executing program 4 (id=3544): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$eJzs3c9vI2cZAOB3nDhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP2zNXJCpxgiN/AOeeuHNBcOOyHJD4EYE2SByMZjzOerN2Ntps7BA/jzSa+ebz+n2/tWa+zJt4JoCxdT0i7kfEVER8GBHz+f4kX+K9zpK+7uHhvbWjw3trSbTbH/wjyfrTfdHzb1LX8vcsRcQPvhPx4+TJuM39g63VWq26m7cXW/Wdxeb+wa3N+upGdaO6XamsLK8svXP77cpzG+tr9al868sPfn//Gz9N05rL9/SO41kknSH32x8RxeM4qcmI+N55gl0iE/l4pkadCM+kEBEvR8Tr2fE/HxPZpwkAXGXt9ny053vbAMBVV8hqYEmhnNcC5qJQKJc7NbxXYrZQazRbN+829rbXO7WyhSgW7m7Wqkt5rXAhiknaXs62H7UrnfZ0t307Il6KiJ9Pz2Tt8lqjtj7KH3wAYIxdOzH//3u6M/8DAFdcadQJAABDZ/4HgPFj/geA8WP+B4Dx05n/Z0adBgAwRKde/7sfEABcSer/ADBWvv/+++nSPsrvf73+0f7eVuOjW+vV5la5vrdWXmvs7pQ3Go2N7J499ae9X63R2Fl+K/Y+XvjmTrO12Nw/uFNv7G237mT39b5TLWav6nurbABgSF567bM/JemM/O5MtkTPsxyKI80MuGiFUScAjMzEqBMARsZf98D4Osc1vvIAXBF9HtH7mFK/Lwi12+32xaUEXLAbX1D/h3HVU//3V8AwZtT/YXyp/8P4areTsz7zP876QgDgclPjBwb8/v/lfP2b/JcDP1o/+YpPLzIrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNy6z/8t588Cn4tCoVyOeCEiFqKY3N2sVZci4sWI+ON0cTptL484ZwDgvAp/TfLnf92Yf3Pusa5Xrx1vTkXET375wS8+Xm21dv8QMZX8c7q7v/Vpvr8y/OwBgNOl1/rdeTpb91zIPzy8t9ZdhpnT374dEaVO/KPDqTg6jj8Zk9m6FMWImP1Xkrc7kp7axXnc/yQiPt9v/EnMZTWQzpNPT8ZPY78w1PiFx+IXsr7OOv2/+NxzyAXGzWfp+ee9fsdfIa5n6/7Hfyk7Q51ffv5L32rtKDsHPorfPf9NDDj/XT9rjLd+993O1syTfZ9EfHEyohv7qOf8042fDIj/5hnj//lLr74+qK/9q4gb0T9+b6zFVn1nsbl/cGuzvrpR3ahuVyoryytL79x+u7KY1agXB88Gf3/35ouD+tLxzw6IX3rK+L96xvH/+r8f/vArp8T/+hv94hfilVPip3Pi184Yf3X2t6VBfWn89QHjf9rnf/OM8R/85eCJx4YDAKPT3D/YWq3Vqrv/7xtzxc6ALks+Ni5iI/2EL0EafTe+NaxYU9G/62dvdA6BE13t9jPFGnTGeB5VN+AyOD7oI+I/o04GAAAAAAAAAAAAAADoaxjfWBr1GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi6/hcAAP//leLMXA==") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000000)={[{@auto_da_alloc}, {@minixdf}]}, 0x1, 0x569, &(0x7f0000000480)="$eJzs3d1rm9UfAPDvkzZ7//3WwRgqIgUvnMyla+vLBC/mtQ4Gej9D+6yMpsto0rHWgduFu5bhnQPxXrz2UvwHvPBvGOhgyCiCeBN50idZ2iZtuqUvms8HnnK+z0vPOXlyTs7JSUgAQ2s8+1OIeDkivkoiTkZEkh8bjfzg+Np5q0/vzGRbEo3GJ38kzfOyuPW/Wtcdz4OXIuLnLyPOFTbnW1temS9XKuliHk/UF25O1JZXzl9fKM+lc+mNqenpi+9MT73/3rsDq+ubV7KCjOTRqQdJXIoTedRZjxdwtzMYj/H8MSnGpQ0nTg4gs4Mk6br3hz0vBzszkrfzYmR9wMkYyVs98N/3RUQ0gCGV7Lj9/1rcnZIAe6s1DmjN7Qc0D/7XePLh2gRoc/1H194biSPNudGx1WTdzCib744NIP8sjx9/f/gg22Jw70MAbOvuvYi4MDq6uf9L8v7v+V3o45yNeej/YO/8lI1/3uo2/im0xz/RZfxzvEvbfR7bt//C4wFk01M2/vug6/i3vWg1NpJH/2uO+YrJteuVNOvb/h8RZ6N4OIu3Ws+5uPqo0etY5/gv27L8W2PBvByPRw+vv2a2XC+/SJ07PbkX8UrX8W/Svv/J2v1ft8STPR5X+szjTPrwtV7Htq//7mp8F/FG1/v/rLrJ1uuTE83nw0TrWbHZn/fP/NIr//2uf3b/j21d/7Gkc722tvM8vj3ydxrt9eT11tU/+n/+H0o+baYP5ftul+v1xcmIQ8nH7f2F1v6pZ9e24tb5Wf3Pvr51/5d06f+ORsRnfdb//unvX+117CDc/9mu9789u91w/3eeePTR59/0yr+//u/tZupsvqef/q/fAr7IYwcAAAAAAAAHTSEiTkRSKLXThUKptPb5jtNxrFCp1urnrlWXbsxG87uyY1EstFa6T3Z8HmIyXzFsxVMb4umIOBURX48cbcalmWpldr8rDwAAAAAAAAAAAAAAAAAAAAfE8R7f/8/8NrLfpQN2nZ/8huG1bfsfxC89AQeS138YXto/DK++2n9x98sB7D2v/zC8tH8YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAADdeXy5WxrrD69M5PFs7eWl+art87PprX50sLSTGmmunizNFetzlXS0kx1Ybv/V6lWb05OxdLtiXpaq0/UlleuLlSXbtSvXl8oz6VXU78iBgAAAAAAAAAAAAAAAAAAAJvVllfmy5VKuigxxIm/Go3G814+ut+Fl9iVxH73TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwzD8BAAD//1hdMq0=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143142, 0x40) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ftruncate(r0, 0x9) 4m23.048005776s ago: executing program 4 (id=3546): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x103011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 4m22.680579187s ago: executing program 4 (id=3548): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)='\n', 0x1}], 0x1}}], 0x1, 0x20044840) sendmmsg$inet(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000bc0)="449013", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="24acadd7f04daaa04e88680351d9ce53f67fd2afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62599df5ecb5984843ee04e96eb26fa2a8100a0b7b2d032fff965485ded83b39d6c9835416a8db5414a6c54101693e6b05e652b49fceaf4a0cc2b7898034ff0eb5150b3e85b9ff5658ba346d0b6b5a3a71eb084311606cf6b8ccf7c45a79b319a201e9c5ae9f0aab5c4dd7a77de7f5ae2edb3078", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000300)="7daad44510df7dc335e66c0e962a5ce64120016d3750175c423665dfd246d084c8e400b6c006f6c74ec8219e7bd29464ba326c26805a2b900e958cf88ed55de49f9400fdcf60ff1066757c78148f12b72720a63042cd274e883c9ccf0169c55d8fdbac47fa9acbfe3178cff055c59f582b1d64628b896898b9734298b75f7d23345e45e62e3a70e77d59a60afa4b543eae17ac165b13f818b7805741425fb718d691dcb6c67f51aae4dcc6875ee29835", 0xb0}, {&(0x7f00000003c0)="1f125f61cc5d556d973ab358911b8772f398c25f5ef41d1ce58a62ea8e5cb1cb411cd89d45dd3267f001ba6e9698e9cf32f12d8ba96abdf5f2b0e86d30bb5c7c924be08c4fb3de1c6f7839fbaa6b86869b1263a76297b0639c50e4840c698d2778d4914ef6d3910359738c62e93f58722bfd7bbea8fa9c97ec3c7a3e1cfee6920b38e1cac0e47fad4cab9a77c66b91332406c46e324e50fd", 0x98}], 0x2}}], 0x3, 0x2090) 4m22.110113036s ago: executing program 4 (id=3549): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000002000)='./file0\x00', 0x180c8, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYBLOB="ab7925fd0d45753c5372226bde51994d653e42d6d5819f7b9586a186d6c004c21064bea0e5890ced984a0900733e678e79ee237368434ff94db2ca9bcad15bb5cbfe88b2aa36fe34178e96bb9e98e17096e6fa129db16ec6f7ab3780f1872a5e7a8eae6f561c2c1cb6896d2980685d781da4c20925a6d4e605e97be1580317140493ec85ad92bae4b6ce68ba1821d59d", @ANYBLOB="19d538d7cae717373e673a2527a8788c20ae740b53b29c22e4eeec1af5ea6986c3ee3b14f3797a91fc58a5f8954bc95906c4d88808d34baf320ba4c2e81f041821d541b005f96c93c52554043598994f72ea6ac63580d1fbf4cff23ab38d136b7a8d89a989e7d9201cfaf164863f5b2d36d96f9fab9025300c05b62a82f63c79a127dc1a6cdb6ec84d92dc7886f9e5e81cc59bd176766e7f3c46e6c83e27b94525d61d03aa61d7e9d7db742605138f268c969a0b8122", @ANYRES16, @ANYRESOCT=r0], 0x1, 0x27d, &(0x7f0000000000)="$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") 4m22.023419528s ago: executing program 35 (id=3549): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000002000)='./file0\x00', 0x180c8, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYBLOB="ab7925fd0d45753c5372226bde51994d653e42d6d5819f7b9586a186d6c004c21064bea0e5890ced984a0900733e678e79ee237368434ff94db2ca9bcad15bb5cbfe88b2aa36fe34178e96bb9e98e17096e6fa129db16ec6f7ab3780f1872a5e7a8eae6f561c2c1cb6896d2980685d781da4c20925a6d4e605e97be1580317140493ec85ad92bae4b6ce68ba1821d59d", @ANYBLOB="19d538d7cae717373e673a2527a8788c20ae740b53b29c22e4eeec1af5ea6986c3ee3b14f3797a91fc58a5f8954bc95906c4d88808d34baf320ba4c2e81f041821d541b005f96c93c52554043598994f72ea6ac63580d1fbf4cff23ab38d136b7a8d89a989e7d9201cfaf164863f5b2d36d96f9fab9025300c05b62a82f63c79a127dc1a6cdb6ec84d92dc7886f9e5e81cc59bd176766e7f3c46e6c83e27b94525d61d03aa61d7e9d7db742605138f268c969a0b8122", @ANYRES16, @ANYRESOCT=r0], 0x1, 0x27d, &(0x7f0000000000)="$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") 2m47.259890858s ago: executing program 5 (id=4200): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004cb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) 2m46.610359438s ago: executing program 5 (id=4203): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r1 = socket$netlink(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000000)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x23, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2m45.31620504s ago: executing program 5 (id=4208): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0x7, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f00000022c0)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f0000000a0000000d0085a168d0bf46d32345653600648d04000b00", 0x3c, 0x0, 0x0, 0x0) unshare(0x400) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r4, 0x1) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @none, 0x1}, 0xe) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x0, 0x1}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r6 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r6, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r6, &(0x7f0000000fc0)=""/224, 0xe0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) 2m42.554557697s ago: executing program 5 (id=4216): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="e0", 0x1}], 0x1}}], 0x1, 0x20044840) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)="2c64dcfd565187c8e8883f67b4606814737200187533479f3d5c5ec9adab2d4ee332548dde6ea466c28fb80a1f3ea76ada878e80998a86d3a04e76ace0989bd17e926fdae343379b78adb20ac460d9fcd9823aef6a3b2690718839ca6458c2ac3a10e5ca9d7c7032c162c0d7ce5516bea644d4fb3ad96cf351a98fc742a5bafde59d4e61512fa6830f73aac1a5f218b64dfe6043d81835", 0x97}, {&(0x7f0000000540)="16cec1b810a9e1c32a428daeccf6c969", 0x10}, {&(0x7f0000000640)="a40b4ce0b0df126d382d83f05aa590c7c3fb1236c5a4b30fa190f67324915f3509dfe298690453e2ada615fa19ae0cd795caae77527c10077a948aa827a5c2ab5a3cec714532be9783e36c1e18e887c280286f0e5b06e9e8d5f3a1edf397f1897086f7748b31bb7348f44fbf1a95183fa6abd2a42739199793fd7718d4c76016979eb4a757ca85", 0x87}, {&(0x7f0000000700)="8f7b0867bc7c21cbad3fd55c2717350437637219845511fa916b725c46532afe42bc553b9c2b1a2b5e4cf4a49478cd0d6bbf0f334eb405c32959b779737ed09d94ce17be105b3e830c02cdf097f4ab369e25925ef0dac24030813b76f3bcfc7943453a91a7c2fdb0c0744b1b2bfa4612e8177092b848ca587b9853ff22def39dd13745f3d45c52e009a8a0994c094b672c4576d1ecfac9f9173a4b4e7ddedf9b2259d6ab26a4c99375", 0xa9}, {&(0x7f00000007c0)="bf38b111a33528c491235ca398cba66130a6a49fb9be927037bdc7743d6f6c53a25a114b77328a089366dfe051f442d870c8a1ef0eb9c99a7b17a7a2d580f40713e7189939320dc64516553125", 0x4d}], 0x5, &(0x7f0000000a40)}}], 0x1, 0x404e854) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m39.92537591s ago: executing program 5 (id=4220): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$ITER_CREATE(0xb, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) 2m39.92437391s ago: executing program 5 (id=4221): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x68, &(0x7f0000000200)}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x6e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) gettid() r6 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000680)={[{@nobarrier}, {@block_validity}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") socket$inet_udp(0x2, 0x2, 0x0) 2m24.897076468s ago: executing program 36 (id=4221): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x68, &(0x7f0000000200)}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x6e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) gettid() r6 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000680)={[{@nobarrier}, {@block_validity}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") socket$inet_udp(0x2, 0x2, 0x0) 2m18.5545471s ago: executing program 9 (id=4268): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRES64=0x0], 0x1, 0x2a8, &(0x7f0000000380)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 2m18.316009677s ago: executing program 9 (id=4298): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x64, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x64}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x0, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x24040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES32=r7, @ANYBLOB="000700000000040014001a80100005800c00058008"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, &(0x7f0000000040), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc081}, 0x40400c0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f0000000100)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x1c, r8, 0x1, 0x0, 0x0, {0x8}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) 2m9.145950058s ago: executing program 9 (id=4329): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 2m9.121621209s ago: executing program 37 (id=4329): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 5.332213251s ago: executing program 6 (id=5067): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200400, &(0x7f0000000280)={[{@block_validity}, {@noquota}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x7b95b611, 0x802) writev(r0, &(0x7f00000022c0)=[{&(0x7f00000001c0)='\x00\x00\x00\b', 0x4}], 0x1) fsopen(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x101, 0x10, 0x83, "000000ffff000000010100"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) read$watch_queue(r3, &(0x7f0000000480)=""/142, 0x8e) 4.480057737s ago: executing program 2 (id=5077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r1, 0x0, 0xffff, 0x2) 4.461976058s ago: executing program 6 (id=5078): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x3}, 0x2, 0x100, 0x800000, 0x6, 0x2, 0xd1, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.574736156s ago: executing program 2 (id=5083): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xb00, 0x0, 0x24000001}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = io_uring_setup(0x4806, &(0x7f0000000000)={0x0, 0x9cf0, 0x2, 0x2, 0x8375}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000180)=""/95, 0x5f}], &(0x7f0000000280)=[0x0, 0x200000000], 0x2}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x5) 3.500605069s ago: executing program 6 (id=5084): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x18) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e000000200"/53], 0x110) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}) r1 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x2}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000040)={@multicast1, @empty, @remote}, 0xc) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) 3.293345345s ago: executing program 6 (id=5086): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) r3 = gettid() syz_usb_connect(0x0, 0x24, 0x0, 0x0) rt_sigqueueinfo(r3, 0x21, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) 1.826215312s ago: executing program 8 (id=5097): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x64, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x64}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x0, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x24040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000700000000040014001a80100005800c00058008"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, &(0x7f0000000040), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc081}, 0x40400c0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000000100)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x0) 1.786304613s ago: executing program 7 (id=5098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES32=r1]) socket$netlink(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x10040, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.711834365s ago: executing program 8 (id=5099): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0xfffffffffffffeb8, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x7ffff000) sched_setscheduler(0x0, 0x1, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 1.703010326s ago: executing program 2 (id=5100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) close_range(r0, r2, 0x2) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r5}, 0x18) 1.497716772s ago: executing program 7 (id=5101): r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) fsmount(r0, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.380006226s ago: executing program 7 (id=5102): dup(0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @remote, @local, @remote}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x4}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r1, &(0x7f0000000340)="05036d1ee8fe091c6202a0ffffffff00600312000000892f143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x30000, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.237140441s ago: executing program 7 (id=5103): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x2) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, r2, 0x2000) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 1.220200201s ago: executing program 2 (id=5104): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005280)=[{{&(0x7f00000002c0)=@l2, 0x80, 0x0}}, {{&(0x7f00000004c0)=@generic, 0x80, 0x0, 0x0, &(0x7f0000001c80)=""/224, 0xe0}, 0xc}, {{0x0, 0x0, 0x0}, 0x8}], 0x3, 0x2162, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 1.170604652s ago: executing program 2 (id=5105): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x600, 0x0, 0x48817, 0x40103}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x30000000, 0x8}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48840}, 0x70) r1 = socket$kcm(0x29, 0x5, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x9959, 0x4) 925.97078ms ago: executing program 7 (id=5107): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) eventfd2(0x2, 0x80800) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 843.776293ms ago: executing program 8 (id=5108): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) socket(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) pipe2(&(0x7f0000000000), 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 736.137966ms ago: executing program 8 (id=5109): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x5c}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000200)=[{0x40, 0x2, 0xff, 0x7}, {0x20, 0x7f, 0x2, 0xfffff024}, {0x6, 0x0, 0xff, 0x1}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 735.708477ms ago: executing program 1 (id=5110): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x5f) ptrace$getregset(0x4205, 0x0, 0x2, 0x0) socket(0x2b, 0x1, 0x1) ioprio_set$uid(0x0, 0x0, 0x2003) socket$kcm(0xa, 0x3, 0x73) socket$kcm(0xa, 0x3, 0x73) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 715.427017ms ago: executing program 1 (id=5111): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @local, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 673.480248ms ago: executing program 1 (id=5112): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) 472.032784ms ago: executing program 1 (id=5113): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x2}, 0x102260, 0x90000, 0x0, 0x1, 0x9, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) r0 = fsopen(&(0x7f0000000380)='configfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) close(0xffffffffffffffff) sendto$packet(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x40, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) tee(r1, r0, 0x73, 0x9) close(r0) 446.667635ms ago: executing program 1 (id=5114): dup(0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @remote, @local, @remote}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x4}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r1, &(0x7f0000000340)="05036d1ee8fe091c6202a0ffffffff00600312000000892f143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x30000, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 422.736676ms ago: executing program 7 (id=5115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x1, 0x6}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x8100, 0x67, 0x0, &(0x7f00000002c0)="c810e19e00399da26f0000000000", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000700)=ANY=[], 0xf0}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x2, 0x7, @remote, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x1, 0x0, 0x0) close(0x3) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r12, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r12, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24048080}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r12, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048885}, 0x400c810) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="540000000206050000000000000000000700000004000400000000000900020073797a30000000000c0007800800060000000000050005000000000005000100060000000d000300686173683a6d616300000000aaaf19766f01421148264cd2db490354b52277296823e9539f01303b673fc20b99c2513e400718aa3195635acbd6fadc76ed8a961faefc2cc4a2689d8081e7d4ea039b6f79f8aacec23d2e9d10f47e9780f92c4b67ad655315d2aab5425c3b917a5e310fd9e175afe485ed90f0d06e800792324071c1529cd2ba4abf8463c7d861da3d1c396a588a11c6dc1f1d1ef9005c31928578546d884b8ff551"], 0x54}}, 0x0) 393.357107ms ago: executing program 1 (id=5116): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) 259.838661ms ago: executing program 6 (id=5117): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f00000001c0)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x100) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x2) lseek(r1, 0x3c, 0x4) 204.184043ms ago: executing program 2 (id=5118): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0xfffffffffffffeb8, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x7ffff000) sched_setscheduler(0x0, 0x1, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 143.527025ms ago: executing program 8 (id=5119): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYRES32=0x1], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x47b, &(0x7f0000000280)="$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") mknod(&(0x7f00000014c0)='./file0\x00', 0x10, 0x7) 67.435398ms ago: executing program 6 (id=5120): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000ddff970001001000000095"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xb90, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 0s ago: executing program 8 (id=5121): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) kernel console output (not intermixed with test programs): T28] audit: type=1400 audit(685.988:1608): avc: denied { write } for pid=18257 comm="syz.7.4205" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 605.167499][T18304] netlink: 'syz.1.4212': attribute type 5 has an invalid length. [ 605.460528][ T9043] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.881620][T18304] loop1: detected capacity change from 0 to 2048 [ 606.460621][T18311] net_ratelimit: 2 callbacks suppressed [ 606.460641][T18311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.476500][T18311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.490436][T18299] loop7: detected capacity change from 0 to 2048 [ 606.519538][T18311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.527868][T12509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.598915][T18304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.657198][T18299] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.769738][T18326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.071529][T18326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.608606][T18328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.621630][T18328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.975039][T12509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.983491][T18281] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 608.014215][T18328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.036864][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.519265][T15745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.000611][T18350] loop1: detected capacity change from 0 to 1024 [ 609.016386][T18350] EXT4-fs: Ignoring removed bh option [ 609.116673][T18350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.528807][T18357] netlink: 176 bytes leftover after parsing attributes in process `syz.8.4224'. [ 609.599246][T18360] loop6: detected capacity change from 0 to 2048 [ 609.600299][T18357] netlink: 'syz.8.4224': attribute type 4 has an invalid length. [ 610.565376][T18360] journal_path: Lookup failure for './bus' [ 610.578160][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.588105][T18360] EXT4-fs: error: could not find journal device path [ 610.729111][T18338] loop5: detected capacity change from 0 to 1024 [ 610.744233][ T28] audit: type=1400 audit(693.948:1609): avc: denied { setopt } for pid=18368 comm="syz.8.4227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 610.904835][T18338] EXT4-fs: Ignoring removed bh option [ 611.613376][T18338] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 611.614116][T18338] EXT4-fs: failed to create workqueue [ 612.158765][T12499] net_ratelimit: 12 callbacks suppressed [ 612.158782][T12499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.605456][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.796786][T18398] netlink: 'syz.1.4231': attribute type 5 has an invalid length. [ 612.949844][T18338] EXT4-fs (loop5): mount failed [ 613.044811][T18404] loop7: detected capacity change from 0 to 512 [ 613.092127][T18404] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 613.111085][T18404] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 613.169424][T18404] EXT4-fs (loop7): failed to open journal device unknown-block(0,3) -6 [ 613.838480][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.850935][T18396] loop1: detected capacity change from 0 to 2048 [ 614.181098][T18396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.413448][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.477442][T18422] netlink: 176 bytes leftover after parsing attributes in process `syz.8.4238'. [ 614.538877][T18422] netlink: 'syz.8.4238': attribute type 4 has an invalid length. [ 614.685396][ T28] audit: type=1400 audit(697.888:1610): avc: denied { shutdown } for pid=18437 comm="syz.7.4243" lport=39863 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 615.782980][T12499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.883426][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.789344][T12514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.175732][T18488] netlink: 'syz.6.4252': attribute type 5 has an invalid length. [ 618.206525][T18490] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4255'. [ 618.348470][T18490] netlink: 176 bytes leftover after parsing attributes in process `syz.7.4255'. [ 618.528132][T18490] netlink: 'syz.7.4255': attribute type 4 has an invalid length. [ 618.836993][T12514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.847239][T12493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.936009][T12493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.127393][T12509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.750511][T18528] loop1: detected capacity change from 0 to 2048 [ 621.867547][T18528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.133929][T12509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.963717][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.083903][T12493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.307200][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4269'. [ 623.348984][T18544] netlink: 176 bytes leftover after parsing attributes in process `syz.7.4269'. [ 623.477180][T18551] netlink: 'syz.7.4269': attribute type 4 has an invalid length. [ 624.084171][T12514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.166543][T18555] loop1: detected capacity change from 0 to 512 [ 624.258923][T18555] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 624.337984][T18555] EXT4-fs (loop1): 1 truncate cleaned up [ 624.352887][T18555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.921584][ T28] audit: type=1400 audit(708.128:1611): avc: denied { write } for pid=18554 comm="syz.1.4270" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 625.148924][ T28] audit: type=1326 audit(708.348:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18585 comm="syz.7.4274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1117d9ce59 code=0x7ffc0000 [ 625.154735][T18545] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.181229][T12506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.202494][ T28] audit: type=1326 audit(708.348:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18585 comm="syz.7.4274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1117d9ce59 code=0x7ffc0000 [ 625.204258][T18545] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.240572][T18545] bridge_slave_0: entered allmulticast mode [ 625.247202][T18545] bridge_slave_0: entered promiscuous mode [ 625.280416][ T28] audit: type=1326 audit(708.348:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18585 comm="syz.7.4274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1117d9ce59 code=0x7ffc0000 [ 625.321041][T18545] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.328195][T18545] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.335375][T18545] bridge_slave_1: entered allmulticast mode [ 625.342206][T18545] bridge_slave_1: entered promiscuous mode [ 625.348778][ T28] audit: type=1326 audit(708.348:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18585 comm="syz.7.4274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1117d9ce59 code=0x7ffc0000 [ 625.373704][ T28] audit: type=1326 audit(708.378:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18585 comm="syz.7.4274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1117d9ce59 code=0x7ffc0000 [ 625.409342][ T28] audit: type=1326 audit(708.378:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18585 comm="syz.7.4274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1117d9ce59 code=0x7ffc0000 [ 625.438420][T18545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.449114][T18545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.466511][T18592] loop7: detected capacity change from 0 to 512 [ 625.482024][T18545] team0: Port device team_slave_0 added [ 625.494888][T18545] team0: Port device team_slave_1 added [ 625.500433][T18592] EXT4-fs: Ignoring removed i_version option [ 625.500492][T18592] EXT4-fs: Ignoring removed bh option [ 625.512181][ T28] audit: type=1326 audit(708.378:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18585 comm="syz.7.4274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1117d9ce59 code=0x7ffc0000 [ 625.546496][ T28] audit: type=1326 audit(708.378:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18585 comm="syz.7.4274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1117d9ce59 code=0x7ffc0000 [ 625.580289][T18545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.587473][T18545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.613953][ T28] audit: type=1326 audit(708.438:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18585 comm="syz.7.4274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1117d9ce59 code=0x7ffc0000 [ 625.616505][T18592] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.651736][T18545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.664362][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.678778][T18545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.705027][T18545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.737528][T18545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.771832][T18545] hsr_slave_0: entered promiscuous mode [ 625.777930][T18545] hsr_slave_1: entered promiscuous mode [ 625.783988][T18545] debugfs: 'hsr0' already exists in 'hsr' [ 625.790158][T18545] Cannot create hsr debugfs directory [ 625.844455][T15745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.116807][T12499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.296182][T18614] loop1: detected capacity change from 0 to 1024 [ 626.309947][T18614] EXT4-fs: Ignoring removed bh option [ 626.656874][T18545] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 626.713919][T18545] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 626.749982][T18545] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 626.795604][T18545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 626.853590][T18545] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 626.889842][T18545] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 626.937961][T18545] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 626.992068][T18545] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 627.032760][T12506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.082660][T18614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 627.141654][T18633] loop7: detected capacity change from 0 to 512 [ 627.266073][T18633] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 627.297536][T18633] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 627.316383][T18641] loop6: detected capacity change from 0 to 512 [ 627.345495][T18641] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 627.359117][T18545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.396792][T18641] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 627.422269][T18545] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.437419][T18633] EXT4-fs (loop7): failed to open journal device unknown-block(0,3) -6 [ 627.456960][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.464066][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.514110][T14218] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.521260][T14218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.533102][T18641] EXT4-fs (loop6): failed to open journal device unknown-block(0,3) -6 [ 627.763218][T18545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.123451][T12501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.137397][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.154506][T18545] veth0_vlan: entered promiscuous mode [ 629.126647][T18545] veth1_vlan: entered promiscuous mode [ 629.159544][T18545] veth0_macvtap: entered promiscuous mode [ 629.160740][T12514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.173515][T12514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.176531][T18545] veth1_macvtap: entered promiscuous mode [ 629.205923][T18545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.214896][T18545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.283079][T14218] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.293059][T14218] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.357726][T14218] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.371561][T14218] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.394977][T18677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4292'. [ 629.408024][T18677] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4292'. [ 629.474954][T18690] loop9: detected capacity change from 0 to 512 [ 629.486187][T18677] netlink: 'syz.1.4292': attribute type 4 has an invalid length. [ 629.494565][T18690] FAT-fs (loop9): Directory bread(block 199916) failed [ 629.495280][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.509319][T18690] FAT-fs (loop9): Directory bread(block 199917) failed [ 629.524149][T18690] FAT-fs (loop9): Directory bread(block 199918) failed [ 629.566576][T18690] FAT-fs (loop9): Directory bread(block 199919) failed [ 629.566672][T18690] FAT-fs (loop9): Directory bread(block 199920) failed [ 629.566826][T18690] FAT-fs (loop9): Directory bread(block 199921) failed [ 629.566850][T18690] FAT-fs (loop9): Directory bread(block 199922) failed [ 629.566872][T18690] FAT-fs (loop9): Directory bread(block 199923) failed [ 629.654542][T18545] FAT-fs (loop9): Directory bread(block 199916) failed [ 629.654567][T18545] FAT-fs (loop9): Directory bread(block 199917) failed [ 630.283586][T18705] loop1: detected capacity change from 0 to 2048 [ 630.382999][T18705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 630.721503][T12514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.769883][T18723] netlink: 'syz.6.4297': attribute type 5 has an invalid length. [ 631.479906][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.524885][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 632.524929][ T28] audit: type=1326 audit(715.728:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18802 comm="syz.1.4303" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44b4ccce59 code=0x0 [ 632.660339][T12514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.668706][T12497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.709885][ T28] audit: type=1400 audit(715.918:1641): avc: denied { recv } for pid=14226 comm="kworker/u8:16" saddr=10.128.0.163 src=34538 daddr=10.128.0.53 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 633.389082][T18806] loop1: detected capacity change from 0 to 512 [ 633.411930][T18806] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 633.438117][T18806] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 633.487796][T18806] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -6 [ 633.507629][T18814] loop7: detected capacity change from 0 to 512 [ 633.570434][T18814] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 633.592433][T18814] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 633.673432][T18814] EXT4-fs (loop7): failed to open journal device unknown-block(0,3) -6 [ 634.640663][T12514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.657974][T18816] netlink: 176 bytes leftover after parsing attributes in process `syz.8.4307'. [ 634.837474][T18816] netlink: 'syz.8.4307': attribute type 4 has an invalid length. [ 635.764472][T12499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.206861][T12514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.003079][T18858] loop1: detected capacity change from 0 to 1024 [ 637.016760][T18858] EXT4-fs: Ignoring removed bh option [ 637.105813][T18858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.735091][T18877] loop7: detected capacity change from 0 to 512 [ 637.764618][T18877] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 637.805025][T18877] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 637.878861][T12514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.895619][T18877] EXT4-fs (loop7): failed to open journal device unknown-block(0,3) -6 [ 638.559514][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.820552][T14226] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.847083][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.898618][T18891] netlink: 232 bytes leftover after parsing attributes in process `syz.7.4328'. [ 638.920416][T12501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.078472][T12497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.553039][T18925] loop1: detected capacity change from 0 to 1024 [ 639.567460][T18925] EXT4-fs: Ignoring removed bh option [ 640.456837][T18929] netlink: 'syz.7.4336': attribute type 5 has an invalid length. [ 640.737608][T12514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.794392][ T333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.753579][T12509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.799671][T12509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.345985][T12499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.370842][T14516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.531781][T18929] loop7: detected capacity change from 0 to 2048 [ 642.568593][T18925] EXT4-fs: error -4 creating inode table initialization thread [ 642.578632][T18925] EXT4-fs (loop1): mount failed [ 642.636403][T18929] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.663661][T12501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.207248][T18943] syzkaller0: entered promiscuous mode [ 643.218063][T12509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.226865][T18943] syzkaller0: entered allmulticast mode [ 643.277824][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.307047][T14226] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.322523][T15745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.385992][T18962] loop7: detected capacity change from 0 to 512 [ 643.393184][T18901] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.402459][T18901] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.410403][T18901] bridge_slave_0: entered allmulticast mode [ 643.422551][T18962] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 643.439339][T18901] bridge_slave_0: entered promiscuous mode [ 643.458833][T18962] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 643.468763][T14226] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.514969][T18962] EXT4-fs (loop7): failed to open journal device unknown-block(0,3) -6 [ 643.717575][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.733097][T18901] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.789648][T18901] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.797287][T18901] bridge_slave_1: entered allmulticast mode [ 643.804543][T18901] bridge_slave_1: entered promiscuous mode [ 643.831620][T18901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.878827][T18901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.922272][T14226] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.013119][ T28] audit: type=1400 audit(727.218:1642): avc: denied { execute } for pid=18983 comm="syz.6.4345" path="/file0" dev="ramfs" ino=48947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 644.041137][T18901] team0: Port device team_slave_0 added [ 644.097527][T18901] team0: Port device team_slave_1 added [ 644.194202][T18901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.201412][T18901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.227407][T18901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.243631][T18901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.250803][T18901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.277447][T18901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.319789][T14226] bridge_slave_1: left allmulticast mode [ 644.328801][T14226] bridge_slave_1: left promiscuous mode [ 644.334593][T14226] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.359817][T14226] bridge_slave_0: left allmulticast mode [ 644.368173][T14226] bridge_slave_0: left promiscuous mode [ 644.377823][T14226] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.706338][T19000] netlink: 'syz.6.4350': attribute type 5 has an invalid length. [ 645.056601][T19002] loop6: detected capacity change from 0 to 2048 [ 645.146191][T19002] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.663263][ T28] audit: type=1400 audit(728.868:1643): avc: denied { write } for pid=19012 comm="syz.1.4354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 645.807173][T14226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.828694][T14226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.796972][T12506] net_ratelimit: 1 callbacks suppressed [ 646.796992][T12506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.811084][T19007] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 646.831843][T19017] loop7: detected capacity change from 0 to 2048 [ 646.853337][T14226] bond0 (unregistering): Released all slaves [ 646.917480][T19017] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.029536][T18999] bridge_slave_0: left allmulticast mode [ 647.051860][T18999] bridge_slave_0: left promiscuous mode [ 647.109415][T18999] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.125893][T18999] bridge_slave_1: left allmulticast mode [ 647.129500][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.132185][T18999] bridge_slave_1: left promiscuous mode [ 647.145822][T18999] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.169135][T18999] bond0: (slave bond_slave_0): Releasing backup interface [ 647.187041][T18999] bond0: (slave bond_slave_1): Releasing backup interface [ 647.221542][T18999] team0: Port device team_slave_0 removed [ 647.230843][T18999] team0: Port device team_slave_1 removed [ 647.237939][T18999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.245442][T18999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.254630][T18999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.262921][T18999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.274561][T18999] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 647.354415][T14427] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.379061][T19001] team0: Mode changed to "loadbalance" [ 647.407486][T14226] hsr_slave_0: left promiscuous mode [ 647.413374][T14226] hsr_slave_1: left promiscuous mode [ 647.419584][T14226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.427189][T14226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.434778][T14226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.442602][T14226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.453813][T14226] veth1_macvtap: left promiscuous mode [ 647.461987][T14226] veth0_macvtap: left promiscuous mode [ 647.468008][T14226] veth1_vlan: left promiscuous mode [ 647.473360][T14226] veth0_vlan: left promiscuous mode [ 647.555045][T14226] team0 (unregistering): Port device team_slave_1 removed [ 647.569522][T14226] team0 (unregistering): Port device team_slave_0 removed [ 647.644886][T18901] hsr_slave_0: entered promiscuous mode [ 647.668351][T18901] hsr_slave_1: entered promiscuous mode [ 647.683951][T18901] debugfs: 'hsr0' already exists in 'hsr' [ 647.695320][T18901] Cannot create hsr debugfs directory [ 647.835894][ T28] audit: type=1400 audit(731.038:1644): avc: denied { write } for pid=19034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.877210][T12503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.944335][ T28] audit: type=1400 audit(731.148:1645): avc: denied { write } for pid=19049 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.012800][ T3022] 8021q: adding VLAN 0 to HW filter on device eth17 [ 648.261446][ T28] audit: type=1400 audit(731.468:1646): avc: denied { write } for pid=19052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.290697][T18901] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 648.310179][T18901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 648.339585][T18901] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 648.349364][ T28] audit: type=1400 audit(731.528:1647): avc: denied { write } for pid=19069 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.390948][T18901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 648.401793][T15745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.414441][T18901] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 648.425760][T18901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 648.433607][T18901] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 648.441612][ T28] audit: type=1400 audit(731.648:1648): avc: denied { bind } for pid=19077 comm="syz.1.4363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 648.471860][T19081] loop7: detected capacity change from 0 to 512 [ 648.480000][T18901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 648.482461][T19081] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 648.508293][T19081] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 648.533238][T19083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4365'. [ 648.544958][T19081] EXT4-fs (loop7): failed to open journal device unknown-block(0,3) -6 [ 648.554185][T19083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4365'. [ 648.694828][T12499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.707854][ T3022] 8021q: adding VLAN 0 to HW filter on device eth19 [ 649.689407][T12506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.888644][T19101] loop1: detected capacity change from 0 to 1024 [ 649.905560][T19101] EXT4-fs: Ignoring removed bh option [ 649.990433][T19101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.204416][T18901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.260859][T18901] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.288885][T14226] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.295998][T14226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.343819][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.351042][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.389207][ T28] audit: type=1400 audit(733.598:1649): avc: denied { write } for pid=19107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.496074][ T28] audit: type=1400 audit(733.698:1650): avc: denied { write } for pid=19125 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.561523][ T3022] 8021q: adding VLAN 0 to HW filter on device eth18 [ 650.606483][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.013578][ T28] audit: type=1400 audit(734.218:1651): avc: denied { write } for pid=19137 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.038643][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.043075][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.113793][T19166] syz_tun: entered promiscuous mode [ 651.113867][T19166] vlan2: entered promiscuous mode [ 651.161330][ T28] audit: type=1400 audit(734.288:1652): avc: denied { write } for pid=19163 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.196936][ T3022] 8021q: adding VLAN 0 to HW filter on device eth20 [ 651.773004][ T414] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.810609][T19173] loop7: detected capacity change from 0 to 2048 [ 651.908863][T19173] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.003920][ T414] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.004071][ T414] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 652.107605][ T414] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.107731][ T414] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.107804][ T414] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 652.118166][T12514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.163164][T18901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.171804][ T414] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.171847][ T414] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.171946][ T414] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 652.242055][ T414] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.242115][ T414] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.242175][ T414] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 652.322304][ T28] audit: type=1400 audit(735.518:1653): avc: denied { write } for pid=19168 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.418984][ T414] bridge_slave_1: left allmulticast mode [ 652.419025][ T414] bridge_slave_1: left promiscuous mode [ 652.419151][ T414] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.420159][ T414] bridge_slave_0: left allmulticast mode [ 652.420175][ T414] bridge_slave_0: left promiscuous mode [ 652.420396][ T414] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.470291][ T28] audit: type=1400 audit(735.678:1654): avc: denied { write } for pid=19199 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.145886][T15745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.408502][ T28] audit: type=1400 audit(736.618:1655): avc: denied { create } for pid=19209 comm="syz.7.4383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 653.410688][ T28] audit: type=1400 audit(736.618:1656): avc: denied { ioctl } for pid=19209 comm="syz.7.4383" path="socket:[50876]" dev="sockfs" ino=50876 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 653.609779][ T414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.627102][T12495] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 653.639092][T12495] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 653.655413][ T414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.666822][T12495] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 653.675242][T12495] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 653.686376][T12495] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 653.699270][ T414] bond0 (unregistering): Released all slaves [ 653.725657][T12495] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 653.733635][T12495] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 653.741619][T12495] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 653.749582][T12495] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 653.757949][T12495] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 653.769705][T12495] hid-generic 0006:0008:0008.0008: hidraw0: VIRTUAL HID v0.02 Device [syz0] on syz1 [ 653.866309][ T414] hsr_slave_0: left promiscuous mode [ 654.265721][T19238] fido_id[19238]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 654.795555][T19262] loop1: detected capacity change from 0 to 2048 [ 655.462754][ T28] audit: type=1400 audit(738.668:1657): avc: denied { write } for pid=19241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 656.091181][ T414] hsr_slave_1: left promiscuous mode [ 656.117254][ T414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.134797][ T414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.303735][ T28] audit: type=1400 audit(739.318:1658): avc: denied { write } for pid=19270 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 656.362474][T19262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 656.428498][T19278] loop7: detected capacity change from 0 to 512 [ 656.436482][T19278] EXT4-fs: Ignoring removed oldalloc option [ 656.454316][ T414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.465548][T19278] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 656.476403][ T414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.484295][T19278] EXT4-fs (loop7): orphan cleanup on readonly fs [ 656.541352][ T414] veth1_macvtap: left promiscuous mode [ 656.551769][ T414] veth0_macvtap: left promiscuous mode [ 656.560629][T19278] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 656.581199][ T414] veth1_vlan: left promiscuous mode [ 656.594443][ T414] veth0_vlan: left promiscuous mode [ 656.638873][T19278] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 656.669722][T19278] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #13: comm syz.7.4395: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 656.736338][T19278] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 656.736661][T19278] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.4395: couldn't read orphan inode 13 (err -117) [ 656.736777][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 656.764371][ C1] EXT4-fs (loop7): last error at time 739: ext4_ext_check_inode:521: inode 13 [ 656.815994][T19278] loop7: lost filesystem error report for type 5 error -117 [ 656.822428][ T28] audit: type=1400 audit(740.028:1659): avc: denied { write } for pid=19282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 656.853520][T19278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 656.915756][T19278] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.927848][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.941766][ T28] audit: type=1400 audit(740.148:1660): avc: denied { write } for pid=19299 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.032704][T19304] loop7: detected capacity change from 0 to 512 [ 657.047721][ T414] team0 (unregistering): Port device team_slave_1 removed [ 657.049812][T19306] loop1: detected capacity change from 0 to 512 [ 657.068841][T19304] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 657.094041][T19306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.099582][T19304] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 657.116443][ T414] team0 (unregistering): Port device team_slave_0 removed [ 657.152735][ T28] audit: type=1400 audit(740.358:1661): avc: denied { write } for pid=19305 comm="syz.1.4397" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 657.176628][ T28] audit: type=1400 audit(740.378:1662): avc: denied { write } for pid=19305 comm="syz.1.4397" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 657.214836][T19304] EXT4-fs (loop7): failed to open journal device unknown-block(0,3) -6 [ 657.247207][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.283316][T18901] veth0_vlan: entered promiscuous mode [ 657.302313][T18901] veth1_vlan: entered promiscuous mode [ 657.318939][T18901] veth0_macvtap: entered promiscuous mode [ 657.326270][T18901] veth1_macvtap: entered promiscuous mode [ 657.340242][T18901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.356534][T18901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.368896][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.378226][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.394681][ T28] audit: type=1400 audit(740.598:1663): avc: denied { write } for pid=19301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.435058][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.688806][ T28] audit: type=1400 audit(740.628:1664): avc: denied { write } for pid=19321 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.711498][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.840255][T19334] syzkaller0: entered promiscuous mode [ 657.919506][T19334] syzkaller0: entered allmulticast mode [ 658.097222][ T28] audit: type=1400 audit(741.308:1665): avc: denied { write } for pid=19333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 658.138371][ T28] audit: type=1400 audit(741.348:1666): avc: denied { write } for pid=19356 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.578717][T19472] loop2: detected capacity change from 0 to 2048 [ 659.648934][T19472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.894246][T19295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 661.057439][T19488] netlink: 'syz.8.4408': attribute type 5 has an invalid length. [ 662.128622][T18901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.239570][T19489] loop6: detected capacity change from 0 to 1024 [ 663.248811][T19489] EXT4-fs: Ignoring removed bh option [ 664.227043][T19510] loop2: detected capacity change from 0 to 512 [ 664.280598][T19489] EXT4-fs warning (device loop6): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop6. [ 664.294708][T19508] syz_tun: entered promiscuous mode [ 664.294825][T19508] vlan2: entered promiscuous mode [ 664.309550][T19510] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 664.310057][T19510] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 664.476909][T19510] EXT4-fs (loop2): failed to open journal device unknown-block(0,3) -6 [ 664.624274][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 664.624292][ T28] audit: type=1400 audit(747.828:1683): avc: denied { write } for pid=19490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.684383][ T28] audit: type=1400 audit(747.878:1684): avc: denied { write } for pid=19520 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.726767][T19522] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4425'. [ 664.770912][T19522] netlink: 176 bytes leftover after parsing attributes in process `syz.7.4425'. [ 664.774974][ T28] audit: type=1400 audit(747.948:1685): avc: denied { mount } for pid=19518 comm="syz.8.4416" name="/" dev="hugetlbfs" ino=51173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 664.782831][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 664.816950][ T28] audit: type=1400 audit(747.958:1686): avc: denied { watch watch_reads } for pid=19518 comm="syz.8.4416" path="/" dev="hugetlbfs" ino=51173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 664.981335][T19533] netlink: 'syz.7.4425': attribute type 4 has an invalid length. [ 665.212278][T19539] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4420'. [ 665.244777][T19539] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4420'. [ 665.492723][T19555] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4438'. [ 665.505955][T19562] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4430'. [ 665.526293][T19555] netlink: 176 bytes leftover after parsing attributes in process `syz.7.4438'. [ 665.538209][ T28] audit: type=1400 audit(748.748:1687): avc: denied { mount } for pid=19557 comm="syz.2.4429" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 665.617030][ T28] audit: type=1400 audit(748.828:1688): avc: denied { write } for pid=19551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.646183][T19578] netlink: 'syz.7.4438': attribute type 4 has an invalid length. [ 665.720988][ T28] audit: type=1400 audit(748.928:1689): avc: denied { write } for pid=19580 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.771076][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 665.944584][T19582] loop6: detected capacity change from 0 to 512 [ 665.959804][T19587] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.064769][T19600] netlink: 'syz.1.4436': attribute type 5 has an invalid length. [ 666.504621][T19600] loop1: detected capacity change from 0 to 2048 [ 666.696916][T19600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.744473][T19582] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 666.897560][T19587] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.910053][T19582] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 666.933970][T19582] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.4433: Corrupt directory, running e2fsck is recommended [ 667.003919][T19587] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.033896][T19582] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 667.074283][T19582] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.4433: corrupted in-inode xattr: e_name out of bounds [ 667.125763][T19587] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.143697][T19582] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 667.146701][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 667.163248][ C1] EXT4-fs (loop6): initial error at time 750: ext4_iget_extra_inode:5128: inode 15 [ 667.173929][ C1] EXT4-fs (loop6): last error at time 750: ext4_iget_extra_inode:5128: inode 15 [ 667.198265][T19582] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4433: couldn't read orphan inode 15 (err -117) [ 667.212213][T19582] loop6: lost filesystem error report for type 5 error -117 [ 667.215722][T19582] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.254385][ T333] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.269747][ T333] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.279799][ T333] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.312245][ T333] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.369506][ T28] audit: type=1400 audit(750.578:1690): avc: denied { write } for pid=19608 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 667.421079][T14427] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.500068][ T28] audit: type=1400 audit(750.698:1691): avc: denied { write } for pid=19625 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 667.595551][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 667.627522][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4446'. [ 667.671438][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4446'. [ 667.699752][ T28] audit: type=1326 audit(750.908:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19626 comm="syz.8.4444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a5957ce59 code=0x0 [ 667.725073][T19638] loop7: detected capacity change from 0 to 256 [ 667.738903][T19638] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 667.806400][T19638] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 667.824682][T19641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4448'. [ 667.919178][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.932100][T19653] netlink: 'syz.2.4448': attribute type 4 has an invalid length. [ 667.943362][T19656] loop6: detected capacity change from 0 to 128 [ 667.958615][T19656] EXT4-fs: Ignoring removed nobh option [ 668.006288][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 668.123357][T19656] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 668.242601][T19671] netlink: 'syz.7.4460': attribute type 5 has an invalid length. [ 668.645311][T19671] loop7: detected capacity change from 0 to 2048 [ 668.755949][T19671] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.188223][T19680] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.221656][T19680] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.293597][T14427] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 669.353107][T19680] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.408200][T19680] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.490981][T19686] loop2: detected capacity change from 0 to 512 [ 669.525818][T19680] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.594592][T19680] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.663298][T19686] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 669.743387][T19686] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 669.768320][T19680] vlan2 (unregistering): left allmulticast mode [ 669.800430][T19680] vlan2 (unregistering): left promiscuous mode [ 669.813088][T19686] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.4455: Corrupt directory, running e2fsck is recommended [ 669.883965][T19680] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 669.893459][T19702] __nla_validate_parse: 1 callbacks suppressed [ 669.893477][T19702] netlink: 176 bytes leftover after parsing attributes in process `syz.8.4461'. [ 669.921844][T19686] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 669.922141][T19680] bridge0: port 3(vlan2) entered disabled state [ 669.943386][T19686] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.4455: corrupted in-inode xattr: e_name out of bounds [ 669.966934][T19680] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.977792][T19686] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 669.983326][T19686] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4455: couldn't read orphan inode 15 (err -117) [ 669.993086][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 669.993195][ C1] EXT4-fs (loop2): initial error at time 753: ext4_iget_extra_inode:5128: inode 15 [ 669.993866][ C1] EXT4-fs (loop2): last error at time 753: ext4_iget_extra_inode:5128: inode 15 [ 669.999189][T19680] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.016562][T19708] netlink: 'syz.8.4461': attribute type 4 has an invalid length. [ 670.026955][T19686] loop2: lost filesystem error report for type 5 error -117 [ 670.031942][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 670.031962][ T28] audit: type=1400 audit(753.228:1696): avc: denied { ioctl } for pid=19710 comm="syz.6.4463" path="socket:[51584]" dev="sockfs" ino=51584 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 670.037002][T15745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.140123][T19686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.175382][ T333] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.191125][ T333] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.200356][ T333] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.208844][ T333] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.226509][ T333] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.258186][ T333] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.277266][ T333] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.283253][T18901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.294406][ T333] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.328896][ T28] audit: type=1326 audit(753.538:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19718 comm="syz.7.4464" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1117d9ce59 code=0x0 [ 672.419636][T19755] netlink: 'syz.7.4474': attribute type 5 has an invalid length. [ 672.962120][T19755] loop7: detected capacity change from 0 to 2048 [ 673.064950][T19755] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 673.504903][T19772] loop6: detected capacity change from 0 to 164 [ 674.252079][T15745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.342094][ T28] audit: type=1400 audit(757.548:1698): avc: denied { mounton } for pid=19775 comm="syz.6.4481" path="/syzcgroup/cpu/syz6/cgroup.procs" dev="cgroup" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 675.103391][T19786] 9pnet_fd: p9_fd_create_tcp (19786): problem connecting socket to 127.0.0.1 [ 675.619497][T19809] loop7: detected capacity change from 0 to 512 [ 675.664471][T19809] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 675.694978][T19809] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 675.844615][T19823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4494'. [ 675.857789][T19809] EXT4-fs (loop7): failed to open journal device unknown-block(0,3) -6 [ 677.124366][ T28] audit: type=1400 audit(760.328:1699): avc: denied { read } for pid=19827 comm="syz.1.4496" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 677.175189][ T28] audit: type=1400 audit(760.328:1700): avc: denied { open } for pid=19827 comm="syz.1.4496" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 677.982500][ T28] audit: type=1400 audit(761.188:1701): avc: denied { connect } for pid=19859 comm="syz.6.4505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 678.056965][ T28] audit: type=1400 audit(761.218:1702): avc: denied { ioctl } for pid=19859 comm="syz.6.4505" path="socket:[50121]" dev="sockfs" ino=50121 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 678.084007][ T28] audit: type=1400 audit(761.218:1703): avc: denied { read } for pid=19859 comm="syz.6.4505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 678.119459][T19867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4507'. [ 678.703450][T19871] loop2: detected capacity change from 0 to 1024 [ 678.723081][T19871] EXT4-fs: Ignoring removed bh option [ 680.382809][T19871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 680.592557][T18901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.331812][ T28] audit: type=1400 audit(764.538:1704): avc: denied { write } for pid=19875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 681.467103][ T28] audit: type=1400 audit(764.638:1705): avc: denied { write } for pid=19913 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 681.874994][ T28] audit: type=1400 audit(765.078:1706): avc: denied { write } for pid=19919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.003213][ T28] audit: type=1400 audit(765.208:1707): avc: denied { write } for pid=19940 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.115742][T19946] loop2: detected capacity change from 0 to 512 [ 682.154847][T19946] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 682.197027][T19946] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 682.233493][T19946] EXT4-fs (loop2): orphan cleanup on readonly fs [ 682.259865][T19946] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.4520: bad orphan inode 3 [ 682.305737][T19946] loop2: lost filesystem error report for type 5 error -117 [ 682.305990][T19946] EXT4-fs (loop2): Remounting filesystem read-only [ 682.313369][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 682.313387][ C1] EXT4-fs (loop2): initial error at time 765: ext4_orphan_get:1423 [ 682.313404][ C1] EXT4-fs (loop2): last error at time 765: ext4_orphan_get:1423 [ 682.352753][T19946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 682.391613][T19944] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 682.402460][T19944] SELinux: failed to load policy [ 682.407754][T19962] tipc: Failed to remove unknown binding: 66,0,0/0:3807677753/3807677754 [ 682.418164][ T28] audit: type=1400 audit(765.618:1708): avc: denied { write } for pid=19949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.505829][ T28] audit: type=1400 audit(765.708:1709): avc: denied { write } for pid=19967 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.543409][T18901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 682.559146][T19979] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4531'. [ 682.590686][T19979] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4531'. [ 682.673389][T19987] loop7: detected capacity change from 0 to 512 [ 682.719989][T19979] loop1: detected capacity change from 0 to 512 [ 682.764270][T19979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.823275][ T28] audit: type=1400 audit(766.028:1710): avc: denied { write } for pid=19983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.890419][ T28] audit: type=1400 audit(766.058:1711): avc: denied { write } for pid=19978 comm="syz.1.4531" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 682.914833][ T28] audit: type=1400 audit(766.078:1712): avc: denied { write } for pid=20001 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.100993][ T28] audit: type=1400 audit(766.308:1713): avc: denied { write } for pid=20004 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.178861][ T28] audit: type=1400 audit(766.378:1714): avc: denied { write } for pid=20015 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.592949][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.474384][ T28] audit: type=1400 audit(767.678:1715): avc: denied { write } for pid=20028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.523190][ T28] audit: type=1400 audit(767.728:1716): avc: denied { write } for pid=20051 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.650626][T20057] loop7: detected capacity change from 0 to 512 [ 684.695717][T20057] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 684.745109][T20057] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 684.772635][T20057] EXT4-fs (loop7): orphan cleanup on readonly fs [ 684.799356][T20057] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.4541: bad orphan inode 3 [ 684.832726][T20057] loop7: lost filesystem error report for type 5 error -117 [ 684.832893][T20057] EXT4-fs (loop7): Remounting filesystem read-only [ 684.840276][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 684.840298][ C1] EXT4-fs (loop7): initial error at time 768: ext4_orphan_get:1423 [ 684.840327][ C1] EXT4-fs (loop7): last error at time 768: ext4_orphan_get:1423 [ 684.923910][T20057] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 684.990127][T20054] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 685.028076][T20054] SELinux: failed to load policy [ 685.276717][ T28] audit: type=1400 audit(768.128:1717): avc: denied { write } for pid=20058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.307222][T15745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 685.358151][T20090] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.448772][T20096] dummy0: entered promiscuous mode [ 685.474927][T20096] gretap0: entered promiscuous mode [ 685.506052][T20096] hsr1: entered allmulticast mode [ 685.511868][T20096] dummy0: entered allmulticast mode [ 685.519081][T20096] gretap0: entered allmulticast mode [ 685.588669][T20090] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.724815][T20090] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.916112][T20090] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.005545][T20121] netlink: 'syz.1.4554': attribute type 5 has an invalid length. [ 686.445940][T20121] loop1: detected capacity change from 0 to 2048 [ 686.924281][T14218] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.929570][T14516] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.974268][T14516] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.986025][T14516] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.014281][T20121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.983814][T20145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20145 comm=syz.7.4558 [ 689.061722][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.422549][T20161] 9pnet_fd: p9_fd_create_tcp (20161): problem connecting socket to 127.0.0.1 [ 690.021381][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 690.021397][ T28] audit: type=1400 audit(773.228:1721): avc: denied { map } for pid=20173 comm="syz.7.4567" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 690.074768][ T28] audit: type=1400 audit(773.228:1722): avc: denied { execute } for pid=20173 comm="syz.7.4567" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 690.110669][ T28] audit: type=1400 audit(773.318:1723): avc: denied { setopt } for pid=20183 comm="syz.6.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 690.291130][T20187] sctp: [Deprecated]: syz.8.4572 (pid 20187) Use of int in max_burst socket option deprecated. [ 690.291130][T20187] Use struct sctp_assoc_value instead [ 690.355581][T20194] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 690.388223][T20196] netlink: 'syz.6.4573': attribute type 5 has an invalid length. [ 690.805330][T20196] loop6: detected capacity change from 0 to 2048 [ 691.169987][T20206] loop2: detected capacity change from 0 to 512 [ 691.285641][T12499] IPVS: starting estimator thread 0... [ 691.313851][T20196] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 691.355283][T20206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 691.436829][T20210] IPVS: using max 2304 ests per chain, 115200 per kthread [ 691.517499][ T28] audit: type=1400 audit(774.718:1724): avc: denied { write } for pid=20201 comm="syz.2.4578" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 691.754103][T18901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.848329][ T28] audit: type=1326 audit(775.058:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.2.4583" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadd2ece59 code=0x7ffc0000 [ 691.882659][ T28] audit: type=1326 audit(775.088:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.2.4583" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadd2ece59 code=0x7ffc0000 [ 691.939076][ T28] audit: type=1326 audit(775.088:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.2.4583" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadd2ece59 code=0x7ffc0000 [ 692.070318][ T28] audit: type=1326 audit(775.088:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.2.4583" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadd2ece59 code=0x7ffc0000 [ 692.247001][T14427] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.248041][ T28] audit: type=1326 audit(775.088:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.2.4583" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fcadd2ece59 code=0x7ffc0000 [ 692.281012][ T28] audit: type=1326 audit(775.088:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.2.4583" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadd2ece59 code=0x7ffc0000 [ 692.878007][T20240] loop2: detected capacity change from 0 to 512 [ 693.018046][T20240] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 693.045019][T20240] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.4589: iget: bad i_size value: 38620345925642 [ 693.080404][T20240] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 693.082342][T20240] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4589: couldn't read orphan inode 15 (err -117) [ 693.091926][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 693.091953][ C0] EXT4-fs (loop2): initial error at time 776: ext4_orphan_get:1397: inode 15 [ 693.092038][ C0] EXT4-fs (loop2): last error at time 776: ext4_orphan_get:1397: inode 15 [ 693.337772][T20240] loop2: lost filesystem error report for type 5 error -117 [ 693.340686][T20240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.424861][T20240] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 693.432432][T12514] IPVS: starting estimator thread 0... [ 693.538127][T20264] IPVS: using max 2400 ests per chain, 120000 per kthread [ 693.741509][T18901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.797398][T20283] loop6: detected capacity change from 0 to 512 [ 693.832583][T20283] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 693.878939][T20283] EXT4-fs (loop6): orphan cleanup on readonly fs [ 693.899377][T20283] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.4604: bad orphan inode 15 [ 693.922957][T20283] loop6: lost filesystem error report for type 5 error -117 [ 693.923222][T20283] ext4_test_bit(bit=14, block=18) = 1 [ 693.930683][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 693.930701][ C0] EXT4-fs (loop6): initial error at time 777: ext4_orphan_get:1423 [ 693.930719][ C0] EXT4-fs (loop6): last error at time 777: ext4_orphan_get:1423 [ 693.967802][T20290] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4607'. [ 694.002049][T20283] is_bad_inode(inode)=0 [ 694.010974][T20283] NEXT_ORPHAN(inode)=1023 [ 694.020598][T20283] max_ino=32 [ 694.024091][T20283] i_nlink=0 [ 694.040516][T20283] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4604: bg 0: block 161: padding at end of block bitmap is not set [ 694.068458][T20283] loop6: lost filesystem error report for type 5 error -117 [ 694.068730][T20283] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 694.092342][T20283] loop6: lost filesystem error report for type 5 error -117 [ 694.100578][T20294] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4608'. [ 694.122208][T20283] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 694.143247][T20294] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4608'. [ 694.173984][T20298] cgroup: fork rejected by pids controller in /syz1 [ 694.239559][T14427] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.298323][T20309] xt_hashlimit: size too large, truncated to 1048576 [ 694.609695][T20320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4617'. [ 694.634375][T20320] hsr_slave_1 (unregistering): left promiscuous mode [ 695.162255][T20334] loop2: detected capacity change from 0 to 1024 [ 695.178596][T20334] EXT4-fs: Ignoring removed bh option [ 695.302864][T20334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 695.709141][T20357] netlink: 'syz.6.4625': attribute type 4 has an invalid length. [ 695.992183][T20377] 9pnet_fd: p9_fd_create_tcp (20377): problem connecting socket to 127.0.0.1 [ 696.077165][T20338] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.084400][T20338] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.091930][T20338] bridge_slave_0: entered allmulticast mode [ 696.098723][T20338] bridge_slave_0: entered promiscuous mode [ 696.105680][T20338] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.113094][T20338] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.120647][T20338] bridge_slave_1: entered allmulticast mode [ 696.130029][T20338] bridge_slave_1: entered promiscuous mode [ 696.174958][T20385] loop6: detected capacity change from 0 to 512 [ 696.185506][T20338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.195153][T20385] EXT4-fs: Ignoring removed nobh option [ 696.214777][T20338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.230543][T20385] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.324115][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 696.324151][ T28] audit: type=1400 audit(779.528:1755): avc: denied { write } for pid=20384 comm="syz.6.4632" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 696.356850][T20338] team0: Port device team_slave_0 added [ 696.402085][T20338] team0: Port device team_slave_1 added [ 696.501719][T20338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.555409][T20338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.682630][T20338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.731534][T20338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.814571][T20338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.858029][T20338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.860154][T14427] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.880280][T18901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.902610][T20338] hsr_slave_0: entered promiscuous mode [ 696.919669][T20338] hsr_slave_1: entered promiscuous mode [ 696.934991][T20338] debugfs: 'hsr0' already exists in 'hsr' [ 697.037754][T20338] Cannot create hsr debugfs directory [ 697.089343][T20397] loop6: detected capacity change from 0 to 512 [ 697.097492][T20397] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 697.165907][T20398] netlink: 'syz.7.4636': attribute type 5 has an invalid length. [ 697.200911][T20400] loop2: detected capacity change from 0 to 512 [ 697.525590][T20401] loop7: detected capacity change from 0 to 2048 [ 697.875635][T20400] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 698.153952][T20400] EXT4-fs (loop2): 1 truncate cleaned up [ 698.160148][T20400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.684857][T20397] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.4634: bad orphan inode 131083 [ 698.724606][T20397] loop6: lost filesystem error report for type 5 error -117 [ 698.725234][T20397] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.947951][T18901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.995131][T20401] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.186034][T20419] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 699.206031][T20419] sch_tbf: burst 11982 is lower than device lo mtu (65550) ! [ 699.229170][ T28] audit: type=1400 audit(782.438:1756): avc: denied { write } for pid=20396 comm="syz.6.4634" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 699.251791][T20338] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.263119][T20338] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.328515][T20338] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.348216][T20338] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.364772][T14427] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.408812][T20338] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.419508][T20338] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.478952][T20338] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.491447][T20338] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.576981][T15745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.588780][T20338] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 699.600941][T20338] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 699.612965][T20338] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 699.622519][T20338] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 699.630705][T20338] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 699.643397][T20338] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 699.651766][T20338] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 699.662207][T20338] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 699.730909][T20338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.745361][T20338] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.774958][T20338] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 699.792127][T20338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 699.812013][T14526] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.819129][T14526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.828542][T14526] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.835682][T14526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.134602][T20439] loop7: detected capacity change from 0 to 1024 [ 700.152100][T20439] EXT4-fs: Ignoring removed bh option [ 700.290685][T20439] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 700.634928][T20338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.716042][T20338] veth0_vlan: entered promiscuous mode [ 700.724577][T20338] veth1_vlan: entered promiscuous mode [ 700.741926][T20338] veth0_macvtap: entered promiscuous mode [ 700.750100][T20338] veth1_macvtap: entered promiscuous mode [ 700.761644][T20338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.774340][T20338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.785705][T14218] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.798031][T14218] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.812687][T14218] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.821749][T14218] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.018346][T20471] 9pnet_fd: p9_fd_create_tcp (20471): problem connecting socket to 127.0.0.1 [ 701.116093][T20463] bridge_slave_1: entered promiscuous mode [ 701.140632][T20477] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4654'. [ 701.184891][ T28] audit: type=1400 audit(784.388:1757): avc: denied { ioctl } for pid=20476 comm="syz.6.4654" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 701.576648][T15745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.654962][T20492] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4660'. [ 701.687672][ T28] audit: type=1400 audit(784.898:1758): avc: denied { getopt } for pid=20491 comm="syz.7.4660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 701.715236][T20477] loop6: detected capacity change from 0 to 1024 [ 701.867416][T20477] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=1 [ 701.906616][T20477] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 701.962627][T20477] EXT4-fs (loop6): mount failed [ 702.270454][T20506] netlink: 'syz.8.4664': attribute type 5 has an invalid length. [ 704.634756][T20520] loop6: detected capacity change from 0 to 512 [ 704.652855][T20520] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 704.656132][T20519] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4667'. [ 704.675719][T20520] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 704.700722][ T28] audit: type=1326 audit(787.908:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20523 comm="syz.2.4669" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcadd2ece59 code=0x0 [ 704.732899][T20527] loop7: detected capacity change from 0 to 512 [ 704.745957][ T28] audit: type=1400 audit(787.948:1760): avc: denied { append } for pid=20528 comm="syz.1.4670" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 704.780315][T20520] EXT4-fs (loop6): failed to open journal device unknown-block(0,3) -6 [ 704.806898][T20527] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 704.869138][ T28] audit: type=1400 audit(788.038:1761): avc: denied { write } for pid=20526 comm="syz.7.4671" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 704.892522][T15745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 704.902263][ T28] audit: type=1326 audit(788.048:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20523 comm="syz.2.4669" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadd2ece59 code=0x7ffc0000 [ 704.938882][ T28] audit: type=1326 audit(788.048:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20523 comm="syz.2.4669" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadd2ece59 code=0x7ffc0000 [ 704.964258][ T28] audit: type=1326 audit(788.058:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20523 comm="syz.2.4669" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadd2ece59 code=0x7ffc0000 [ 704.989812][ T28] audit: type=1326 audit(788.058:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20523 comm="syz.2.4669" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcadd2ece59 code=0x7ffc0000 [ 705.016840][ T28] audit: type=1326 audit(788.068:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20523 comm="syz.2.4669" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadd2ece59 code=0x7ffc0000 [ 705.585261][T20552] loop7: detected capacity change from 0 to 1024 [ 706.286830][T20560] netlink: 'syz.2.4677': attribute type 5 has an invalid length. [ 706.546899][T20562] netlink: 'syz.6.4678': attribute type 5 has an invalid length. [ 707.810602][T20552] infiniband syz0: set active [ 707.815575][T20552] infiniband syz0: added bond_slave_1 [ 707.837330][T20552] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 707.837570][T20552] infiniband syz0: Couldn't open port 1 [ 708.693881][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4680'. [ 708.708934][T20552] RDS/IB: syz0: added [ 708.931278][T20552] smc: adding ib device syz0 with port count 1 [ 708.944861][T20552] smc: ib device syz0 port 1 has no pnetid [ 709.740396][T20562] loop6: detected capacity change from 0 to 2048 [ 710.182782][T20592] loop1: detected capacity change from 0 to 512 [ 710.297914][T20607] bridge0: port 3(syz_tun) entered blocking state [ 710.310601][T20607] bridge0: port 3(syz_tun) entered disabled state [ 710.320355][T20592] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 710.328842][T20607] syz_tun: entered promiscuous mode [ 710.351191][T20607] bridge0: port 3(syz_tun) entered blocking state [ 710.357755][T20607] bridge0: port 3(syz_tun) entered forwarding state [ 710.428559][T20612] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 710.806344][ T28] kauditd_printk_skb: 218 callbacks suppressed [ 710.806370][ T28] audit: type=1400 audit(794.008:1985): avc: denied { bind } for pid=20618 comm="syz.6.4693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 710.894563][T20592] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.910663][T20592] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 711.292743][T20638] netlink: 'syz.8.4698': attribute type 5 has an invalid length. [ 712.251813][T20661] loop2: detected capacity change from 0 to 512 [ 712.301925][T20661] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 712.379306][T20661] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.4703: bad orphan inode 131083 [ 712.425373][T20661] loop2: lost filesystem error report for type 5 error -117 [ 712.426031][T20661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 712.541265][ T28] audit: type=1400 audit(795.748:1986): avc: denied { write } for pid=20660 comm="syz.2.4703" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 712.590818][T20672] loop6: detected capacity change from 0 to 512 [ 712.625124][T20678] loop1: detected capacity change from 0 to 512 [ 712.674355][T20678] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 712.697958][T20672] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 712.714593][T20678] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 712.772578][T20672] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.797604][T20678] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -6 [ 712.812387][T20672] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 713.130897][T18901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.966951][T20691] netlink: 'syz.6.4710': attribute type 5 has an invalid length. [ 714.693571][T20691] loop6: detected capacity change from 0 to 2048 [ 715.171286][T20691] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 715.764045][T14427] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.099915][T20742] netlink: 156 bytes leftover after parsing attributes in process `syz.8.4723'. [ 716.275892][T20747] netlink: 'syz.2.4722': attribute type 5 has an invalid length. [ 716.601791][T20747] loop2: detected capacity change from 0 to 2048 [ 716.722630][T20747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.785038][T20769] netlink: 'syz.8.4729': attribute type 5 has an invalid length. [ 718.692814][T18901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.111735][T20782] syzkaller0: create flow: hash 3417712328 index 1 [ 719.256847][T14226] syzkaller0: tun_net_xmit 76 [ 719.290091][T12514] syzkaller0: tun_net_xmit 76 [ 719.298309][T14226] syzkaller0: tun_net_xmit 48 [ 719.337256][T20779] syzkaller0: delete flow: hash 3417712328 index 1 [ 719.634566][T20789] netlink: 'syz.1.4737': attribute type 11 has an invalid length. [ 719.864105][T20795] loop1: detected capacity change from 0 to 128 [ 720.352770][T20814] bridge0: port 3(syz_tun) entered blocking state [ 720.370500][T20814] bridge0: port 3(syz_tun) entered disabled state [ 720.383002][T20814] syz_tun: entered allmulticast mode [ 720.401973][T20814] bridge0: port 3(syz_tun) entered blocking state [ 720.408500][T20814] bridge0: port 3(syz_tun) entered forwarding state [ 720.446114][T20814] bridge0: port 3(syz_tun) entered learning state [ 720.462284][T20814] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 721.128660][T20805] loop2: detected capacity change from 0 to 4096 [ 721.345938][T20805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.403977][ T28] audit: type=1400 audit(804.598:1987): avc: denied { write } for pid=20804 comm="syz.2.4744" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 721.542865][T20839] syzkaller0: entered promiscuous mode [ 721.554985][T20839] syzkaller0: entered allmulticast mode [ 721.594981][ T28] audit: type=1400 audit(804.798:1988): avc: denied { nlmsg_write } for pid=20840 comm="syz.6.4758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 721.624932][ T28] audit: type=1400 audit(804.798:1989): avc: denied { nlmsg_read } for pid=20840 comm="syz.6.4758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 724.459880][T18901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.546444][ T28] audit: type=1400 audit(807.748:1990): avc: denied { mounton } for pid=20853 comm="syz.2.4759" path="/file0" dev="autofs" ino=54715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 724.607156][ T28] audit: type=1400 audit(807.778:1991): avc: denied { remount } for pid=20853 comm="syz.2.4759" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 724.703199][T20864] loop1: detected capacity change from 0 to 2048 [ 724.724331][T20864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.737762][ T28] audit: type=1400 audit(807.948:1992): avc: denied { write } for pid=20863 comm="syz.1.4766" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 724.811765][ T28] audit: type=1400 audit(808.018:1993): avc: denied { execute } for pid=20863 comm="syz.1.4766" path="/24/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 724.901757][T20863] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 724.918547][T20863] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 224 with error 28 [ 724.948479][T20863] EXT4-fs (loop1): This should not happen!! Data will be lost [ 724.948479][T20863] [ 724.958701][T20863] EXT4-fs (loop1): Total free blocks count 0 [ 724.964908][T20863] EXT4-fs (loop1): Free/Dirty block details [ 724.973186][T20863] EXT4-fs (loop1): free_blocks=4096 [ 724.979815][T20863] EXT4-fs (loop1): dirty_blocks=512 [ 724.985263][T20863] EXT4-fs (loop1): Block reservation details [ 724.991816][T20863] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 725.109390][T14218] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 224 with max blocks 258 with error 28 [ 725.124352][T20338] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 725.735468][T20904] netlink: 'syz.7.4777': attribute type 5 has an invalid length. [ 726.113408][T20906] loop7: detected capacity change from 0 to 2048 [ 726.216068][T20906] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.406753][T15745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.531032][T20947] syzkaller0: create flow: hash 3417712328 index 1 [ 727.546975][T20945] syzkaller0: delete flow: hash 3417712328 index 1 [ 727.850998][T20961] loop7: detected capacity change from 0 to 256 [ 727.877185][T20961] vfat: Unknown parameter 'gi1/ô-å«IdéîÝã!”' [ 728.062202][T20967] syz.6.4801 (20967) used greatest stack depth: 8248 bytes left [ 728.545588][T20974] loop6: detected capacity change from 0 to 1024 [ 728.563876][T20974] EXT4-fs: Ignoring removed bh option [ 728.687839][T20974] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.788399][T20979] loop2: detected capacity change from 0 to 512 [ 728.850232][T20979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.901805][ T28] audit: type=1400 audit(812.108:1994): avc: denied { write } for pid=20977 comm="syz.2.4806" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 728.994591][T20979] EXT4-fs (loop2): shut down requested (0) [ 729.027529][T18901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.144008][ T28] audit: type=1400 audit(812.348:1995): avc: denied { name_bind } for pid=20994 comm="syz.8.4809" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 729.211061][T14226] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 729.245666][T14226] Quota error (device loop2): write_blk: dquota write failed [ 729.260561][T14226] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 729.282246][T14226] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 729.305362][T14226] Quota error (device loop2): write_blk: dquota write failed [ 729.323290][T14226] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 729.343766][T14226] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 729.364310][T14226] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 729.516057][T21008] loop2: detected capacity change from 0 to 8192 [ 729.915657][T14427] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.028964][T21013] SELinux: ebitmap start bit (1157628288) is beyond the end of the bitmap (1088) [ 730.038563][T21013] SELinux: failed to load policy [ 732.006297][T20990] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 732.015958][T21001] netlink: 'syz.1.4811': attribute type 1 has an invalid length. [ 732.024105][T21001] netlink: 'syz.1.4811': attribute type 2 has an invalid length. [ 732.100078][T21022] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4819'. [ 732.122273][T21022] netlink: 176 bytes leftover after parsing attributes in process `syz.7.4819'. [ 732.179224][T21022] netlink: 'syz.7.4819': attribute type 4 has an invalid length. [ 733.196783][T21042] netlink: 'syz.2.4823': attribute type 5 has an invalid length. [ 735.509844][T21041] loop1: detected capacity change from 0 to 1024 [ 735.521639][T21041] EXT4-fs: Ignoring removed bh option [ 735.717346][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 736.343429][T21042] loop2: detected capacity change from 0 to 2048 [ 736.642211][T21060] netlink: 9 bytes leftover after parsing attributes in process `syz.8.4832'. [ 737.217312][ T28] audit: type=1326 audit(819.828:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21055 comm="syz.6.4831" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3804ce59 code=0x7ffc0000 [ 737.272828][T21041] EXT4-fs warning (device loop1): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop1. [ 737.284552][T21042] EXT4-fs warning (device loop2): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop2. [ 737.305418][ T28] audit: type=1326 audit(819.828:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21055 comm="syz.6.4831" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3804ce59 code=0x7ffc0000 [ 737.335899][T21060] netlink: 9 bytes leftover after parsing attributes in process `syz.8.4832'. [ 737.351121][ T28] audit: type=1326 audit(819.828:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21055 comm="syz.6.4831" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3804ce59 code=0x7ffc0000 [ 737.425359][ T28] audit: type=1326 audit(819.828:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21055 comm="syz.6.4831" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f8c3804ce59 code=0x7ffc0000 [ 737.466023][ T28] audit: type=1326 audit(819.828:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21055 comm="syz.6.4831" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3804ce59 code=0x7ffc0000 [ 737.513057][ T28] audit: type=1326 audit(819.838:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21055 comm="syz.6.4831" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3804ce59 code=0x7ffc0000 [ 737.551025][ T28] audit: type=1326 audit(819.838:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21055 comm="syz.6.4831" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3804ce59 code=0x7ffc0000 [ 737.628167][ T28] audit: type=1326 audit(819.838:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21055 comm="syz.6.4831" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8c3804ce59 code=0x7ffc0000 [ 737.686826][T21083] netlink: 176 bytes leftover after parsing attributes in process `syz.8.4836'. [ 737.701527][ T28] audit: type=1326 audit(819.838:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21055 comm="syz.6.4831" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3804ce59 code=0x7ffc0000 [ 737.735472][T21073] netlink: 'syz.8.4836': attribute type 4 has an invalid length. [ 737.770981][ T28] audit: type=1326 audit(819.838:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21055 comm="syz.6.4831" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8c3804ce59 code=0x7ffc0000 [ 737.866869][ T9] hid_parser_main: 7 callbacks suppressed [ 737.866889][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 737.900571][ T9] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 738.455063][T21128] loop7: detected capacity change from 0 to 128 [ 738.478845][T21128] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 738.633308][T15745] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 738.723235][T21136] netlink: 'syz.1.4856': attribute type 5 has an invalid length. [ 739.117149][T21136] loop1: detected capacity change from 0 to 2048 [ 739.236990][T21136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 739.358042][T21135] loop7: detected capacity change from 0 to 2048 [ 739.448141][T21135] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 739.602818][T21134] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 739.683152][T21134] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 739.856313][T21134] EXT4-fs (loop7): This should not happen!! Data will be lost [ 739.856313][T21134] [ 739.929679][T21134] EXT4-fs (loop7): Total free blocks count 0 [ 740.056875][T21134] EXT4-fs (loop7): Free/Dirty block details [ 740.074101][T21134] EXT4-fs (loop7): free_blocks=4096 [ 740.093945][T21134] EXT4-fs (loop7): dirty_blocks=512 [ 740.113146][T21134] EXT4-fs (loop7): Block reservation details [ 740.135766][T21134] EXT4-fs (loop7): i_reserved_data_blocks=32 [ 740.156770][T21130] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 740.431390][T20338] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.516839][ T414] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 128 with max blocks 354 with error 28 [ 740.554400][T15745] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 740.886597][T21174] loop1: detected capacity change from 0 to 128 [ 741.200129][T21208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4884'. [ 741.228234][T21208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4884'. [ 741.466357][T21226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4892'. [ 741.848008][T21234] loop1: detected capacity change from 0 to 1024 [ 741.867441][T21234] EXT4-fs: Ignoring removed bh option [ 742.536774][T21234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.985378][T21252] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 743.337087][T20338] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.576888][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 743.576906][ T28] audit: type=1400 audit(826.778:2038): avc: denied { nlmsg_read } for pid=21267 comm="syz.8.4907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 743.800427][T21272] netlink: 'syz.7.4908': attribute type 5 has an invalid length. [ 744.225066][T21272] loop7: detected capacity change from 0 to 2048 [ 744.309152][T21272] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 744.868096][T21288] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4914'. [ 745.395258][T21298] netlink: 'syz.2.4918': attribute type 39 has an invalid length. [ 745.450337][T15745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.600329][T21306] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4921'. [ 745.630722][T21306] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4921'. [ 745.947926][ T333] bond0: (slave bond_slave_0): interface is now down [ 745.973975][ T333] bond0: (slave bond_slave_1): interface is now down [ 746.006397][ T333] bond0: now running without any active interface! [ 746.699574][ T28] audit: type=1400 audit(829.908:2039): avc: denied { listen } for pid=21340 comm="syz.7.4936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 746.863523][ T28] audit: type=1400 audit(830.068:2040): avc: denied { connect } for pid=21342 comm="syz.7.4937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 746.914289][ T28] audit: type=1400 audit(830.098:2041): avc: denied { read } for pid=21342 comm="syz.7.4937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 746.975202][ T28] audit: type=1400 audit(830.168:2042): avc: denied { bind } for pid=21350 comm="syz.1.4941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 747.135118][T21376] loop6: detected capacity change from 0 to 512 [ 747.146003][T21374] loop7: detected capacity change from 0 to 128 [ 747.153961][T21376] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.313672][T14427] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.567240][T21395] netlink: 'syz.6.4953': attribute type 5 has an invalid length. [ 747.993504][T21395] loop6: detected capacity change from 0 to 2048 [ 748.075578][T21395] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 748.323757][T21402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4957'. [ 748.350054][T21404] netlink: 'syz.8.4958': attribute type 11 has an invalid length. [ 748.384615][T21402] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4957'. [ 748.531651][ T28] audit: type=1400 audit(831.738:2043): avc: denied { execmod } for pid=21418 comm="syz.8.4961" path="/308/file0" dev="tmpfs" ino=1599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 748.563582][T21402] netlink: 'syz.1.4957': attribute type 4 has an invalid length. [ 748.673961][T21428] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.213731][T21434] netlink: 'syz.1.4967': attribute type 5 has an invalid length. [ 749.846936][T21434] loop1: detected capacity change from 0 to 2048 [ 749.880292][T21399] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 749.924822][T21434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 750.200536][T21441] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4970'. [ 750.212989][T21444] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4972'. [ 750.241267][T21441] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4970'. [ 750.256618][T14427] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.282966][T21444] bond_slave_0: entered promiscuous mode [ 750.314934][T21444] bond_slave_0: entered allmulticast mode [ 750.383779][T21459] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 750.457967][T21464] loop2: detected capacity change from 0 to 512 [ 750.496388][T21464] EXT4-fs: Ignoring removed nobh option [ 750.534323][T21461] netlink: 176 bytes leftover after parsing attributes in process `syz.8.4977'. [ 750.568363][T21464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.648951][T21479] netlink: 'syz.8.4977': attribute type 4 has an invalid length. [ 751.397435][T21489] netlink: 'syz.8.4980': attribute type 5 has an invalid length. [ 751.622912][ T28] audit: type=1400 audit(833.948:2044): avc: denied { write } for pid=21463 comm="syz.2.4976" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 752.848616][T20338] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.664202][T18901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.731207][ T28] audit: type=1400 audit(836.938:2045): avc: denied { write } for pid=21478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.911957][T21515] dns_resolver: Unsupported server list version (0) [ 753.973429][ T28] audit: type=1400 audit(837.168:2046): avc: denied { write } for pid=21516 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 754.046308][T21527] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4989'. [ 754.115296][ T28] audit: type=1326 audit(837.308:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21529 comm="syz.7.4990" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1117d9ce59 code=0x7ffc0000 [ 754.164537][T21536] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 754.175909][ T28] audit: type=1326 audit(837.348:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21529 comm="syz.7.4990" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1117d9ce59 code=0x7ffc0000 [ 754.230231][T21530] IPVS: Scheduler module ip_vs_ not found [ 754.265294][ T28] audit: type=1326 audit(837.348:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21529 comm="syz.7.4990" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1117d9ce59 code=0x7ffc0000 [ 754.270538][T21550] loop6: detected capacity change from 0 to 512 [ 754.317795][ T28] audit: type=1326 audit(837.348:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21529 comm="syz.7.4990" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1117d9ce59 code=0x7ffc0000 [ 754.348750][ T28] audit: type=1326 audit(837.358:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21529 comm="syz.7.4990" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1117d9ce59 code=0x7ffc0000 [ 754.388649][T21550] EXT4-fs: Ignoring removed nobh option [ 754.440593][ T28] audit: type=1326 audit(837.358:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21529 comm="syz.7.4990" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1117d9ce59 code=0x7ffc0000 [ 754.495311][ T28] audit: type=1326 audit(837.378:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21529 comm="syz.7.4990" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1117d9ce59 code=0x7ffc0000 [ 754.552516][T21550] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.640862][T21573] netlink: 'syz.7.4996': attribute type 5 has an invalid length. [ 755.043273][T21573] loop7: detected capacity change from 0 to 2048 [ 755.157195][T21573] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 755.715829][T14427] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.407842][T15745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.422135][T21599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5007'. [ 756.568290][T21603] netlink: 'syz.7.5008': attribute type 5 has an invalid length. [ 756.658513][T21599] netlink: 'syz.1.5007': attribute type 4 has an invalid length. [ 756.947943][T21617] loop1: detected capacity change from 0 to 512 [ 757.063976][T21603] loop7: detected capacity change from 0 to 2048 [ 757.155696][T21603] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.186242][T21622] loop2: detected capacity change from 0 to 1024 [ 757.238015][T21622] EXT4-fs: Ignoring removed orlov option [ 757.254450][T21622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.329069][T15745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.448302][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 757.448319][ T28] audit: type=1400 audit(840.658:2062): avc: denied { mount } for pid=21634 comm="syz.7.5019" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 758.057752][T21667] netlink: 'syz.8.5026': attribute type 5 has an invalid length. [ 758.901144][T18901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.334561][T21683] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5032'. [ 760.379042][T21681] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5030'. [ 760.408011][T21681] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5030'. [ 760.490037][T21696] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 760.732598][T21713] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5045'. [ 760.751941][T21708] loop7: detected capacity change from 0 to 136 [ 760.792303][T21708] Attempt to read inode for relocated directory [ 761.244476][T21737] netlink: 'syz.8.5052': attribute type 5 has an invalid length. [ 761.975932][T21743] syzkaller0: entered promiscuous mode [ 762.005968][T21743] syzkaller0: entered allmulticast mode [ 762.323402][ T28] audit: type=1400 audit(845.528:2063): avc: denied { ioctl } for pid=21758 comm="syz.6.5059" path="socket:[58316]" dev="sockfs" ino=58316 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 762.711517][T21784] loop6: detected capacity change from 0 to 1024 [ 762.737361][T21784] EXT4-fs: Ignoring removed orlov option [ 762.914073][T21784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 762.963634][T21794] syzkaller0: entered promiscuous mode [ 762.974714][T21794] syzkaller0: entered allmulticast mode [ 762.992610][T21794] syzkaller0: tun_net_xmit 14 [ 763.128465][ T414] syzkaller0: tun_net_xmit 70 [ 763.299006][T21800] syzkaller0: entered promiscuous mode [ 763.307806][T21800] syzkaller0: entered allmulticast mode [ 763.548596][T14427] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.950773][T21828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5080'. [ 764.101480][T21828] netlink: 'syz.1.5080': attribute type 4 has an invalid length. [ 764.758792][T21854] loop7: detected capacity change from 0 to 1024 [ 764.792167][T21854] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 764.795139][T21832] loop1: detected capacity change from 0 to 1024 [ 764.918409][T21832] EXT4-fs: Ignoring removed mblk_io_submit option [ 764.945363][T15745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 765.062515][T21832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 765.186625][T21863] loop7: detected capacity change from 0 to 512 [ 765.242149][ T28] audit: type=1400 audit(848.438:2064): avc: denied { remount } for pid=21831 comm="syz.1.5081" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 765.278774][T21832] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 765.278774][T21832] [ 765.298309][T21863] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.5088: corrupted inode contents [ 765.362192][T21863] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 765.365528][T21863] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #16: comm syz.7.5088: mark_inode_dirty error [ 765.374758][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 765.374781][ C1] EXT4-fs (loop7): initial error at time 848: ext4_do_update_inode:5690: inode 16 [ 765.374817][ C1] EXT4-fs (loop7): last error at time 848: ext4_do_update_inode:5690: inode 16 [ 765.430518][T20338] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.502572][ T28] audit: type=1326 audit(848.708:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21866 comm="syz.1.5089" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7487ce59 code=0x7ffc0000 [ 765.534273][T21863] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 765.535896][T21863] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.5088: corrupted inode contents [ 765.574679][T21863] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 765.576352][T21863] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.5088: mark_inode_dirty error [ 765.598571][ T28] audit: type=1326 audit(848.708:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21866 comm="syz.1.5089" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7487ce59 code=0x7ffc0000 [ 765.641094][T21863] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 765.641739][T21863] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.5088: corrupted inode contents [ 765.665483][ T28] audit: type=1326 audit(848.708:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21866 comm="syz.1.5089" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7487ce59 code=0x7ffc0000 [ 765.696135][T21863] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 765.696284][ T28] audit: type=1326 audit(848.708:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21866 comm="syz.1.5089" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7487ce59 code=0x7ffc0000 [ 765.731971][T21863] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 765.754713][T21863] loop7: lost filesystem error report for type 5 error -117 [ 765.756419][T21863] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.5088: corrupted inode contents [ 765.779709][T21863] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 765.779837][ T28] audit: type=1326 audit(848.708:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21866 comm="syz.1.5089" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7487ce59 code=0x7ffc0000 [ 765.814536][T21863] EXT4-fs error (device loop7): ext4_truncate:4690: inode #16: comm syz.7.5088: mark_inode_dirty error [ 765.825933][T21863] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 765.827185][ T28] audit: type=1326 audit(848.708:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21866 comm="syz.1.5089" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d7487ce59 code=0x7ffc0000 [ 765.861600][T21863] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 765.870568][T21863] loop7: lost filesystem error report for type 5 error -117 [ 765.870751][ T28] audit: type=1326 audit(848.708:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21866 comm="syz.1.5089" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7487ce59 code=0x7ffc0000 [ 765.917698][T21863] EXT4-fs (loop7): 1 truncate cleaned up [ 765.923890][T21863] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.937002][ T28] audit: type=1326 audit(848.708:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21866 comm="syz.1.5089" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7487ce59 code=0x7ffc0000 [ 765.944631][T14226] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 765.981896][T14226] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:16: Failed to release dquot type 1 [ 766.000925][T15745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.079328][T21879] loop1: detected capacity change from 0 to 136 [ 766.141000][T21879] Attempt to read inode for relocated directory [ 766.281136][T21891] syzkaller0: entered promiscuous mode [ 766.322680][T21891] syzkaller0: entered allmulticast mode [ 766.786059][T21919] raw_sendmsg: syz.2.5104 forgot to set AF_INET. Fix it! [ 767.341955][T21955] netlink: 'syz.1.5112': attribute type 1 has an invalid length. [ 767.404379][T21955] bond1: (slave gretap1): making interface the new active one [ 767.429306][T21955] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 767.665091][T21965] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5115'. [ 767.809652][T21967] loop6: detected capacity change from 0 to 4096 [ 767.839408][T21967] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.983689][T14427] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.999553][T21978] tipc: Failed to remove unknown binding: 66,0,0/0:827357321/827357323 [ 768.028855][T21978] tipc: Failed to remove unknown binding: 66,0,0/0:827357321/827357322 [ 768.043239][T14427] ================================================================== [ 768.044582][T21978] tipc: Failed to remove unknown binding: 66,0,0/0:827357321/827357323 [ 768.051351][T14427] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 768.067179][T14427] [ 768.069418][T21978] tipc: Failed to remove unknown binding: 66,0,0/0:827357321/827357322 [ 768.069518][T14427] read-write to 0xffff888237d266e8 of 1 bytes by task 21911 on cpu 1: [ 768.085933][T14427] folio_add_lru+0xaa/0x1f0 [ 768.090473][T14427] shmem_get_folio_gfp+0x7b0/0xd60 [ 768.095611][T14427] shmem_write_begin+0xfc/0x1f0 [ 768.100488][T14427] generic_perform_write+0x183/0x490 [ 768.105796][T14427] shmem_file_write_iter+0xc5/0xf0 [ 768.110925][T14427] __kernel_write_iter+0x319/0x590 [ 768.116069][T14427] dump_user_range+0xa73/0xd00 [ 768.120863][T14427] elf_core_dump+0x21a2/0x2330 [ 768.125649][T14427] coredump_write+0xabd/0xdb0 [ 768.130342][T14427] vfs_coredump+0x26dd/0x31e0 [ 768.135044][T14427] get_signal+0xd5c/0xf20 [ 768.139399][T14427] arch_do_signal_or_restart+0x96/0x480 [ 768.144973][T14427] irqentry_exit+0x145/0x5d0 [ 768.149581][T14427] asm_exc_page_fault+0x26/0x30 [ 768.154461][T14427] [ 768.156820][T14427] read to 0xffff888237d266e8 of 1 bytes by task 14427 on cpu 0: [ 768.164456][T14427] __lru_add_drain_all+0x17e/0x450 [ 768.169579][T14427] lru_add_drain_all+0x10/0x20 [ 768.174373][T14427] invalidate_bdev+0x47/0x70 [ 768.178992][T14427] ext4_put_super+0x610/0x7b0 [ 768.183687][T14427] generic_shutdown_super+0xee/0x220 [ 768.188988][T14427] kill_block_super+0x2a/0x70 [ 768.193686][T14427] ext4_kill_sb+0x42/0x80 [ 768.198041][T14427] deactivate_locked_super+0x75/0x1c0 [ 768.203431][T14427] deactivate_super+0x97/0xa0 [ 768.208125][T14427] cleanup_mnt+0x2bb/0x330 [ 768.212558][T14427] __cleanup_mnt+0x19/0x20 [ 768.216987][T14427] task_work_run+0x130/0x1a0 [ 768.221591][T14427] exit_to_user_mode_loop+0x211/0x820 [ 768.226979][T14427] do_syscall_64+0x232/0x3b0 [ 768.231605][T14427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.237514][T14427] [ 768.239842][T14427] value changed: 0x12 -> 0x15 [ 768.244525][T14427] [ 768.246854][T14427] Reported by Kernel Concurrency Sanitizer on: [ 768.253036][T14427] CPU: 0 UID: 0 PID: 14427 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 768.262599][T14427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 768.272665][T14427] ================================================================== [ 768.303240][T21965] netlink: 'syz.7.5115': attribute type 4 has an invalid length.