last executing test programs: 3m36.290250787s ago: executing program 3 (id=2854): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff0307680093f04604264ea76e", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 3m36.131921422s ago: executing program 3 (id=2856): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x2, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0x2, 0x5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0xffffffffffffff78, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000000000000010000800000000000000000000000005ef100000000000000000000000000000200000000000000fdffffffffffffff0000000000000000000000000000000005000000000000000c0900000000000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d33c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 3m36.025125696s ago: executing program 3 (id=2858): socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) 3m35.909296999s ago: executing program 3 (id=2859): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240)={[{@dioread_nolock}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4b2, &(0x7f0000000540)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x25080, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0x56) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0x19, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2833b738e062a00000000f730b7ecb98454c0b900", [0x204]}) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) 3m34.898257052s ago: executing program 3 (id=2868): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x6}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24000014) perf_event_open(&(0x7f00000005c0)={0x2, 0xcc, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x9, 0x5, 0x8, 0x401, 0x4, r2}, 0x20) 3m34.091903987s ago: executing program 3 (id=2878): socket$inet_tcp(0x2, 0x1, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) 3m34.055321248s ago: executing program 32 (id=2878): socket$inet_tcp(0x2, 0x1, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) 5.567232965s ago: executing program 2 (id=4480): keyctl$session_to_parent(0x12) 5.527727126s ago: executing program 2 (id=4482): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4.784042069s ago: executing program 5 (id=4489): syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x141c42) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x4eda0a90bb2acc2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 2.500991141s ago: executing program 5 (id=4493): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa9, 0xa, &(0x7f0000000280)) r0 = epoll_create1(0x80000) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) sendmsg$nl_generic(r1, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x28, 0x23, 0x2, 0x70bd27, 0x25dfdbfb, {0x1b}, [@typed={0x8, 0x35, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0xef}, @nested={0x8, 0xab, 0x0, 0x1, [@nested={0x4, 0x30}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) getpid() fcntl$notify(0xffffffffffffffff, 0x402, 0x7) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) dup(r3) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) 2.286600717s ago: executing program 0 (id=4494): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x1) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.285207228s ago: executing program 2 (id=4505): keyctl$join(0x1, 0x0) 2.261245578s ago: executing program 5 (id=4495): r0 = socket(0x11, 0x2, 0x1) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200050000efdf2254f2", 0xe) socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x3c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfef8}, 0x94) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x204, 0x0, 0x101, 0x0, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x100000200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x6, &(0x7f0000003b80)=0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x795e, r2, 0x0}]) 2.22576363s ago: executing program 2 (id=4496): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r1) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r5, 0x400, 0x1) r6 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendto$packet(r2, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlockall() 1.328785658s ago: executing program 2 (id=4507): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x100000, 0x0, 0xa, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) setpriority(0x0, 0x1, 0xa7a8) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x1) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$9p_fd(0x0, 0x0, 0x0, 0x1004094, &(0x7f0000000100)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.326486818s ago: executing program 0 (id=4517): io_setup(0x8001, &(0x7f0000000340)=0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') socket$inet(0x2, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x85, 0x0, &(0x7f0000000100)) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x1b0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x2, 0x1e00, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) io_submit(r0, 0x20000000000000ee, &(0x7f0000000340)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.047789307s ago: executing program 0 (id=4508): keyctl$join(0x1, 0x0) 965.038899ms ago: executing program 0 (id=4509): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) preadv(r0, &(0x7f00000025c0)=[{&(0x7f0000000040)=""/169, 0xa9}, {&(0x7f0000000100)=""/50, 0x32}, {0x0}, {&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000000840)=""/137, 0x89}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/235, 0xeb}, {0x0}, {&(0x7f00000024c0)=""/230, 0xe6}], 0x9, 0x1, 0x401) r1 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) r5 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000240)={0xa0000001}) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) file_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x18008, 0x4, 0x10001, 0x0, 0xfffffff2}, 0x18, 0x1000) 782.388905ms ago: executing program 2 (id=4511): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x800, 0x3}}, 0x10) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) open(0x0, 0x4827e, 0x195) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file2\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) syz_open_procfs(0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x1c00, 0xda3, 0x7fff, 0x5, 0x11}) 776.485335ms ago: executing program 1 (id=4512): perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) fsopen(0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, 0x0) ioctl$SG_BLKTRACETEARDOWN(r0, 0x2205, 0x0) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xfc77a000) r1 = fsopen(&(0x7f0000000340)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r3, 0x2, 0x0) getdents(r3, 0x0, 0x58) 713.287958ms ago: executing program 1 (id=4513): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0, 0x0) msgget$private(0x0, 0x428) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000005480), 0xffffffffffffffff, r3}}, 0x18) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) close(r0) 647.5019ms ago: executing program 4 (id=4514): openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) unshare(0x28020500) sync() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) close(0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x10, r0}, 0x18) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) socket$kcm(0xa, 0x2, 0x0) 598.956021ms ago: executing program 1 (id=4515): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x3}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000005c0)="23d4f0db956c", 0x6}], 0x1, 0x0, 0x0, 0x8008011}, 0x20048851) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x4000000000, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) io_pgetevents(0x0, 0xa, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, &(0x7f00000055c0)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) socket$netlink(0x10, 0x3, 0x0) 410.698077ms ago: executing program 1 (id=4516): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x1) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 410.332527ms ago: executing program 4 (id=4518): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x24005830) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}, 0x2}}}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r1, 0x9, 0x66b}, &(0x7f0000000340)=0xc) close(0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fstatfs(r2, &(0x7f0000000380)=""/157) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$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") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) keyctl$session_to_parent(0x12) 194.256034ms ago: executing program 4 (id=4519): read$char_usb(0xffffffffffffffff, &(0x7f00000002c0)=""/177, 0xb1) r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), &(0x7f0000000540)={0x0, 0xfb, 0xb6, 0x3, 0x7, "b91e7a9cecf959c816f8505075607b2c", "2134db2369d96ce837e7fb5aea29a7fc2cb9e521694adde7c56b0d51aa33a22072bf0d4dfcb453f5149eb04d329641cb5a28c570e73520fb414ec5f825d6bce855d5666357dc7ebb86c78a0b891ff51c81377566d29d130b0297b0e39652a9474d86ea36b2c849872fc5c5fe9efc3009999e1753a00862a1550ef7c1c7e67c7a47d88aab2e3e81f5369eb979fb14c815df1a0f0efca6f09c448f8487f69563793e"}, 0xb6, 0x1) r1 = gettid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3008004500001c0067000000119078ffffffff0000000000004e220008907867fcbd21858ce0db44820be2916714514c82c552f072"], 0x0) r2 = socket(0x1d, 0x2, 0x6) clock_gettime(0x0, &(0x7f0000000b00)) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x6a, 0x3, 0xfffffff4, 0xb5a3664e6e5b4adc) r3 = getpgid(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) sendmsg$nl_netfilter(r2, &(0x7f0000001f00)={&(0x7f0000000280), 0xc, &(0x7f0000001ec0)={&(0x7f0000001f40)=ANY=[@ANYRES32=r0, @ANYBLOB="2a1b7ac53879e7bc53f5c0f0fcb1a6173451910f7fea709b431be0d935922a58eb32abcc311937ed25f8ca37ce11f8853fb2fba1f8fb00a3c2c9ecbfaa89e53df8cdccc60873b74e05569ade6d12b20a7fdaffa67af4295a35c6bcf0de525b8d0f8a01016c39aeb8653896b6bd4d573129b4997d2836b898ec3acd782b6856220c0400b8804d41483d2b5b21c0dd39a4f40932063624ef0f35235c0f79d60f75db993ffd1ed97497da6939256c975a60df2280a278ba5b33408a039d53634b3c7b3be314d856bbf19f0178bf7b7c758857db91c6157e1adc0d3587a853d108ee67f50eb0c2a0a0e3c9ccad99548beb850b7779d6cf84911d358ef05bc6d5f03e21d6e5e7fb3f93c64fc23f28655e2eae16ca758eea89bfdd3e8f9c7dc786e56005bbd5bdac958bb1f38b1ce1ce8c235d2ae6d2dbd20b993d24580f03e3247a36796038c4ed332bc579ef8b7effe0a42f2ef613700c04619e7d707525827bd44b3c426c552dbc5fff8ff932d191e701b4881487e0d60557874c6f8de0446e8fd1b508f36a65b5206c75e871a70812e13a6f83d611c57758d886172b3cf5647c7b81eb7e07a9751e5e8d3f075188072ac25b47936b36cda7911c6af39e612f8ef6752d984fc96e022a4e3516951a81fa5b2d539cfe7ddd227dbd13351d65956a46bdaad5e6e526ff84f3b788e8633de73c2bdbcec86fc2f9b52e3adb799c3df45b4a3047fae94c826436d221891616762f6fc02314a61c3cd41dbf127727ff82fb9dbfa8c546f37ccf9c3371c0490a1be7a13d8681929853f41d2a2165656d9458e2987a10069024d3e75ee7f5342afee163e067f8633f61acde73c0d0a1e0d50e48c29e14e089ee0cb941635409dd679a5887d8889119c6e658c95c1fd0c5809ac692d1a74f824c1250aa312d395a9a1a32bcd5b973d96d6f72cc824f151bc4ecb949837d8bb9a1b20d4cd31c1a48bf0a8b0bec7f74e224d7c3c6d6bd0ed55f5beb10e110946d853f7d57376ccaca85b1028d56e39eb1581e58c67be501084dbe587b94e43ba838433e9a4dda126fc7717ce299e41b08830efecac7fdc3fd7ce55b055066a2d9fb1e21c6943c58bebe96d4058b7a3b734f1fb79a1d5d0451fa8b07c57c15b4a795fc5099349ace039148111bda85d37b7b24236d3b60283f18cbaa41de694b5f45ed49a815a671dce66a27662a974694818099bd4f26160b10e5dca2732e48257e89113da16fe76b5663f9d2817b526f266bd44026c359c5b22447ee138a7c1c35a8b4e5edba49b6985c6dd12b0ecca79150f6742567a699935e0765e79b336364eb6f5270b27e0c2e35f8bdaa21fafc2ec63488201f595db51437476bec0f6d15f669aac88a45235d3f31f167685c03fa6684ebe70821a80474b9f5f8bc99bf1dce06c96e84f7e342bc422e8c5a5c9381bf5b6ad6433e8eea485dfbea435a3966104e051c4f04edbfd82cee718633496a18891565f66be7b533c46c5554e93d9e9e55ce3038dfffad27dea4c3f9f3d725520f85b79a2f39494ef3e601bfabd3006edcac559f9d0f7b44a778094e2c441574272522b1e46538319b6e6114e4c8f8b752bb46653d8d3a7fa600b71a4a84fa9b4823b5c96f6966f322a198c76ecf3fc29f450070ce75ad5462cd6fa622d01153d2d64b5227de0e7af4e7e2319ff07b79afdd695992a47bf63f6f5d4bda950f435f2f231192531b77f797d28aabe809e80798dd2afdc1f80d9c10d0fc05d5536dc0c5c99850c6be24d20398b7eaa9164b11b6182163bcc336308faf6c95072f8f9b8919839fbccffc06c5ac1813fd458e0c2f86f18bfd9975544a7a5e267e112ad724c22a256448aae80eff05f3b989e770c0812fc0f098b8c11a50f406425cf665d0b331412dbe05a37389fea22c1b63ed5d60c909f6abc6318dcb1dc72ee2fe39a3a9199c19f4d649f7dfac282863363abc617b70a2fc0c3727e99c8734e8b05270194bb73718414422166cc1e0804a357dbd84cc00b2780ffc276b43eaf46330dba528afe74157964137bb0667bd5afbe87cbc2e0e4936e11f7e29c620711436ff048064a28a5898b29da671591e2181019e0a7ce9b71449781225fad254dd282e5b36f0afe53ffbb09a4c183b7e0753ae7f134fe8222bf6fe12645f7bfa0cbf361dbfbbf61bcb9c182ae3cffaf39ee20c3b9790cef1c8bab0e7a61442c37a172c4fe04e4012d1bdbf368acb3b757ad49fae084e82a47a9c50765c09ee200ed257c9a3d8c56552aebad7eab3241163c0d355aa1583e900342fcde59123eb77cdc4a09e58f33f09c11cd025572e3f300355f2ae065bf221c5bb7e12f59241ed4c9fb3cc6226d6c0798c7cd3da26d23d7e82a8f84b645ff7e6081b0944e63390d0ec17edbe164fa65f11bcd23e4459d00f867a42382a2be8d0a09064ff1bdce57f1e9961226640e4a5423363f1bed8c3d07c65410d9f21305850cde82a6bf5674436ca0d74e3dddab6e14081f43995f423289e29ac9d04480c6b56bc1c298e50de9e00a7f15e621712d830b155daf4aaea2990b06336ec5a3afa630578df3e52ce051eceebab45e95f8c3b938f1e2acb12f4574ca1464eafe18dbb3c601ea935409e38fecf0da6767d340860051f3931c4eb782c609bfc96e25d266cf1e2b3acecd957f466e47ff0c6e047e0e3d6b1f7a754b62c9cf16993533c7af7a468581754c68017124f06db2fc4c071cc7f7ab1aecdcf74bdfbde97dbca818215361c370e31b4e925096a026b6f06bd35604a20ed30b521e369dc80332a2e830121429274b89f165c2c0175e0af4cb88c635216a2e0990a031f73770b8fdfbb97da6e2a33e9c81c7926e166526ebd8ec8aab62be402ba970e265cecd7dd4d846be99cc5cfc9514d10edf49a8a44265d24da848a385b5b2fb53a9443379102f6d1c6ef2aa9eea9f552ee8e850dd7a0d55f9700bf536d109ab7a3bf8f6271b13565e4fb53f96d2b47fb87864a5f7bd9d477de26fce3bfb287e6f1389c758f9967dc002bf968e2aa33237b6698ae0d41f667e48195b82871e8c258ac3aa0ae875c23a750c924f634046cafc2265289c6453219e32cb603cfcf9ab6c9a22ba621c960ec8d4c087771a739224e8c51b2b434a62699dd0b63dcc96d0f0a9e32395598e020d717e58dce0d1523729e9d045086b1415146e76766a6724e4ec6305fc1424acd519eb655adfc30d9e0ed048762bae16917edaddbe11381d91dc76e6e780175fb3b8617fbef78ad5dccbcfe93b08cc8c4b9ab4c490c89783cd6c43a1aa8267800bf03a8d2bc7e96f51e3a866af4f3b5aa89bfa70f30b694741ee7d6dabfcb4055fe45f51e7a847e947d7571a3f3a66ffad81f7c9797d7e400d092b5b637f6fe062e049ae466a3e549094b75a541ee41d0ab1523f9920e6a0fd5a0931212bad5a5374f9bd6f65d9308410bc6db41167a4d7263bd7b42d64bbb5ea3b40ec62664db4f23cbee019edc402d47d7330627e9991e523881a4d24335b930ea781fa6175ad386b7625743adedffd07f791a386f92187f6b9bb96bff7eb6c6db17fbf5ee0958a50c687e79f578297e8bf1d18ec1c47eff6c85c96af80e71bbb7850978f1fea1261f61c5071decdc8937752cad61bf1c28b6cd1dd3e28ade00e72d16b1ad0b562e64eb6068b679b2b67386d2348acb1661e441ddc09d0a6d2ac965268cce24d4bda8702caadd76da715693698876f680e247b0b589abdb815453bf275e8f0bc0a7e8cde5a8c4d89a5ad7db135bd082906760f5141cde7a8c40dd779c12b530fb5404cceee5fcf895e27833e87251d6658abcab71ae005398a47d7811a6fb76a06cd0e9c33e5dd105be1f8de33d058bd832e37e76e89015dda3d6709ae22714938734e2b4c74da9ce673d2b6e878b98f08cae284a1a9c5a27a07e06d63de0c05b3c75a0a0261ac2a50950a15d2e0fd2360fa8dc37192fbe1b5524adbb317a4f118776de2d028d469bc36e6cbab09e8adbac89fb2a3216278a0ec28c0e0cce39d701b685db32f655297b0437b3c8f3fe513e95cb91d2b70540e21635c81d02db6acdb6913e0d9a7df771b12b2007f5e61182998a84ad84fb3e49dfce95de83b17d98de372862e677977fe8034bf02248b70cf0f4575de49a9dd4747f028c5b908638391c74aa12fdb513abd16b51bd3ff0a363348383591adf6cbc38fe28c7501b5ba93730f0437dc80a47701e80a1d3951c0468c0a73e2e64ba745684e1433390721749215b319a605348175fdcb3d22ab680c7f11fd7224a617a50e6442dc2e88b63a586de23de66ed7bbf1d508a532319b8b876ece17866591816c8c1095ef502fdaa7a135a5d06f2892bd4a4cb99a24a081bb071384677853b8e13d10a7211930fe13fd81f16f70988dcc57d9fe6b8429c6ff0dab1ad1b0492002da2d24ca45ea71444874ae183ccd4e7c38ae280dad65380fc361c0b39aff7bba41106960c30e35e92a19a608475be0b7bf79e9fd93365fc0b0aedc4777eadffb5f9fb79771cf8505d0ed79651105a47b48c5772f16b7a16dd11b47f277e79d15d397592fc99138fdf60fa338b35ff26c0741f4833630b5ec0dbcbc4d21cc96ecead8c617a7eeaea108580d8883b9688b25464d49af0682b6600d6beda3dcbe52a150dae272e836faced176d05c39562c3381a924da537d5538631bb82e3658d6618c62bbff4027bf6d4bde73685e7fb53cd4ce191d88073930b293800dc62240dfcb85e20d62dbde2fd1b06aeb5b1aa159e69fafec0bc5afcdb3247b676105e19a53efb222ee23c960a9d56b66ba6ef2e3c74095b4d3ade2d74456637a8798f183ed9f40751b48083897db7cfa81bb16b439ce243962c0e91a8c8246f4601cd184a3175a18fb9402e025f163f7cb660c7a8f74cb80ce789221513187967462365b667c13fa8fcb924778facf1d8aa99d9531f87149623973d635b387d6b04950444269de0119a33c1a7536244ba1f155ef1f6446d6b734147f5201eacfdbb98140ee4ea0dd40ddcd578fd8bd1860f3737e754fd518b6307f20508f7d9c2fb948b8b8836edf6dc68c59603fac5c954830e07eb5c47c45dc323350222a1abdc6bdd9701dc54a822a2cfc4a5898b49f4c200c1cfe215a19e1edcb9206568290697ef43615186626542381fb9993432352dafa4f96115dae65928778303b0ce816fb1379a6a0c59f8b5f287d14b58c0d34e33e3d87b3e0f6c65f2bbd0f43d0a362e8276b5ad7552776be7b1bfc02ef723c74ab830eab83dffa91bdfaf7a1ad27ce3029af59cab5f202b106df797e44d4f0aad473741989229f9ef4183c95be8944eaadfea2cb7f7f5b539d7c4e0ad3c777f8ca3e4ffd0450ea63eae6bcbe1f1b9d40e5a6b6d6065bcd14f1f8c712f07456f256c81d65587ebeaee8af8240a4b576d70ac7a5196651b4268ec39942dd8e8bc08abd3bb99f9559d43915bd6168f3823319b6865db32ae6e48a40e8b5e38338ec0416b9ccdbdd489a2a68380c7572f1fd70d70f61098104a0cf3272629fd8bc9cf09d5aef6be37b9c869da3c7c9abf9c4575d0b9561756dd2de65eb98897cad53dfe192b438ccd8bc01bbfd228bbe4e14aeb42f9526bcd4e630dc27eaaeeb54cccec71b46e31ac73471af875363f563d6d88b452189b7a95b3b83666e6c0c2aa1f77a350eae53e4d9f56d42e3f5edc6748873c3f924d13ac836cf952717699009146c12dc2e306865e01fc3327af0990cabd19858f89863ca89ec4ab479751817d05a7247948efdfe7633706d9752aaa268c2ec17e524110627d36e9fdb5e430c190348ee7bafd59a5c425b700316ded002e48b4cd342d164497f49f9036a4971527dfd6d14e73f66368c2ba8919d1489da42c7871da99a901a0325506d68e66072b0ac28273a0035014eb00e824911754573fc3a5d326fc50cc64a005d01ecea430d2187db3db7912300900656402a76d3edb6ed4652f9d5065a54b1c1d7de5a219ce589af189a90883722ba8b086a48f2e3ef816d473e59201b32da76b6c05e266eac92dfef4a30d36bbe635682f74e2b9e1afaae29b30d571a22cee13ac104b21037a4ffeb205685361365da8a51b7647f436803a4fed381dc12b2b4a765348faa7d1c38e33a11c5819df7dc37a541b72a252849a73004cdefa1c53297fd8f25dcec653a74b3051e64791d191038f0fabbdeb86dc70363169a4d2f377b1fa90e42e19f9dbda6bc4b062d5914a0ab2f18094403c8d20c315f0daf1c2ce89f6b51e7b81005dc48834f9c43ca05d44fe13817da1279db608f08aa818d8d0e09a", @ANYRES32=r3, @ANYBLOB="08001000", @ANYRES32=r0, @ANYBLOB="0400238004004a800072fbe5243c776d5b4c9543cbe7d2f4f6fb8e1a55e61c4d15122bd20b2412f47208e8fb62672cad97073193f76a8188e4dcfc4dc06c3e24e75952beffa03f6d9accbfc38c37c2e71357200c3a7b3090c85f2e9c61146754cf9d4a38b8086b9195d6d1d97fcf8c63ce372d9dcb82"], 0x13b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000001c0)={[{@commit={'commit', 0x3d, 0x9}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nodelalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@nobarrier}, {@errors_remount}]}, 0xfd, 0x485, &(0x7f0000000640)="$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") fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='name', &(0x7f0000000400)='ccnA\xf6gT\xe7lo-\x93t\xbc\xa4b\x04\xf65\xd0&\xef\xbd\x96\xc6\xb1\x8a]Wy\x01t\x85\xc0s\xebGnQj\x96\xae1\x11\xda\b\x8e\x8d\xec\xe9\xc2\\\xb5\x15g\xf6\x01f\x84\x138\xa5\xa1\xfc\x84\xa46\xcd\xe9M\xc6W\x0f\x8f\xad\x9e\x1e^\xb0\xc1\xe6*\xd1\xd5,\xe8w\x1e\x03\x99\x18\xd3\xdb\x95>\x18\xbeq\xea\x1dzP;@\f\x9dh\x94\"\"\xaa0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') socket$inet(0x2, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x85, 0x0, &(0x7f0000000100)) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x1b0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x2, 0x1e00, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) io_submit(r0, 0x20000000000000ee, &(0x7f0000000340)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 42.661428ms ago: executing program 0 (id=4521): openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) unshare(0x28020500) sync() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) close(0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x10, r0}, 0x18) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) socket$kcm(0xa, 0x2, 0x0) 0s ago: executing program 1 (id=4522): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfea7) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) kernel console output (not intermixed with test programs): ttr_inode_iget:441: inode #11: comm syz.0.3127: iget: bad extra_isize 90 (inode size 256) [ 258.545772][T12360] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 258.546715][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 258.562475][ C1] EXT4-fs (loop0): initial error at time 1781778662: ext4_xattr_inode_iget:441: inode 11 [ 258.572452][ C1] EXT4-fs (loop0): last error at time 1781778662: ext4_xattr_inode_iget:441: inode 11 [ 258.583358][T12360] EXT4-fs (loop0): Remounting filesystem read-only [ 258.590456][T12360] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 258.603596][T12360] EXT4-fs (loop0): 1 orphan inode deleted [ 258.611232][T12360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.786429][T12365] veth3: left promiscuous mode [ 258.841656][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.105127][T12374] syzkaller0: entered promiscuous mode [ 259.118271][T12374] syzkaller0: entered allmulticast mode [ 259.197390][T12375] Cannot find set identified by id 0 to match [ 259.449084][T12379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3123'. [ 259.573463][T12379] bond5: entered promiscuous mode [ 259.589856][T12379] bond5: entered allmulticast mode [ 259.611548][T12383] syzkaller0: entered promiscuous mode [ 259.619642][T12383] syzkaller0: entered allmulticast mode [ 259.745938][ T28] audit: type=1400 audit(1781778663.323:2586): avc: denied { connect } for pid=12386 comm="syz.1.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 259.830938][T12389] bridge0: port 4(vlan4) entered disabled state [ 259.885338][T12389] vlan4 (unregistering): left allmulticast mode [ 259.897123][T12389] bridge_slave_0 (unregistering): left allmulticast mode [ 259.910475][T12389] vlan4 (unregistering): left promiscuous mode [ 259.928350][T12389] bridge_slave_0 (unregistering): left promiscuous mode [ 259.935687][T12389] bridge0: port 4(vlan4) entered disabled state [ 260.178795][T12406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3136'. [ 260.398653][T12417] tipc: Enabling of bearer rejected, failed to enable media [ 260.413718][T12414] loop0: detected capacity change from 0 to 8192 [ 260.460077][T12422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3142'. [ 260.501545][T12422] 8021q: adding VLAN 0 to HW filter on device bond6 [ 260.546008][T12422] macvlan2: entered promiscuous mode [ 260.558464][T12424] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 260.566166][T12422] macvlan2: entered allmulticast mode [ 260.575064][T12422] bond6: entered promiscuous mode [ 260.579165][T12424] FAT-fs (loop0): Filesystem has been set read-only [ 260.591291][T12422] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 260.616619][T12422] bond6: left promiscuous mode [ 263.045129][ T3382] page_pool_release_retry() stalled pool shutdown: id 114, 1 inflight 61 sec [ 263.203775][T12458] loop2: detected capacity change from 0 to 512 [ 263.227539][T12456] loop0: detected capacity change from 0 to 128 [ 263.248696][T12458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.300816][T12456] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 263.321062][T12458] ext4 filesystem being mounted at /611/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.327571][T12456] System zones: 1-3, 19-19, 35-36 [ 263.403425][T12456] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 263.465915][T12456] ext4 filesystem being mounted at /589/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 263.557505][T12456] EXT4-fs warning (device loop0): ext4_group_extend:1861: can't shrink FS - resize aborted [ 263.654119][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.905810][T12467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3157'. [ 264.016993][ T28] audit: type=1326 audit(1781778667.593:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12471 comm="syz.1.3158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ea7ce59 code=0x7ffc0000 [ 264.086328][ T28] audit: type=1326 audit(1781778667.633:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12471 comm="syz.1.3158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ea7ce59 code=0x7ffc0000 [ 264.153096][ T28] audit: type=1326 audit(1781778667.633:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12471 comm="syz.1.3158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ea7ce59 code=0x7ffc0000 [ 264.156846][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.214223][ T28] audit: type=1326 audit(1781778667.633:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12471 comm="syz.1.3158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ea7ce59 code=0x7ffc0000 [ 264.292447][ T28] audit: type=1326 audit(1781778667.633:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12471 comm="syz.1.3158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f9c3ea7ce59 code=0x7ffc0000 [ 264.369343][ T28] audit: type=1326 audit(1781778667.633:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12471 comm="syz.1.3158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ea7ce59 code=0x7ffc0000 [ 264.875992][ T28] audit: type=1326 audit(1781778667.633:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12471 comm="syz.1.3158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ea7ce59 code=0x7ffc0000 [ 264.901708][ T28] audit: type=1326 audit(1781778667.633:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12471 comm="syz.1.3158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ea7ce59 code=0x7ffc0000 [ 264.927321][ T28] audit: type=1326 audit(1781778667.633:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12471 comm="syz.1.3158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ea7ce59 code=0x7ffc0000 [ 265.064364][ T28] audit: type=1326 audit(1781778667.633:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12471 comm="syz.1.3158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9c3ea7ce59 code=0x7ffc0000 [ 265.377388][T12513] netlink: 'syz.1.3171': attribute type 1 has an invalid length. [ 265.403129][T12513] 8021q: adding VLAN 0 to HW filter on device bond7 [ 265.462717][T12513] bond7: (slave veth7): Enslaving as an active interface with a down link [ 265.487017][T12513] vlan5: entered allmulticast mode [ 265.501143][T12513] veth0_to_bond: entered allmulticast mode [ 265.523201][T12513] veth0_to_bond: entered promiscuous mode [ 265.537050][T12513] veth0_to_bond: left promiscuous mode [ 265.544036][T12513] bond7: (slave vlan5): Enslaving as an active interface with a down link [ 265.603735][T12520] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3174'. [ 266.798787][T12550] tipc: Enabling of bearer rejected, failed to enable media [ 266.900739][T12552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3180'. [ 266.955477][T12552] bond13: entered promiscuous mode [ 266.975065][T12552] bond13: entered allmulticast mode [ 267.007387][T12552] 8021q: adding VLAN 0 to HW filter on device bond13 [ 267.032466][T12555] erspan1: entered allmulticast mode [ 267.080358][T12555] erspan1: entered promiscuous mode [ 267.114786][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3180'. [ 267.142247][T12555] bond13: (slave erspan1): Enslaving as an active interface with an up link [ 267.250836][T12552] bond13 (unregistering): (slave erspan1): Releasing backup interface [ 267.270508][T12552] erspan1: left promiscuous mode [ 267.281845][T12552] bond13 (unregistering): Released all slaves [ 267.391155][T12568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3186'. [ 267.419894][T12568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3186'. [ 267.651697][T12582] syzkaller0: entered promiscuous mode [ 267.657792][T12582] syzkaller0: entered allmulticast mode [ 268.931037][T12619] : port 1(ip6gretap0) entered blocking state [ 268.949916][T12619] : port 1(ip6gretap0) entered disabled state [ 268.971255][T12619] ip6gretap0: entered allmulticast mode [ 268.991675][T12619] ip6gretap0: entered promiscuous mode [ 269.009634][T12620] ip6gretap0: left allmulticast mode [ 269.026649][T12620] ip6gretap0: left promiscuous mode [ 269.038455][T12620] : port 1(ip6gretap0) entered disabled state [ 269.104881][T12624] loop0: detected capacity change from 0 to 512 [ 269.119619][T12624] EXT4-fs: test_dummy_encryption option not supported [ 270.123282][T12650] loop2: detected capacity change from 0 to 128 [ 270.144599][T12650] FAT-fs (loop2): Directory bread(block 524322) failed [ 270.173929][T12650] FAT-fs (loop2): Directory bread(block 524323) failed [ 270.197221][T12650] FAT-fs (loop2): Directory bread(block 524324) failed [ 270.223709][T12650] FAT-fs (loop2): Directory bread(block 524325) failed [ 270.243301][T12650] FAT-fs (loop2): Directory bread(block 524326) failed [ 270.256950][T12650] FAT-fs (loop2): Directory bread(block 524327) failed [ 270.264111][T12650] FAT-fs (loop2): Directory bread(block 524328) failed [ 270.275151][T12650] FAT-fs (loop2): Directory bread(block 524329) failed [ 270.380425][T12650] FAT-fs (loop2): FAT read failed (blocknr 128) [ 270.486351][T12660] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3217'. [ 271.098232][T12685] bridge0: port 3(gretap0) entered disabled state [ 271.216475][T12685] dummy0: left promiscuous mode [ 271.331097][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3229'. [ 272.237594][T12685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.258368][T12685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.350133][T12685] bridge2: left promiscuous mode [ 272.372927][T12685] bond1: left promiscuous mode [ 272.383925][T12685] bridge3: left promiscuous mode [ 272.849321][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 272.849339][ T28] audit: type=1400 audit(1781778676.343:2626): avc: denied { write } for pid=12725 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.974477][T12707] 8021q: adding VLAN 0 to HW filter on device bond13 [ 273.002657][ T28] audit: type=1400 audit(1781778676.423:2627): avc: denied { write } for pid=12748 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.234821][ T3632] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.244233][ T3632] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.278110][ T3632] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.288166][ T3632] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.297677][ T3632] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.306590][ T3632] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.538996][ T3632] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.551631][ T3632] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.432975][T12778] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3248'. [ 274.616796][ T28] audit: type=1400 audit(1781778678.183:2628): avc: denied { write } for pid=12756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.832378][ T28] audit: type=1400 audit(1781778678.283:2629): avc: denied { write } for pid=12798 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.865738][ T28] audit: type=1400 audit(1781778678.393:2630): avc: denied { map } for pid=12799 comm="syz.4.3251" path="socket:[45389]" dev="sockfs" ino=45389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 274.889731][ T28] audit: type=1400 audit(1781778678.393:2631): avc: denied { accept } for pid=12799 comm="syz.4.3251" path="socket:[45389]" dev="sockfs" ino=45389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 275.134017][ T28] audit: type=1400 audit(1781778678.713:2632): avc: denied { write } for pid=12805 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.170445][T12820] netlink: 'syz.1.3254': attribute type 1 has an invalid length. [ 275.209711][ T28] audit: type=1400 audit(1781778678.783:2633): avc: denied { write } for pid=12821 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.241220][T12820] bond8: (slave bridge0): Enslaving as a backup interface with an up link [ 275.256653][T12820] macvlan0: entered promiscuous mode [ 275.262098][T12820] macvlan0: entered allmulticast mode [ 275.268234][T12820] bond8: entered promiscuous mode [ 275.273521][T12820] bridge0: entered promiscuous mode [ 275.279237][T12820] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 275.294354][T12820] bond8: left promiscuous mode [ 275.303831][T12820] bridge0: left promiscuous mode [ 275.438314][T12827] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3256'. [ 275.629763][T12832] loop0: detected capacity change from 0 to 8192 [ 275.804534][ T28] audit: type=1400 audit(1781778679.383:2634): avc: denied { write } for pid=12837 comm="syz.4.3261" path="socket:[46176]" dev="sockfs" ino=46176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 276.549718][T12905] netlink: 'syz.4.3270': attribute type 1 has an invalid length. [ 276.593755][T12905] 8021q: adding VLAN 0 to HW filter on device bond14 [ 276.627687][T12905] vlan5: entered allmulticast mode [ 276.644377][T12905] bond14: entered allmulticast mode [ 277.084099][T12925] loop0: detected capacity change from 0 to 764 [ 277.234174][T12931] loop2: detected capacity change from 0 to 1024 [ 277.256166][T12931] EXT4-fs: Ignoring removed bh option [ 277.296386][T12931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.590291][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.252185][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3286'. [ 279.748719][T12971] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3292'. [ 279.825605][ T28] audit: type=1400 audit(1781778683.403:2635): avc: denied { audit_write } for pid=12945 comm="syz.2.3284" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 279.864694][ T28] audit: type=1107 audit(1781778683.403:2636): pid=12945 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 280.240197][T12983] Cannot find add_set index 0 as target [ 281.975654][T12996] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3301'. [ 282.129632][T12996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.144024][T12996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.160089][T12996] bond0 (unregistering): (slave team0): Releasing backup interface [ 282.180256][T12996] bond0 (unregistering): Released all slaves [ 282.218526][T13003] netlink: 'syz.1.3303': attribute type 4 has an invalid length. [ 283.015884][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3306'. [ 283.036610][T13014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3307'. [ 283.048788][T13014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3307'. [ 283.067242][T13014] syzkaller0: entered promiscuous mode [ 283.078968][T13014] syzkaller0: entered allmulticast mode [ 283.270630][T13025] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3311'. [ 283.309466][T13025] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13025 comm=syz.5.3311 [ 283.361403][T13023] loop2: detected capacity change from 0 to 512 [ 283.385169][T13023] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 283.477200][T13023] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3310: iget: bad i_size value: 38620345925642 [ 283.500949][T13023] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 283.501224][T13023] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3310: couldn't read orphan inode 15 (err -117) [ 283.510470][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 283.510490][ C1] EXT4-fs (loop2): initial error at time 1781778687: ext4_orphan_get:1399: inode 15 [ 283.510520][ C1] EXT4-fs (loop2): last error at time 1781778687: ext4_orphan_get:1399: inode 15 [ 283.689844][ T28] audit: type=1400 audit(1781778687.253:2637): avc: denied { getopt } for pid=13026 comm="syz.5.3312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 283.751965][T13023] loop2: lost filesystem error report for type 5 error -117 [ 283.752538][T13023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.795426][T13042] netlink: 'syz.4.3316': attribute type 1 has an invalid length. [ 283.841434][ T28] audit: type=1400 audit(1781778687.423:2638): avc: denied { write } for pid=13022 comm="syz.2.3310" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 283.868363][T13042] 8021q: adding VLAN 0 to HW filter on device bond15 [ 283.925148][T13045] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3310: bg 0: block 5: invalid block bitmap [ 283.972807][T13044] bond15: (slave veth13): Enslaving as an active interface with a down link [ 284.020478][T13045] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 448 with error 28 [ 284.042524][T13042] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 284.053533][T13042] bond15: (slave batadv1): making interface the new active one [ 284.062629][T13042] batadv1: entered promiscuous mode [ 284.067982][T13045] EXT4-fs (loop2): This should not happen!! Data will be lost [ 284.067982][T13045] [ 284.078021][T13045] EXT4-fs (loop2): Total free blocks count 0 [ 284.084325][T13042] bond15: (slave batadv1): Enslaving as an active interface with an up link [ 284.093383][T13045] EXT4-fs (loop2): Free/Dirty block details [ 284.139629][T13045] EXT4-fs (loop2): free_blocks=0 [ 284.144651][T13045] EXT4-fs (loop2): dirty_blocks=452 [ 284.150117][T13045] EXT4-fs (loop2): Block reservation details [ 284.156150][T13045] EXT4-fs (loop2): i_reserved_data_blocks=452 [ 284.179276][T13050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.187890][T13050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.200957][T13044] bond15 (unregistering): (slave veth13): Releasing active interface [ 284.222566][T13050] tmpfs: Bad value for 'nr_inodes' [ 284.234227][T13044] bond15 (unregistering): (slave batadv1): Releasing active interface [ 284.247712][T13044] bond15 (unregistering): Released all slaves [ 284.256322][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.276403][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3318'. [ 284.519577][ T28] audit: type=1400 audit(1781778688.093:2639): avc: denied { bind } for pid=13063 comm="syz.2.3322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 284.985407][ T28] audit: type=1400 audit(1781778688.563:2640): avc: denied { write } for pid=13079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.051368][ T28] audit: type=1400 audit(1781778688.633:2641): avc: denied { write } for pid=13098 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.109226][ T423] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.117651][ T423] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.128819][T12865] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.137564][T12865] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.311830][T13103] loop0: detected capacity change from 0 to 8192 [ 285.363230][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3332'. [ 285.387583][ T28] audit: type=1400 audit(1781778688.963:2642): avc: denied { write } for pid=13104 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.414955][T13125] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 285.440120][T13125] FAT-fs (loop0): Filesystem has been set read-only [ 285.460320][ T28] audit: type=1400 audit(1781778689.003:2643): avc: denied { accept } for pid=13115 comm="syz.1.3332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 285.519695][ T28] audit: type=1400 audit(1781778689.033:2644): avc: denied { write } for pid=13126 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.576177][T13116] macsec0: entered promiscuous mode [ 285.585988][T13121] macsec0 (unregistering): left promiscuous mode [ 285.663098][T13132] loop0: detected capacity change from 0 to 2048 [ 285.720070][T13132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.782135][T13132] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.3333: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 285.829750][T13147] loop2: detected capacity change from 0 to 128 [ 285.842020][T13132] EXT4-fs (loop0): Remounting filesystem read-only [ 285.861783][T13148] EXT4-fs error (device loop0): ext4_ext_precache:631: inode #2: comm syz.0.3333: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 285.884435][T13147] vfat: Unknown parameter './file0' [ 285.914227][ T28] audit: type=1400 audit(1781778689.493:2645): avc: denied { write } for pid=13131 comm="syz.0.3333" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 285.945866][T13147] loop2: detected capacity change from 0 to 764 [ 285.962161][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.035230][T13150] netlink: 'syz.0.3341': attribute type 1 has an invalid length. [ 286.105261][T13153] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 286.115413][T13150] bond7: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 286.152365][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3341'. [ 286.181549][T13150] bond7 (unregistering): (slave ip6gretap2): Releasing backup interface [ 286.208430][T13150] bond7 (unregistering): Released all slaves [ 286.235575][T13153] loop2: detected capacity change from 0 to 512 [ 286.291986][T13153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.337356][T13153] ext4 filesystem being mounted at /638/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.616374][ T28] audit: type=1400 audit(1781778690.173:2646): avc: denied { remount } for pid=13152 comm="syz.2.3342" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 286.661197][T13153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 286.905380][T13153] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 287.024020][ T28] audit: type=1400 audit(1781778690.593:2647): avc: denied { nlmsg_read } for pid=13152 comm="syz.2.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 287.329249][T13175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3348'. [ 287.450036][T13175] hsr_slave_0: left promiscuous mode [ 287.503758][T13175] hsr_slave_1: left promiscuous mode [ 287.547472][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.664815][T13188] loop2: detected capacity change from 0 to 512 [ 287.692149][T13188] EXT4-fs: Ignoring removed nobh option [ 287.755113][T13188] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #3: comm syz.2.3352: corrupted inode contents [ 287.772132][T13188] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 287.772412][T13188] EXT4-fs (loop2): Remounting filesystem read-only [ 287.781608][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 287.781635][ C0] EXT4-fs (loop2): initial error at time 1781778691: ext4_do_update_inode:5690: inode 3 [ 287.781683][ C0] EXT4-fs (loop2): last error at time 1781778691: ext4_do_update_inode:5690: inode 3 [ 287.815902][T13188] Quota error (device loop2): write_blk: dquota write failed [ 287.816585][T13197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.823643][T13188] Quota error (device loop2): qtree_write_dquot: Error -30 occurred while creating quota [ 287.842499][T13188] EXT4-fs (loop2): 1 truncate cleaned up [ 287.848987][T13188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.861717][T13188] ext4 filesystem being mounted at /639/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.872176][T13197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.887477][T13197] ieee802154 phy0 wpan0: encryption failed: -22 [ 287.921167][T13197] tipc: Resetting bearer [ 287.938523][T13203] tipc: Failed to remove unknown binding: 66,0,0/0:1416823258/1416823260 [ 287.947457][T13201] tipc: Failed to remove unknown binding: 66,0,0/0:1574235287/1574235288 [ 287.956577][T13201] tipc: Failed to remove unknown binding: 66,0,0/0:1574235287/1574235288 [ 288.009448][T13197] batman_adv: batadv0: Interface deactivated: gretap1 [ 288.020128][T13207] netlink: 'syz.5.3358': attribute type 6 has an invalid length. [ 288.047845][T13188] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3352'. [ 288.072113][ T423] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.081572][ T423] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.098994][ T423] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.119880][ T423] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.139142][ T423] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.154545][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.157394][ T423] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.201246][T13215] loop2: detected capacity change from 0 to 1024 [ 288.211142][ T423] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.227598][ T423] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.240012][T13215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.283854][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3363'. [ 288.297184][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.315716][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3363'. [ 289.728012][T13247] bond7: entered promiscuous mode [ 289.797339][T13247] 8021q: adding VLAN 0 to HW filter on device bond7 [ 289.898339][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3374'. [ 289.929362][T13247] 8021q: adding VLAN 0 to HW filter on device bond7 [ 289.957441][T13247] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 289.974657][T13254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3375'. [ 289.988103][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3374'. [ 290.016260][T13250] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.053850][T13247] bond7: (slave ip6gre1): Error -95 calling set_mac_address [ 290.160436][T13256] vlan6: entered promiscuous mode [ 290.205875][T13256] bridge8: entered promiscuous mode [ 290.233914][T13256] vlan6: entered allmulticast mode [ 290.262308][T13256] bridge8: entered allmulticast mode [ 290.663243][T13267] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3378'. [ 291.029118][T13265] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3378'. [ 291.168467][T13267] gretap0: entered promiscuous mode [ 291.446666][T13265] 0ªî{X¹¦: renamed from gretap0 [ 291.474140][T13265] 0ªî{X¹¦: left promiscuous mode [ 291.590553][T13265] 0ªî{X¹¦: entered allmulticast mode [ 291.619625][T13265] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 291.700992][T13264] macsec1: entered promiscuous mode [ 292.897046][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3382'. [ 293.102081][T13299] syzkaller0: entered promiscuous mode [ 293.138965][T13299] syzkaller0: entered allmulticast mode [ 293.682884][T13317] loop2: detected capacity change from 0 to 128 [ 293.967467][T13329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3393'. [ 294.077729][T13311] veth5: entered promiscuous mode [ 295.440351][T13356] loop2: detected capacity change from 0 to 128 [ 295.540399][T13359] syz.2.3403: attempt to access beyond end of device [ 295.540399][T13359] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 295.641901][T13359] syz.2.3403: attempt to access beyond end of device [ 295.641901][T13359] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 295.709932][T13359] syz.2.3403: attempt to access beyond end of device [ 295.709932][T13359] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 295.730466][T13359] syz.2.3403: attempt to access beyond end of device [ 295.730466][T13359] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 295.779856][T13359] syz.2.3403: attempt to access beyond end of device [ 295.779856][T13359] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 295.818817][T13359] syz.2.3403: attempt to access beyond end of device [ 295.818817][T13359] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 295.832907][T13359] syz.2.3403: attempt to access beyond end of device [ 295.832907][T13359] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 295.847001][T13359] syz.2.3403: attempt to access beyond end of device [ 295.847001][T13359] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 295.860772][T13359] syz.2.3403: attempt to access beyond end of device [ 295.860772][T13359] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 295.874696][T13359] syz.2.3403: attempt to access beyond end of device [ 295.874696][T13359] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 295.876924][T13368] veth15: entered promiscuous mode [ 295.895254][T13370] netlink: 'syz.5.3404': attribute type 49 has an invalid length. [ 296.112154][T13370] ip6gretap0: entered allmulticast mode [ 297.370284][T13386] syzkaller0: entered promiscuous mode [ 297.384396][T13393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3414'. [ 297.400378][T13386] syzkaller0: entered allmulticast mode [ 297.481410][T13393] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13393 comm=syz.4.3414 [ 297.642891][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 297.642905][ T28] audit: type=1400 audit(1781778701.223:2650): avc: denied { write } for pid=13391 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.768277][ T28] audit: type=1400 audit(1781778701.353:2651): avc: denied { write } for pid=13410 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.114021][T13390] netlink: 'syz.1.3413': attribute type 3 has an invalid length. [ 298.131065][T13431] tipc: Resetting bearer [ 298.137761][ T28] audit: type=1400 audit(1781778701.713:2652): avc: denied { write } for pid=13415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.146524][T13390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3413'. [ 298.213113][T13431] tipc: Resetting bearer [ 298.237911][ T28] audit: type=1400 audit(1781778701.813:2653): avc: denied { write } for pid=13436 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.581080][ T28] audit: type=1400 audit(1781778702.163:2654): avc: denied { write } for pid=13449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.673106][ T28] audit: type=1400 audit(1781778702.253:2655): avc: denied { write } for pid=13464 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.718900][T13448] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 298.803591][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3425'. [ 298.872435][T13455] netlink: 'syz.5.3422': attribute type 12 has an invalid length. [ 298.886326][T13455] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3422'. [ 299.032687][T13474] syzkaller0: entered promiscuous mode [ 299.038268][T13474] syzkaller0: entered allmulticast mode [ 299.496572][T13492] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.158350][ T28] audit: type=1400 audit(1781778703.733:2656): avc: denied { lock } for pid=13504 comm="syz.1.3434" path="socket:[47314]" dev="sockfs" ino=47314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 300.713229][T13513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3438'. [ 300.776032][T13513] bond9: entered promiscuous mode [ 300.791458][T13513] bond9: entered allmulticast mode [ 300.867723][T13516] netlink: 'syz.2.3439': attribute type 13 has an invalid length. [ 300.879605][T13516] netlink: 'syz.2.3439': attribute type 17 has an invalid length. [ 300.890613][T13518] netlink: 'syz.1.3440': attribute type 8 has an invalid length. [ 300.900003][T13518] sch_fq: defrate 0 ignored. [ 300.957166][T13516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.966258][T13516] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.980341][T13516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.010892][T13516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.022217][T13516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.034611][T13516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 301.045662][T13516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.064375][T13516] veth1_vlan: left promiscuous mode [ 301.078475][T13516] veth0_vlan: left promiscuous mode [ 301.090562][T13516] veth0_vlan: entered promiscuous mode [ 301.112422][T13516] veth1_vlan: entered promiscuous mode [ 301.130198][T13516] veth1_macvtap: left promiscuous mode [ 301.144263][T13516] veth0_macvtap: left promiscuous mode [ 301.156287][T13516] veth0_macvtap: entered promiscuous mode [ 301.171403][T13516] veth1_macvtap: entered promiscuous mode [ 301.214434][T13516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.229648][T13516] 8021q: adding VLAN 0 to HW filter on device bond2 [ 301.240389][T13516] 8021q: adding VLAN 0 to HW filter on device bond3 [ 301.256087][T13516] 8021q: adding VLAN 0 to HW filter on device eth0 [ 301.266666][T13530] loop0: detected capacity change from 0 to 256 [ 301.272532][T13516] 8021q: adding VLAN 0 to HW filter on device eth1 [ 301.284953][T13516] 8021q: adding VLAN 0 to HW filter on device eth2 [ 301.299321][T13516] 8021q: adding VLAN 0 to HW filter on device eth3 [ 301.312119][T13516] 8021q: adding VLAN 0 to HW filter on device bond4 [ 301.323747][T13530] FAT-fs (loop0): IO charset maccroatian not found [ 301.332073][T13530] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 301.375342][T12868] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.382660][T12868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.392601][T12868] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.399783][T12868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.428179][ T28] audit: type=1400 audit(1781778705.003:2657): avc: denied { read } for pid=13533 comm="syz.1.3444" name="file1" dev="tmpfs" ino=2594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 301.478560][ T28] audit: type=1400 audit(1781778705.013:2658): avc: denied { watch } for pid=13533 comm="syz.1.3444" path="/497/file1" dev="tmpfs" ino=2594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 301.504270][T12842] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.512953][T12842] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.521377][T12842] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.529774][T12842] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.553034][T12842] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.572677][T12842] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.590818][T12842] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.599295][T12842] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.609312][T13543] netlink: 'syz.2.3446': attribute type 1 has an invalid length. [ 301.628854][T13543] 8021q: adding VLAN 0 to HW filter on device bond5 [ 301.669372][T13543] vlan3: entered promiscuous mode [ 301.674573][T13543] bond5: entered promiscuous mode [ 301.679996][T13543] vlan3: entered allmulticast mode [ 301.685299][T13543] bond5: entered allmulticast mode [ 301.707526][T13543] bond5: (slave bridge7): making interface the new active one [ 301.715510][T13543] bridge7: entered promiscuous mode [ 301.721455][T13543] bridge7: entered allmulticast mode [ 301.728322][T13543] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 301.852367][T13551] bridge0: port 3(gretap0) entered disabled state [ 301.925346][T13555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3451'. [ 301.938557][T13551] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.945792][T13551] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.984799][T13551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.996534][T13551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.105210][T13562] netlink: 'syz.1.3452': attribute type 1 has an invalid length. [ 302.232451][T13565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3452'. [ 303.084908][T13559] bond15: entered promiscuous mode [ 303.098007][T13559] bond15: entered allmulticast mode [ 303.109809][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.135186][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.164797][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.308426][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.335635][T13562] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 303.360754][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.572199][ T28] audit: type=1400 audit(1781778707.153:2659): avc: denied { write } for pid=13572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.694091][T13591] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3455'. [ 304.083549][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.093391][ T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.102574][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.136501][ T28] audit: type=1400 audit(1781778707.713:2660): avc: denied { write } for pid=13595 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.499996][ T28] audit: type=1400 audit(1781778708.073:2661): avc: denied { write } for pid=13605 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.578564][ T28] audit: type=1400 audit(1781778708.153:2662): avc: denied { write } for pid=13632 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.094022][T13649] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3467'. [ 306.878664][T13671] tipc: Resetting bearer [ 307.193551][T13678] syzkaller0: entered promiscuous mode [ 307.218505][T13678] syzkaller0: entered allmulticast mode [ 309.229968][T13753] loop0: detected capacity change from 0 to 512 [ 309.272625][T13753] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.3490: Unrecognised inode hash code 255 [ 309.336803][T13753] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3490: Corrupt directory, running e2fsck is recommended [ 309.359393][ T28] audit: type=1326 audit(1781778712.943:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13771 comm="syz.4.3493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43138cce59 code=0x7ffc0000 [ 309.385285][ T28] audit: type=1326 audit(1781778712.953:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13771 comm="syz.4.3493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43138cce59 code=0x7ffc0000 [ 309.419453][T13753] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 309.426952][ T28] audit: type=1326 audit(1781778712.953:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13771 comm="syz.4.3493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43138cce59 code=0x7ffc0000 [ 309.470997][T13753] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.3490: corrupted in-inode xattr: e_name out of bounds [ 309.475898][ T28] audit: type=1326 audit(1781778712.953:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13771 comm="syz.4.3493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43138cce59 code=0x7ffc0000 [ 309.538228][T13753] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 309.541431][T13753] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3490: couldn't read orphan inode 15 (err -117) [ 309.547040][ T28] audit: type=1326 audit(1781778712.953:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13771 comm="syz.4.3493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43138cce59 code=0x7ffc0000 [ 309.550698][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 309.594826][ C1] EXT4-fs (loop0): initial error at time 1781778713: ext4_iget_extra_inode:5128: inode 15 [ 309.604814][ C1] EXT4-fs (loop0): last error at time 1781778713: ext4_iget_extra_inode:5128: inode 15 [ 309.618732][ T28] audit: type=1326 audit(1781778712.953:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13771 comm="syz.4.3493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43138cce59 code=0x7ffc0000 [ 309.674159][T13753] loop0: lost filesystem error report for type 5 error -117 [ 309.676094][T13753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.697401][ T28] audit: type=1326 audit(1781778712.953:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13771 comm="syz.4.3493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43138cce59 code=0x7ffc0000 [ 309.782187][ T28] audit: type=1326 audit(1781778712.963:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13771 comm="syz.4.3493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f431388d68e code=0x7ffc0000 [ 309.861451][ T28] audit: type=1326 audit(1781778712.963:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13771 comm="syz.4.3493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f431388d68e code=0x7ffc0000 [ 309.909977][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.939683][ T28] audit: type=1326 audit(1781778712.953:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13771 comm="syz.4.3493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43138cce59 code=0x7ffc0000 [ 311.063150][T13875] netlink: 11870 bytes leftover after parsing attributes in process `syz.4.3497'. [ 312.168596][T13899] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 312.206999][T13899] syzkaller0: entered promiscuous mode [ 312.223138][T13899] syzkaller0: entered allmulticast mode [ 312.307061][T13903] xt_hashlimit: size too large, truncated to 1048576 [ 313.726366][T13912] loop0: detected capacity change from 0 to 256 [ 313.809933][T13912] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 314.217698][T13928] loop0: detected capacity change from 0 to 512 [ 314.239864][T13928] EXT4-fs: Ignoring removed oldalloc option [ 314.271971][T13928] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 314.318738][T13928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.343452][T13928] ext4 filesystem being mounted at /653/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.390144][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 314.390165][ T28] audit: type=1400 audit(1781778717.963:2715): avc: denied { write } for pid=13924 comm="syz.0.3510" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 314.672283][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.762870][ T28] audit: type=1400 audit(1781778718.343:2716): avc: denied { create } for pid=13960 comm="syz.1.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 314.908714][ T28] audit: type=1400 audit(1781778718.483:2717): avc: denied { write } for pid=13960 comm="syz.1.3522" path="socket:[48398]" dev="sockfs" ino=48398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 315.295897][ T28] audit: type=1400 audit(1781778718.863:2718): avc: denied { write } for pid=13969 comm="syz.0.3524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 316.693572][T13985] netlink: 'syz.4.3529': attribute type 1 has an invalid length. [ 316.753188][T13985] 8021q: adding VLAN 0 to HW filter on device bond16 [ 316.764317][T13986] syzkaller0: entered promiscuous mode [ 316.783317][T13986] syzkaller0: entered allmulticast mode [ 316.867006][T13985] bond16: (slave ip6gretap2): making interface the new active one [ 316.888764][T13985] bond16: (slave ip6gretap2): Enslaving as an active interface with an up link [ 316.985889][T13995] loop0: detected capacity change from 0 to 512 [ 317.242805][ T28] audit: type=1326 audit(1781778720.823:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13997 comm="syz.4.3535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43138cce59 code=0x7ffc0000 [ 317.266058][T14004] loop0: detected capacity change from 0 to 2048 [ 317.286165][ T28] audit: type=1326 audit(1781778720.823:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13997 comm="syz.4.3535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43138cce59 code=0x7ffc0000 [ 317.350726][T14004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.371502][T14004] EXT4-fs error (device loop0): ext4_ext_precache:648: inode #2: comm syz.0.3538: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 317.420738][T14004] EXT4-fs (loop0): Remounting filesystem read-only [ 317.442816][ T28] audit: type=1326 audit(1781778721.023:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13997 comm="syz.4.3535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43138cce59 code=0x7ffc0000 [ 317.548638][ T28] audit: type=1326 audit(1781778721.023:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13997 comm="syz.4.3535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43138cce59 code=0x7ffc0000 [ 317.614388][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.616182][T14016] netlink: 'syz.5.3542': attribute type 1 has an invalid length. [ 317.661591][ T28] audit: type=1326 audit(1781778721.023:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13997 comm="syz.4.3535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43138cce59 code=0x7ffc0000 [ 317.701778][T14016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.764095][T14018] bond0: (slave gretap1): making interface the new active one [ 317.773398][ T28] audit: type=1326 audit(1781778721.023:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13997 comm="syz.4.3535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43138cce59 code=0x7ffc0000 [ 317.812004][T14018] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 317.868373][T14026] bond0: (slave veth7): Enslaving as an active interface with a down link [ 317.880297][T14020] syzkaller0: entered promiscuous mode [ 317.886090][T14020] syzkaller0: entered allmulticast mode [ 317.896457][T14016] veth0_virt_wifi: entered promiscuous mode [ 317.909096][T14016] bond0: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 318.155115][T14044] tipc: Failed to remove unknown binding: 66,0,0/0:523676084/523676086 [ 318.186884][T14043] tipc: Failed to remove unknown binding: 66,0,0/0:2397336118/2397336119 [ 318.216908][T14043] tipc: Failed to remove unknown binding: 66,0,0/0:2397336118/2397336119 [ 318.461248][T14050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3548'. [ 318.641702][T14055] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 319.619455][T14084] loop0: detected capacity change from 0 to 256 [ 319.644607][T14084] FAT-fs (loop0): Directory bread(block 64) failed [ 319.651918][T14084] FAT-fs (loop0): Directory bread(block 65) failed [ 319.658762][T14084] FAT-fs (loop0): Directory bread(block 66) failed [ 319.665524][T14084] FAT-fs (loop0): Directory bread(block 67) failed [ 319.672176][T14084] FAT-fs (loop0): Directory bread(block 68) failed [ 319.678934][T14084] FAT-fs (loop0): Directory bread(block 69) failed [ 319.685549][T14084] FAT-fs (loop0): Directory bread(block 70) failed [ 319.692804][T14084] FAT-fs (loop0): Directory bread(block 71) failed [ 319.699631][T14084] FAT-fs (loop0): Directory bread(block 72) failed [ 319.706430][T14084] FAT-fs (loop0): Directory bread(block 73) failed [ 321.180700][T14093] loop2: detected capacity change from 0 to 164 [ 321.527528][T14093] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 321.804342][T14114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3573'. [ 321.863656][T14093] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 322.854381][T14127] futex_wake_op: syz.5.3574 tries to shift op by 144; fix this program [ 323.864815][T14140] tipc: Enabling of bearer rejected, failed to enable media [ 324.022346][T14133] syzkaller0: entered promiscuous mode [ 324.029661][T14133] syzkaller0: entered allmulticast mode [ 324.305770][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3584'. [ 324.318142][T14159] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 324.329481][T14159] gretap4: entered allmulticast mode [ 324.404628][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3587'. [ 324.419406][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3587'. [ 324.447818][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3587'. [ 324.448773][ T3634] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.472898][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3587'. [ 324.477934][ T3634] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.518780][ T3634] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.534529][ T3634] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.912772][T14183] netlink: 'syz.1.3593': attribute type 1 has an invalid length. [ 324.938945][T14183] 8021q: adding VLAN 0 to HW filter on device bond10 [ 324.975932][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3594'. [ 325.026230][T14183] bond4: (slave veth0_to_bond): Releasing active interface [ 325.026775][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3594'. [ 325.057021][T14190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3594'. [ 325.066145][T14190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3594'. [ 325.124352][T14183] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 325.134811][T14188] netlink: 'syz.4.3595': attribute type 1 has an invalid length. [ 325.151625][T14188] netlink: 'syz.4.3595': attribute type 2 has an invalid length. [ 325.171731][T14193] bond10: entered promiscuous mode [ 325.191061][T14193] bond10: entered allmulticast mode [ 325.218489][T14196] macvlan0: entered promiscuous mode [ 325.228505][T14196] macvlan0: entered allmulticast mode [ 325.234953][T14196] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 325.293555][T14203] syzkaller0: entered promiscuous mode [ 325.299158][T14203] syzkaller0: entered allmulticast mode [ 325.405852][T14213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.414913][T14213] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.434116][T14213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.489436][T14213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.501670][T14213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.512985][T14213] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 325.531047][T12868] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.538213][T12868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.547594][T12868] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.554716][T12868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.649546][T14228] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3606'. [ 325.723899][T14237] loop2: detected capacity change from 0 to 4096 [ 325.778662][T14237] EXT4-fs: test_dummy_encryption option not supported [ 325.900288][T14239] loop0: detected capacity change from 0 to 164 [ 326.063181][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 326.063196][ T28] audit: type=1400 audit(1781778729.633:2761): avc: denied { create } for pid=14240 comm="syz.5.3612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 326.119512][T14239] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 326.385819][T14239] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 326.553006][T14263] loop2: detected capacity change from 0 to 512 [ 326.567480][T14263] EXT4-fs: Ignoring removed nobh option [ 326.603283][T14263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.633319][T14263] ext4 filesystem being mounted at /671/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 326.660850][ T28] audit: type=1400 audit(1781778730.243:2762): avc: denied { write } for pid=14262 comm="syz.2.3617" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 326.704010][ T28] audit: type=1400 audit(1781778730.243:2763): avc: denied { unlink } for pid=14262 comm="syz.2.3617" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 326.838757][T14272] bridge0: port 3(gretap0) entered disabled state [ 326.845382][T14272] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.852676][T14272] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.861533][T14272] bridge0: entered allmulticast mode [ 327.744464][T14272] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.788755][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.813814][T14272] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.843778][T14279] loop2: detected capacity change from 0 to 256 [ 327.877612][T14279] FAT-fs (loop2): Directory bread(block 64) failed [ 327.886985][T14279] FAT-fs (loop2): Directory bread(block 65) failed [ 327.893634][T14279] FAT-fs (loop2): Directory bread(block 66) failed [ 327.901034][T14279] FAT-fs (loop2): Directory bread(block 67) failed [ 327.907899][T14279] FAT-fs (loop2): Directory bread(block 68) failed [ 327.915114][T14279] FAT-fs (loop2): Directory bread(block 69) failed [ 327.916583][T14272] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.922539][T14279] FAT-fs (loop2): Directory bread(block 70) failed [ 327.941001][T14279] FAT-fs (loop2): Directory bread(block 71) failed [ 327.947881][T14279] FAT-fs (loop2): Directory bread(block 72) failed [ 327.954731][T14279] FAT-fs (loop2): Directory bread(block 73) failed [ 328.010304][T14272] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.070516][T12868] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.111238][T12872] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.121330][T12872] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.151323][T12872] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.307792][ T28] audit: type=1400 audit(1781778731.883:2764): avc: denied { create } for pid=14300 comm="syz.2.3628" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 328.341669][ T28] audit: type=1400 audit(1781778731.883:2765): avc: denied { create } for pid=14300 comm="syz.2.3628" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 328.363713][ T28] audit: type=1400 audit(1781778731.893:2766): avc: denied { ioctl } for pid=14300 comm="syz.2.3628" path="socket:[49465]" dev="sockfs" ino=49465 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 328.414590][T14304] futex_wake_op: syz.5.3627 tries to shift op by 144; fix this program [ 329.047394][ T28] audit: type=1400 audit(1781778732.623:2767): avc: denied { lock } for pid=14318 comm="syz.0.3634" path="socket:[49076]" dev="sockfs" ino=49076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 329.356342][T14339] netlink: 'syz.0.3639': attribute type 2 has an invalid length. [ 329.365430][T14339] netlink: 'syz.0.3639': attribute type 3 has an invalid length. [ 329.375391][T14339] __nla_validate_parse: 1 callbacks suppressed [ 329.375415][T14339] netlink: 11870 bytes leftover after parsing attributes in process `syz.0.3639'. [ 330.169041][T14355] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3646'. [ 330.416708][ T28] audit: type=1326 audit(1781778733.993:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14378 comm="syz.1.3654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ea7ce59 code=0x7ffc0000 [ 330.459564][ T28] audit: type=1326 audit(1781778733.993:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14378 comm="syz.1.3654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ea7ce59 code=0x7ffc0000 [ 330.486112][ T28] audit: type=1326 audit(1781778733.993:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14378 comm="syz.1.3654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ea7ce59 code=0x7ffc0000 [ 330.795147][T14399] Non-string source [ 330.935975][T14405] loop2: detected capacity change from 0 to 512 [ 331.022395][T14405] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 331.035292][T14405] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3662: bg 0: block 393: padding at end of block bitmap is not set [ 331.071150][T14405] loop2: lost filesystem error report for type 5 error -117 [ 331.071330][T14405] EXT4-fs (loop2): Remounting filesystem read-only [ 331.078743][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 331.078770][ C0] EXT4-fs (loop2): initial error at time 1781778734: ext4_validate_block_bitmap:441 [ 331.078800][ C0] EXT4-fs (loop2): last error at time 1781778734: ext4_validate_block_bitmap:441 [ 331.137575][T14405] EXT4-fs (loop2): 2 truncates cleaned up [ 331.160126][T14405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.374854][T14405] ucma_write: process 1723 (syz.2.3662) changed security contexts after opening file descriptor, this is not allowed. [ 331.654376][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.677866][T14417] tipc: Enabling of bearer rejected, failed to enable media [ 331.972450][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3668'. [ 331.997793][T14429] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3668'. [ 332.156563][T14444] tipc: Enabling of bearer rejected, failed to enable media [ 333.296426][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 333.296466][ T28] audit: type=1400 audit(1781778736.873:2837): avc: denied { write } for pid=14448 comm="syz.1.3683" path="socket:[50238]" dev="sockfs" ino=50238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 334.029506][T14460] netlink: get zone limit has 8 unknown bytes [ 334.468939][T14472] netlink: 'syz.2.3678': attribute type 30 has an invalid length. [ 334.608612][T14472] bond6: option arp_missed_max: invalid value (0) [ 334.637531][T14472] bond6: option arp_missed_max: allowed values 1 - 255 [ 334.646163][T14472] bond6 (unregistering): Released all slaves [ 334.760933][T14480] tipc: Started in network mode [ 334.784869][T14480] tipc: Node identity 32dc6a8af48f, cluster identity 4711 [ 334.814881][T14480] tipc: Enabled bearer , priority 0 [ 334.836954][T14482] syzkaller0: entered promiscuous mode [ 334.854559][T14482] syzkaller0: entered allmulticast mode [ 334.877531][T14480] tipc: Resetting bearer [ 334.906555][T14479] tipc: Resetting bearer [ 334.924056][T14479] tipc: Disabling bearer [ 335.598441][T14492] loop2: detected capacity change from 0 to 1764 [ 337.658185][ T28] audit: type=1400 audit(1781778741.173:2838): avc: denied { write } for pid=14503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.705258][T14518] GUP no longer grows the stack in syz.2.3692 (14518): 200000004000-200000007000 (200000002000) [ 337.760918][T14518] CPU: 0 UID: 0 PID: 14518 Comm: syz.2.3692 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 337.760955][T14518] Tainted: [W]=WARN [ 337.760962][T14518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 337.760975][T14518] Call Trace: [ 337.761040][T14518] [ 337.761063][T14518] __dump_stack+0x1d/0x30 [ 337.761092][T14518] dump_stack_lvl+0x95/0xd0 [ 337.761112][T14518] dump_stack+0x15/0x1b [ 337.761131][T14518] __get_user_pages+0x1b27/0x1f10 [ 337.761216][T14518] ? tick_program_event+0x79/0xc0 [ 337.761248][T14518] ? __rcu_read_unlock+0x4e/0x70 [ 337.761346][T14518] get_user_pages_remote+0x1d5/0x6b0 [ 337.761382][T14518] __access_remote_vm+0x156/0x4d0 [ 337.761424][T14518] access_remote_vm+0x32/0x40 [ 337.761506][T14518] proc_pid_cmdline_read+0x334/0x710 [ 337.761543][T14518] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 337.761583][T14518] vfs_readv+0x417/0x6d0 [ 337.761620][T14518] __x64_sys_preadv+0xfd/0x1c0 [ 337.761658][T14518] x64_sys_call+0x2915/0x3020 [ 337.761724][T14518] do_syscall_64+0x136/0x3c0 [ 337.761812][T14518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.761838][T14518] RIP: 0033:0x7f390f52ce59 [ 337.761854][T14518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.761872][T14518] RSP: 002b:00007f390df87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 337.761934][T14518] RAX: ffffffffffffffda RBX: 00007f390f7a5fa0 RCX: 00007f390f52ce59 [ 337.761953][T14518] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000007 [ 337.761981][T14518] RBP: 00007f390f5c2e6f R08: 00000000fffffff9 R09: 0000000000000000 [ 337.761994][T14518] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 337.762006][T14518] R13: 00007f390f7a6038 R14: 00007f390f7a5fa0 R15: 00007ffe7ad05d08 [ 337.762033][T14518] [ 337.957795][ T28] audit: type=1400 audit(1781778741.313:2839): avc: denied { write } for pid=14516 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.045258][T14522] tipc: Enabling of bearer rejected, failed to enable media [ 338.158507][T14528] hub 8-0:1.0: USB hub found [ 338.163385][T14528] hub 8-0:1.0: 8 ports detected [ 338.374133][T14540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3698'. [ 338.569770][T14532] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 338.569770][T14532] Please contact the netfilter-devel mailing list or update your nftables rules. [ 339.059271][T14555] loop2: detected capacity change from 0 to 512 [ 339.117594][T14555] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3703: bg 0: block 169: padding at end of block bitmap is not set [ 339.143924][T14555] loop2: lost filesystem error report for type 5 error -117 [ 339.146166][T14555] Quota error (device loop2): write_blk: dquota write failed [ 339.153724][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 339.153751][ C1] EXT4-fs (loop2): initial error at time 1781778742: ext4_validate_block_bitmap:441 [ 339.153786][ C1] EXT4-fs (loop2): last error at time 1781778742: ext4_validate_block_bitmap:441 [ 339.226865][T14555] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 339.256293][T14555] EXT4-fs error (device loop2): ext4_acquire_dquot:7032: comm syz.2.3703: Failed to acquire dquot type 0 [ 339.285790][T14555] loop2: lost filesystem error report for type 5 error -117 [ 339.286626][T14555] EXT4-fs (loop2): 1 truncate cleaned up [ 339.324572][T14555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.362941][T14555] ext4 filesystem being mounted at /696/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.519657][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3703'. [ 339.541312][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3703'. [ 339.603812][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.659737][T14553] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3702'. [ 339.991572][T14585] syzkaller0: entered promiscuous mode [ 340.004249][T14585] syzkaller0: entered allmulticast mode [ 340.030422][T14585] tipc: Enabled bearer , priority 0 [ 340.038018][T14584] tipc: Resetting bearer [ 340.067894][T14584] tipc: Disabling bearer [ 340.586243][ T28] audit: type=1326 audit(1781778744.153:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.2.3715" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390f52ce59 code=0x7ffc0000 [ 340.817785][ T28] audit: type=1326 audit(1781778744.163:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.2.3715" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390f52ce59 code=0x7ffc0000 [ 340.994825][ T28] audit: type=1326 audit(1781778744.163:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.2.3715" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390f52ce59 code=0x7ffc0000 [ 341.020451][ T28] audit: type=1326 audit(1781778744.163:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.2.3715" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390f52ce59 code=0x7ffc0000 [ 341.085641][ T28] audit: type=1326 audit(1781778744.163:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.2.3715" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f390f52ce59 code=0x7ffc0000 [ 341.165638][ T28] audit: type=1326 audit(1781778744.163:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.2.3715" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390f52ce59 code=0x7ffc0000 [ 341.211118][T14611] tipc: Enabling of bearer rejected, failed to enable media [ 341.248164][ T28] audit: type=1326 audit(1781778744.163:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.2.3715" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390f52ce59 code=0x7ffc0000 [ 341.295226][ T28] audit: type=1326 audit(1781778744.163:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.2.3715" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390f52ce59 code=0x7ffc0000 [ 341.415663][T14620] xt_hashlimit: size too large, truncated to 1048576 [ 342.316889][T14657] loop2: detected capacity change from 0 to 512 [ 342.343524][T14657] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 342.369464][T14657] EXT4-fs (loop2): orphan cleanup on readonly fs [ 342.383271][T14657] EXT4-fs warning (device loop2): ext4_enable_quotas:7267: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 342.465949][T14657] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 342.495885][T14657] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.3732: bad orphan inode 768 [ 342.535900][T14657] loop2: lost filesystem error report for type 5 error -117 [ 342.536606][T14657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 342.656034][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.831153][T14669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3736'. [ 344.668782][T14696] pim6reg: entered allmulticast mode [ 344.701952][T14701] pim6reg: left allmulticast mode [ 345.750479][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 345.750502][ T28] audit: type=1400 audit(1781778749.253:2917): avc: denied { ioctl } for pid=14717 comm="syz.5.3752" path="socket:[50057]" dev="sockfs" ino=50057 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 346.615243][T14730] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3757'. [ 346.642505][T14730] veth0_to_bond: default FDB implementation only supports local addresses [ 347.618286][T14730] netlink: 'syz.0.3757': attribute type 2 has an invalid length. [ 347.649907][T14730] netlink: 'syz.0.3757': attribute type 1 has an invalid length. [ 347.849384][T14730] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3757'. [ 348.070016][ T28] audit: type=1400 audit(1781778751.653:2918): avc: denied { getopt } for pid=14752 comm="syz.2.3760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 349.222270][T14782] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.3767'. [ 349.253947][T14782] netlink: zone id is out of range [ 349.290557][T14782] netlink: zone id is out of range [ 349.579115][T14792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3771'. [ 350.095632][T14806] syzkaller0: entered promiscuous mode [ 350.127452][T14806] syzkaller0: entered allmulticast mode [ 350.447399][ T28] audit: type=1400 audit(1781778754.023:2919): avc: denied { create } for pid=14812 comm="syz.1.3779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 351.563273][T14839] loop2: detected capacity change from 0 to 512 [ 351.620018][ T28] audit: type=1400 audit(1781778755.203:2920): avc: denied { mounton } for pid=14838 comm="syz.2.3787" path="/718/file0" dev="tmpfs" ino=3782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 351.660792][T14839] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 351.938141][T14839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 352.008690][T14855] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3791'. [ 352.079488][T14839] ext4 filesystem being mounted at /718/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.191479][T14839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 352.236977][T14839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3787'. [ 352.863772][T14873] loop2: detected capacity change from 0 to 512 [ 352.935379][T14873] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 353.026786][ T28] audit: type=1400 audit(1781778756.353:2921): avc: denied { name_bind } for pid=14859 comm="syz.0.3793" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 353.059027][T14873] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 353.168665][T14873] EXT4-fs (loop2): 1 truncate cleaned up [ 353.178458][T14873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.325459][T14873] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 4: comm syz.2.3797: path /720/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 353.433889][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.131664][T14892] tipc: Enabling of bearer rejected, failed to enable media [ 354.150690][ T28] audit: type=1400 audit(1781778757.733:2922): avc: denied { mount } for pid=14890 comm="syz.4.3803" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 354.322779][T14902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3804'. [ 354.561973][ T28] audit: type=1400 audit(1781779014.146:2923): avc: denied { write } for pid=14916 comm="syz.2.3810" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 355.133454][T14948] tipc: Enabling of bearer rejected, failed to enable media [ 355.399105][T14964] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14964 comm=syz.5.3823 [ 356.864228][ T28] audit: type=1326 audit(1781779016.436:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15000 comm="syz.5.3832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8bf5ce59 code=0x7ffc0000 [ 356.956727][ T28] audit: type=1326 audit(1781779016.436:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15000 comm="syz.5.3832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8bf5ce59 code=0x7ffc0000 [ 356.986528][ T28] audit: type=1326 audit(1781779016.446:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15000 comm="syz.5.3832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8bf5ce59 code=0x7ffc0000 [ 357.024643][ T28] audit: type=1326 audit(1781779016.446:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15000 comm="syz.5.3832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8bf5ce59 code=0x7ffc0000 [ 357.084654][ T28] audit: type=1326 audit(1781779016.446:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15000 comm="syz.5.3832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fce8bf5ce59 code=0x7ffc0000 [ 357.157791][ T28] audit: type=1326 audit(1781779016.496:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15000 comm="syz.5.3832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fce8bf1d68e code=0x7ffc0000 [ 357.237410][ T28] audit: type=1326 audit(1781779016.506:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15000 comm="syz.5.3832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fce8bf1d68e code=0x7ffc0000 [ 357.313173][ T28] audit: type=1326 audit(1781779016.526:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15000 comm="syz.5.3832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fce8bf1d68e code=0x7ffc0000 [ 357.390883][ T28] audit: type=1326 audit(1781779016.526:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15000 comm="syz.5.3832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fce8bf1d68e code=0x7ffc0000 [ 357.476694][ T28] audit: type=1326 audit(1781779016.546:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15000 comm="syz.5.3832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fce8bf1d68e code=0x7ffc0000 [ 357.741308][T15011] netlink: 'syz.4.3834': attribute type 21 has an invalid length. [ 357.834471][T15011] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3834'. [ 357.932587][T15024] netlink: 276 bytes leftover after parsing attributes in process `syz.4.3837'. [ 357.969230][T15024] netlink: 276 bytes leftover after parsing attributes in process `syz.4.3837'. [ 358.237867][T15042] netlink: 'syz.0.3842': attribute type 4 has an invalid length. [ 359.593935][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3854'. [ 359.631501][T15083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3854'. [ 359.659294][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3854'. [ 359.704387][T15083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3854'. [ 359.847410][T15096] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3862'. [ 359.913191][T15101] netlink: 'syz.0.3864': attribute type 1 has an invalid length. [ 359.936198][T15101] 8021q: adding VLAN 0 to HW filter on device bond8 [ 359.962886][T15101] veth9: entered allmulticast mode [ 359.979873][T15101] bond8: (slave veth9): Enslaving as an active interface with a down link [ 359.996137][T15101] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 360.053050][T15101] macvlan2: entered promiscuous mode [ 360.065336][T15101] macvlan2: entered allmulticast mode [ 360.082293][T15101] bond8: entered promiscuous mode [ 360.093974][T15101] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 360.108954][T15101] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 360.128479][T15101] bond8: left promiscuous mode [ 360.307655][T15110] loop2: detected capacity change from 0 to 512 [ 360.317168][T15110] EXT4-fs: Ignoring removed orlov option [ 360.323881][T15110] EXT4-fs: Ignoring removed mblk_io_submit option [ 360.364045][T15110] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.3868: corrupted in-inode xattr: e_value size too large [ 360.487832][T15110] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 360.493282][T15110] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3868: couldn't read orphan inode 15 (err -117) [ 360.503381][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 360.503411][ C1] EXT4-fs (loop2): initial error at time 1781779020: ext4_iget_extra_inode:5128: inode 15 [ 360.503608][ C1] EXT4-fs (loop2): last error at time 1781779020: ext4_iget_extra_inode:5128: inode 15 [ 360.561217][T15110] loop2: lost filesystem error report for type 5 error -117 [ 360.567589][T15110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.304724][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.349789][T15135] netlink: 'syz.5.3875': attribute type 6 has an invalid length. [ 362.398407][T15171] netlink: 'syz.2.3887': attribute type 17 has an invalid length. [ 362.446520][T15173] netlink: 'syz.4.3888': attribute type 1 has an invalid length. [ 362.482976][T15173] 8021q: adding VLAN 0 to HW filter on device bond17 [ 362.520154][T15173] macvlan2: entered promiscuous mode [ 362.541395][T15173] macvlan2: entered allmulticast mode [ 362.562860][T15173] bond17: entered allmulticast mode [ 362.597898][T15173] bond17: entered promiscuous mode [ 362.618838][T15173] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 362.655972][T15173] team0: Port device macvlan2 added [ 362.789458][T15165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3884'. [ 362.789488][T15185] syzkaller0: entered promiscuous mode [ 362.806834][T15185] syzkaller0: entered allmulticast mode [ 362.844011][T15185] tipc: Enabled bearer , priority 0 [ 362.854457][T15184] tipc: Resetting bearer [ 362.907454][T15184] tipc: Disabling bearer [ 364.475694][T15229] loop2: detected capacity change from 0 to 512 [ 364.520579][T15229] EXT4-fs: Ignoring removed oldalloc option [ 364.582072][T15229] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 364.608482][T15229] EXT4-fs (loop2): orphan cleanup on readonly fs [ 364.636634][T15238] netlink: 'syz.5.3910': attribute type 10 has an invalid length. [ 364.649554][T15229] EXT4-fs warning (device loop2): ext4_enable_quotas:7267: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 364.698486][T15229] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 364.728501][T15229] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.3908: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 364.777010][T15229] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 364.777220][T15229] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3908: couldn't read orphan inode 13 (err -117) [ 364.798284][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 364.798321][ C0] EXT4-fs (loop2): last error at time 1781779024: ext4_ext_check_inode:521: inode 13 [ 364.815992][T15238] team0 (unregistering): Port device team_slave_0 removed [ 364.834849][T15229] loop2: lost filesystem error report for type 5 error -117 [ 364.835493][T15229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 364.897781][T15229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3908'. [ 364.918322][T15238] team0 (unregistering): Port device team_slave_1 removed [ 365.028940][T15229] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 365.066845][T15229] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 365.097161][T15229] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2840c09c, mo2=0002] [ 365.180978][T15229] System zones: 0-2, 18-18, 34-34 [ 365.190023][T15229] EXT4-fs warning (device loop2): ext4_enable_quotas:7267: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 365.382441][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.483392][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 365.483465][ T28] audit: type=1400 audit(1781779025.065:3001): avc: denied { write } for pid=15265 comm="syz.2.3919" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 365.516378][T15266] random: crng reseeded on system resumption [ 365.549082][ T28] audit: type=1400 audit(1781779025.065:3002): avc: denied { open } for pid=15265 comm="syz.2.3919" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 365.630157][T15273] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3923'. [ 365.686137][T15277] tipc: Enabling of bearer rejected, failed to enable media [ 365.771848][T15273] loop2: detected capacity change from 0 to 1024 [ 365.824271][T15273] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 365.834389][T15273] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 365.842702][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3926'. [ 365.856629][T15273] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: inode #32: comm syz.2.3923: iget: special inode unallocated [ 365.877453][T15273] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 365.879002][T15273] EXT4-fs (loop2): no journal found [ 365.888403][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 365.888471][ C1] EXT4-fs (loop2): initial error at time 1781779025: ext4_get_journal_inode:5896: inode 32 [ 365.888585][ C1] EXT4-fs (loop2): last error at time 1781779025: ext4_get_journal_inode:5896: inode 32 [ 366.015902][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3926'. [ 366.103259][ T28] audit: type=1400 audit(1781779025.685:3003): avc: denied { map } for pid=15291 comm="syz.2.3928" path="socket:[51659]" dev="sockfs" ino=51659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 366.132914][ T28] audit: type=1400 audit(1781779025.685:3004): avc: denied { accept } for pid=15291 comm="syz.2.3928" path="socket:[51659]" dev="sockfs" ino=51659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 366.791225][T15328] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3937'. [ 366.815541][T15322] 8021q: adding VLAN 0 to HW filter on device bond11 [ 366.897476][T15330] netlink: 'syz.2.3939': attribute type 1 has an invalid length. [ 366.911705][T15330] 8021q: adding VLAN 0 to HW filter on device bond6 [ 366.936344][T15330] 8021q: adding VLAN 0 to HW filter on device bond6 [ 366.947686][T15330] bond6: (slave gre2): The slave device specified does not support setting the MAC address [ 366.977650][T15330] bond6: (slave gre2): Error -95 calling set_mac_address [ 367.000539][T15333] tipc: Enabling of bearer rejected, failed to enable media [ 367.025060][T15338] gretap1: entered promiscuous mode [ 367.047787][T15338] bond6: (slave gretap1): making interface the new active one [ 367.084125][T15338] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 367.108993][T15343] macvlan2: entered promiscuous mode [ 367.152908][T15343] macvlan2: entered allmulticast mode [ 367.169793][T15343] bond6: entered promiscuous mode [ 367.176763][T15343] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 367.212947][T15343] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 367.229381][T15343] bond6: left promiscuous mode [ 367.367495][T15359] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3947'. [ 367.454056][T15365] tipc: Bearer : already 2 bearers with priority 10 [ 367.563166][T15365] tipc: Bearer : trying with adjusted priority [ 367.574082][T15365] tipc: New replicast peer: 255.255.255.255 [ 367.582472][T15365] tipc: Enabled bearer , priority 9 [ 367.858230][T15371] netlink: 'syz.2.3952': attribute type 1 has an invalid length. [ 367.957104][T15371] 8021q: adding VLAN 0 to HW filter on device bond7 [ 368.025842][T15375] bond7: (slave gretap2): making interface the new active one [ 368.069495][T15375] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 368.147043][T15371] bond7: (slave veth21): Enslaving as an active interface with a down link [ 368.304717][T15371] veth0_virt_wifi: entered promiscuous mode [ 368.332660][T15371] bond7: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 368.563295][T15400] loop2: detected capacity change from 0 to 512 [ 368.758402][T15400] EXT4-fs: inline encryption not supported [ 369.218498][T15400] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.3959: bad orphan inode 15 [ 369.241625][T15400] loop2: lost filesystem error report for type 5 error -117 [ 369.241833][T15400] ext4_test_bit(bit=14, block=5) = 0 [ 369.249220][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 369.249240][ C1] EXT4-fs (loop2): initial error at time 1781779284: ext4_orphan_get:1425 [ 369.249272][ C1] EXT4-fs (loop2): last error at time 1781779284: ext4_orphan_get:1425 [ 369.279404][T15400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.576939][T15409] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 370.123478][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.763726][T15451] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3977'. [ 370.921829][T15465] netlink: 'syz.0.3982': attribute type 1 has an invalid length. [ 370.943037][T15465] netlink: 'syz.0.3982': attribute type 2 has an invalid length. [ 371.212202][T15475] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3984'. [ 372.181563][T15500] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3993'. [ 372.280371][T15506] netlink: 'syz.5.3994': attribute type 1 has an invalid length. [ 372.302267][T15506] netlink: 'syz.5.3994': attribute type 2 has an invalid length. [ 372.337780][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3996'. [ 372.371648][T15503] A link change request failed with some changes committed already. Interface sit3 may have been left with an inconsistent configuration, please check. [ 372.404591][T15508] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 372.415279][T15508] gretap3: entered allmulticast mode [ 372.505302][T15513] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3998'. [ 372.534903][T15515] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 372.580260][T15515] syzkaller0: entered promiscuous mode [ 372.591241][T15515] syzkaller0: entered allmulticast mode [ 372.762829][ T28] audit: type=1400 audit(1781779288.346:3005): avc: denied { map } for pid=15530 comm="syz.2.4005" path="/proc/1923/net/ip_tables_targets" dev="proc" ino=4026532636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 372.893344][T15536] loop2: detected capacity change from 0 to 512 [ 372.917926][T15536] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 372.950905][T15536] EXT4-fs (loop2): 1 truncate cleaned up [ 372.972629][T15536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.170284][ T28] audit: type=1400 audit(1781779288.756:3006): avc: denied { write } for pid=15534 comm="syz.2.4007" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 374.511769][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.284795][T15554] loop2: detected capacity change from 0 to 512 [ 375.362586][T15564] futex_wake_op: syz.1.4013 tries to shift op by 144; fix this program [ 375.886427][T15554] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 375.934353][T15554] EXT4-fs (loop2): orphan cleanup on readonly fs [ 375.988457][T15554] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 376.021800][T15554] EXT4-fs warning (device loop2): ext4_enable_quotas:7267: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 376.049598][T15554] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 376.094239][T15554] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #16: comm syz.2.4014: inode has both inline data and extents flags [ 376.127218][T15554] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 376.130073][T15554] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.4014: couldn't read orphan inode 16 (err -117) [ 376.140779][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 376.140873][ C0] EXT4-fs (loop2): initial error at time 1781779291: ext4_orphan_get:1399: inode 16 [ 376.140992][ C0] EXT4-fs (loop2): last error at time 1781779291: ext4_orphan_get:1399: inode 16 [ 376.227217][T15554] loop2: lost filesystem error report for type 5 error -117 [ 376.243087][T15554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 376.438749][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.540266][T15591] netlink: 'syz.2.4019': attribute type 1 has an invalid length. [ 376.553009][T15591] netlink: 'syz.2.4019': attribute type 2 has an invalid length. [ 377.420559][T15613] A link change request failed with some changes committed already. Interface sit2 may have been left with an inconsistent configuration, please check. [ 377.893697][T15620] loop2: detected capacity change from 0 to 512 [ 377.969664][T15620] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 378.044616][T15620] EXT4-fs (loop2): 1 truncate cleaned up [ 378.129525][T15620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.236162][ T28] audit: type=1400 audit(1781779293.816:3007): avc: denied { write } for pid=15618 comm="syz.2.4035" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 378.313478][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.874130][T15640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.928524][T15640] tipc: Resetting bearer [ 378.957578][T15640] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.991040][T15640] tipc: Resetting bearer [ 379.021057][T15640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.088327][T15640] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 379.213558][T12865] bond12: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 379.239588][T12865] bond12: (slave veth0_to_bond): making interface the new active one [ 379.253109][T12865] bond12: active interface up! [ 379.288728][ T28] audit: type=1400 audit(1781779294.876:3008): avc: denied { unmount } for pid=15656 comm="syz.1.4059" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 379.812234][ T28] audit: type=1326 audit(1781779295.396:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15679 comm="syz.2.4055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390f52ce59 code=0x7ffc0000 [ 379.874562][ T28] audit: type=1326 audit(1781779295.396:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15679 comm="syz.2.4055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390f52ce59 code=0x7ffc0000 [ 379.916357][ T28] audit: type=1326 audit(1781779295.396:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15679 comm="syz.2.4055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390f52ce59 code=0x7ffc0000 [ 379.996290][ T28] audit: type=1326 audit(1781779295.426:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15679 comm="syz.2.4055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f390f52ce59 code=0x7ffc0000 [ 380.039224][ T28] audit: type=1326 audit(1781779295.426:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15679 comm="syz.2.4055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390f52ce59 code=0x7ffc0000 [ 380.066047][ T28] audit: type=1326 audit(1781779295.426:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15679 comm="syz.2.4055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390f52ce59 code=0x7ffc0000 [ 380.092666][ T28] audit: type=1326 audit(1781779295.426:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15679 comm="syz.2.4055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390f52ce59 code=0x7ffc0000 [ 380.119405][ T28] audit: type=1326 audit(1781779295.426:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15679 comm="syz.2.4055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f390f52ce59 code=0x7ffc0000 [ 382.164305][T15703] loop2: detected capacity change from 0 to 512 [ 382.237893][T15703] EXT4-fs warning (device loop2): read_mmp_block:110: Error -74 while reading MMP block 17 [ 382.274298][T15715] Set syz1 is full, maxelem 6117 reached [ 382.599465][T15727] bridge0: port 3(gretap0) entered blocking state [ 382.606043][T15727] bridge0: port 3(gretap0) entered forwarding state [ 382.612809][T15727] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.619919][T15727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.627309][T15727] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.634442][T15727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.034568][T15735] futex_wake_op: syz.4.4067 tries to shift op by 144; fix this program [ 385.140649][T15766] netlink: 'syz.1.4083': attribute type 2 has an invalid length. [ 385.175998][T15766] netlink: 'syz.1.4083': attribute type 3 has an invalid length. [ 385.247799][T15766] netlink: 11870 bytes leftover after parsing attributes in process `syz.1.4083'. [ 387.367385][T15819] netlink: 'syz.4.4099': attribute type 2 has an invalid length. [ 387.375947][T15819] netlink: 'syz.4.4099': attribute type 3 has an invalid length. [ 387.413995][T15819] netlink: 11870 bytes leftover after parsing attributes in process `syz.4.4099'. [ 387.860826][T15835] netlink: 'syz.2.4115': attribute type 2 has an invalid length. [ 387.876357][T15835] netlink: 'syz.2.4115': attribute type 3 has an invalid length. [ 387.913090][T15835] netlink: 11870 bytes leftover after parsing attributes in process `syz.2.4115'. [ 388.801384][T15852] bridge0: entered allmulticast mode [ 389.466086][T15874] tipc: Enabling of bearer rejected, failed to enable media [ 390.624420][T15916] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 390.779775][T15923] tipc: Enabling of bearer rejected, failed to enable media [ 390.803992][T15925] tipc: Enabling of bearer rejected, failed to enable media [ 390.886871][T15924] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4145'. [ 391.043735][T15938] futex_wake_op: syz.1.4135 tries to shift op by 144; fix this program [ 391.825269][T15943] netlink: 'syz.2.4140': attribute type 1 has an invalid length. [ 391.893787][T15943] 8021q: adding VLAN 0 to HW filter on device bond8 [ 391.986564][T15943] bond4: (slave veth0_to_bond): Releasing active interface [ 392.038999][T15943] bond8: (slave veth0_to_bond): making interface the new active one [ 392.060897][T15943] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 392.094117][T15953] bond8: entered promiscuous mode [ 392.100607][T15953] veth0_to_bond: entered promiscuous mode [ 392.108692][T15953] bond8: entered allmulticast mode [ 392.114339][T15953] veth0_to_bond: entered allmulticast mode [ 392.145903][T15963] macvlan2: entered promiscuous mode [ 392.160213][T15963] macvlan2: entered allmulticast mode [ 392.168353][T15963] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 392.179882][T15963] bond8: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 392.356879][T15976] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 392.502058][T15989] futex_wake_op: syz.4.4153 tries to shift op by 144; fix this program [ 392.653083][T15987] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4154'. [ 393.154067][T16005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4159'. [ 394.515061][T16054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4174'. [ 394.653944][T16050] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4169'. [ 395.177728][T16064] futex_wake_op: syz.0.4176 tries to shift op by 144; fix this program [ 396.154646][T16082] pim6reg: entered allmulticast mode [ 396.165954][T16085] pim6reg: left allmulticast mode [ 396.770444][T16096] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4187'. [ 398.257117][T16128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4210'. [ 400.288728][T16155] futex_wake_op: syz.2.4204 tries to shift op by 144; fix this program [ 402.476523][T16178] netlink: 'syz.1.4213': attribute type 4 has an invalid length. [ 402.927638][T16207] futex_wake_op: syz.2.4224 tries to shift op by 144; fix this program [ 403.849880][T16216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4236'. [ 406.498831][T16263] futex_wake_op: syz.2.4238 tries to shift op by 144; fix this program [ 407.051023][T16269] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4242'. [ 408.976555][ T3296] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 409.052648][ T3296] CPU: 0 UID: 0 PID: 3296 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 409.052685][ T3296] Tainted: [W]=WARN [ 409.052694][ T3296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 409.052723][ T3296] Call Trace: [ 409.052732][ T3296] [ 409.052741][ T3296] __dump_stack+0x1d/0x30 [ 409.052764][ T3296] dump_stack_lvl+0x95/0xd0 [ 409.052788][ T3296] dump_stack+0x15/0x1b [ 409.052812][ T3296] dump_header+0x80/0x240 [ 409.052839][ T3296] oom_kill_process+0x295/0x350 [ 409.052934][ T3296] out_of_memory+0x981/0xbc0 [ 409.052967][ T3296] try_charge_memcg+0x621/0xa00 [ 409.053017][ T3296] charge_memcg+0x6d/0x120 [ 409.053050][ T3296] __mem_cgroup_charge+0x28/0xb0 [ 409.053082][ T3296] filemap_add_folio+0x110/0x350 [ 409.053112][ T3296] __filemap_get_folio_mpol+0x32e/0x840 [ 409.053215][ T3296] filemap_fault+0x452/0xb60 [ 409.053262][ T3296] handle_mm_fault+0x167a/0x2da0 [ 409.053301][ T3296] do_user_addr_fault+0x634/0x1060 [ 409.053470][ T3296] ? trace_page_fault_user+0x1f/0xa0 [ 409.053500][ T3296] exc_page_fault+0x62/0xa0 [ 409.053534][ T3296] asm_exc_page_fault+0x26/0x30 [ 409.053582][ T3296] RIP: 0033:0x7f390f3fae74 [ 409.053599][ T3296] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 a8 ed 00 48 01 d1 [ 409.053622][ T3296] RSP: 002b:00007ffe7ad06070 EFLAGS: 00010206 [ 409.053646][ T3296] RAX: 0000001b32824000 RBX: 000000000000080e RCX: 00000000000639c0 [ 409.053739][ T3296] RDX: 000000000ea2f2d9 RSI: 00007ffe7ad06100 RDI: 0000000000000001 [ 409.053756][ T3296] RBP: 00007ffe7ad060ac R08: 0000000037d57984 R09: 3fffffffffffffff [ 409.053770][ T3296] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 409.053789][ T3296] R13: 00000000000927c0 R14: 0000000000063c58 R15: 00007ffe7ad06100 [ 409.053816][ T3296] [ 409.053840][ T3296] memory: usage 300576kB, limit 307200kB, failcnt 429 [ 409.271001][ T3296] memory+swap: usage 366564kB, limit 9007199254740988kB, failcnt 0 [ 409.327541][ T3296] kmem: usage 262044kB, limit 9007199254740988kB, failcnt 0 [ 409.401670][ T3296] Memory cgroup stats for /syz2: [ 409.401978][ T3296] cache 8458240 [ 409.474488][ T3296] rss 204800 [ 409.658567][ T3296] shmem 8454144 [ 409.754425][ T3296] mapped_file 0 [ 409.846070][ T3296] dirty 0 [ 409.916742][ T3296] writeback 0 [ 409.983533][ T3296] workingset_refault_anon 4156 [ 410.076939][ T3296] workingset_refault_file 8300 [ 410.175438][ T3296] swap 70000640 [ 410.234902][ T3296] swapcached 94597120 [ 410.304341][ T3296] pgpgin 406259 [ 410.342911][ T3296] pgpgout 404142 [ 410.411587][ T3296] pgfault 342676 [ 410.466223][ T3296] pgmajfault 1150 [ 410.649513][ T3296] inactive_anon 3641344 [ 410.735278][ T3296] active_anon 5001216 [ 410.756482][ T3296] inactive_file 4096 [ 411.112471][ T3296] active_file 0 [ 411.449468][ T3296] unevictable 12288 [ 411.507441][ T3296] hierarchical_memory_limit 314572800 [ 411.588426][ T3296] hierarchical_memsw_limit 9223372036854771712 [ 411.673263][ T3296] total_cache 8458240 [ 411.718927][ T3296] total_rss 204800 [ 411.758163][ T3296] total_shmem 8454144 [ 411.789754][ T3296] total_mapped_file 0 [ 411.813975][ T3296] total_dirty 0 [ 411.829508][ T3296] total_writeback 0 [ 411.849410][ T3296] total_workingset_refault_anon 4156 [ 411.873788][ T3296] total_workingset_refault_file 8300 [ 411.957624][ T3296] total_swap 70000640 [ 412.021441][ T3296] total_swapcached 94597120 [ 412.026152][ T3296] total_pgpgin 406259 [ 412.065740][ T3296] total_pgpgout 404142 [ 412.085991][ T3296] total_pgfault 342676 [ 412.113450][ T3296] total_pgmajfault 1150 [ 412.126603][ T3296] total_inactive_anon 3641344 [ 412.142167][ T3296] total_active_anon 5001216 [ 412.158240][ T3296] total_inactive_file 4096 [ 412.172460][ T3296] total_active_file 0 [ 412.183611][ T3296] total_unevictable 12288 [ 412.192569][ T3296] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2615,pid=10744,uid=0 [ 412.238836][ T3296] Memory cgroup out of memory: Killed process 10744 (syz.2.2615) total-vm:96084kB, anon-rss:1232kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 413.242034][T16397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4275'. [ 413.301637][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 413.301656][ T28] audit: type=1400 audit(1781779584.883:3077): avc: denied { execstack } for pid=16404 comm="syz.1.4277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 413.416478][T16415] netlink: 'syz.5.4278': attribute type 1 has an invalid length. [ 413.695484][T16402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4276'. [ 414.931913][T16498] netlink: 'syz.4.4291': attribute type 1 has an invalid length. [ 414.964485][T16498] 8021q: adding VLAN 0 to HW filter on device bond18 [ 415.010316][T16498] veth19: entered allmulticast mode [ 415.021750][T16498] bond18: (slave veth19): Enslaving as an active interface with a down link [ 415.054281][T16498] bond12: (slave veth0_to_bond): Releasing active interface [ 415.081731][T16498] bond18: (slave veth0_to_bond): making interface the new active one [ 415.095308][T16498] veth0_to_bond: entered promiscuous mode [ 415.101418][T16498] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 415.154781][T16504] macvlan3: entered promiscuous mode [ 415.179381][T16504] macvlan3: entered allmulticast mode [ 415.195670][T16504] bond18: entered promiscuous mode [ 415.206081][T16504] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 415.249257][ T28] audit: type=1326 audit(1781779586.823:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.0.4288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d7dce59 code=0x7ffc0000 [ 415.249487][T16504] bond18: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 415.297015][T16504] bond18: left promiscuous mode [ 415.323083][ T28] audit: type=1326 audit(1781779586.823:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.0.4288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d7dce59 code=0x7ffc0000 [ 415.376356][ T28] audit: type=1326 audit(1781779586.953:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.0.4288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d7dce59 code=0x7ffc0000 [ 415.455325][ T28] audit: type=1326 audit(1781779586.953:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.0.4288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d7dce59 code=0x7ffc0000 [ 415.527086][ T28] audit: type=1326 audit(1781779586.953:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.0.4288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f940d7dce59 code=0x7ffc0000 [ 415.682046][ T28] audit: type=1326 audit(1781779586.953:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.0.4288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d7dce59 code=0x7ffc0000 [ 415.708066][ T28] audit: type=1326 audit(1781779586.953:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.0.4288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d7dce59 code=0x7ffc0000 [ 415.752993][T16523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4298'. [ 415.755049][ T28] audit: type=1326 audit(1781779586.953:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.0.4288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d7dce59 code=0x7ffc0000 [ 415.775658][T16523] netlink: 'syz.2.4298': attribute type 5 has an invalid length. [ 415.985349][ T28] audit: type=1326 audit(1781779586.953:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.0.4288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f940d7dce59 code=0x7ffc0000 [ 417.228085][T16542] tipc: Enabling of bearer rejected, failed to enable media [ 417.298661][T16548] netlink: 'syz.4.4305': attribute type 17 has an invalid length. [ 418.267508][T16572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4313'. [ 420.248882][T16600] IPVS: Unknown mcast interface: bridge_slave_0 [ 420.260332][T16600] IPVS: Error connecting to the multicast addr [ 420.881504][T16608] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4321'. [ 421.249721][T16608] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 421.279925][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 421.279939][ T28] audit: type=1326 audit(1781779592.863:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16614 comm="syz.0.4323" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d7dce59 code=0x7ffc0000 [ 421.384597][T16608] 0ªî{X¹¦: entered allmulticast mode [ 421.395120][ T28] audit: type=1326 audit(1781779592.863:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16614 comm="syz.0.4323" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d7dce59 code=0x7ffc0000 [ 421.449899][T16608] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 421.479798][ T28] audit: type=1326 audit(1781779592.863:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16614 comm="syz.0.4323" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d7dce59 code=0x7ffc0000 [ 421.507460][T16617] tipc: Enabling of bearer rejected, failed to enable media [ 421.559240][ T28] audit: type=1326 audit(1781779592.863:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16614 comm="syz.0.4323" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f940d7dce59 code=0x7ffc0000 [ 421.656361][ T28] audit: type=1326 audit(1781779592.863:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16614 comm="syz.0.4323" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d7dce59 code=0x7ffc0000 [ 421.743423][ T28] audit: type=1326 audit(1781779592.863:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16614 comm="syz.0.4323" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d7dce59 code=0x7ffc0000 [ 421.827450][T12868] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.857973][T12868] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.906936][ T28] audit: type=1326 audit(1781779592.893:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16614 comm="syz.0.4323" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d7dce59 code=0x7ffc0000 [ 421.942172][T12868] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.973494][T12868] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.025087][ T28] audit: type=1326 audit(1781779592.893:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16614 comm="syz.0.4323" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d7dce59 code=0x7ffc0000 [ 422.131471][ T28] audit: type=1326 audit(1781779592.893:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16614 comm="syz.0.4323" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f940d7dce59 code=0x7ffc0000 [ 422.198892][ T28] audit: type=1326 audit(1781779592.893:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16614 comm="syz.0.4323" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d7dce59 code=0x7ffc0000 [ 424.577667][T16691] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4348'. [ 424.663447][T16691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.889811][T16700] netlink: 'syz.1.4349': attribute type 10 has an invalid length. [ 425.004445][T16700] team0: Device wg2 is of different type [ 425.369008][T16710] netlink: 'syz.0.4354': attribute type 1 has an invalid length. [ 425.478436][T16710] xt_socket: unknown flags 0x48 [ 426.017182][T16730] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4359'. [ 426.116524][T16740] tipc: Failed to remove unknown binding: 66,0,0/0:199082628/199082629 [ 426.133976][T16740] tipc: Failed to remove unknown binding: 66,0,0/0:199082628/199082629 [ 426.276546][T16745] tipc: Resetting bearer [ 426.300713][T16745] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 426.357183][T16745] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 426.568236][T16758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4368'. [ 426.591428][T16758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4368'. [ 427.193614][T16767] netlink: 'syz.0.4372': attribute type 1 has an invalid length. [ 427.624035][T12842] veth0_to_bond: left promiscuous mode [ 430.062786][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4389'. [ 430.080915][T16820] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4389'. [ 430.106566][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4389'. [ 430.116020][T12877] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.138204][T12877] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.158153][T16820] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4389'. [ 430.329312][T12877] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.337773][T12877] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.508427][T16822] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4390'. [ 431.646370][T16822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4390'. [ 434.653970][T16884] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4409'. [ 435.364023][T16879] tipc: Resetting bearer [ 436.738606][T16899] netlink: 'syz.2.4413': attribute type 10 has an invalid length. [ 436.854322][T16879] bond17: left allmulticast mode [ 436.859542][T16879] bond17: left promiscuous mode [ 436.915197][T16884] 0ªî{X¹¦: renamed from gretap0 [ 436.929349][T16884] 0ªî{X¹¦: entered allmulticast mode [ 436.935538][T16884] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 436.964487][T16896] IPVS: Unknown mcast interface: syz_tun [ 436.989487][T16899] team0: Device wg2 is of different type [ 437.006719][T12842] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.017346][T12842] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.040555][T16908] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4415'. [ 437.056317][T16908] A link change request failed with some changes committed already. Interface 26±ÿ]×0¢ÊÞª may have been left with an inconsistent configuration, please check. [ 437.086515][T12842] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.110517][T12842] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.058849][T16939] bridge0: port 3(gretap0) entered disabled state [ 438.104027][T16939] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.111256][T16939] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.201856][T16939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.221796][T16939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.351835][T12868] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.426728][T12868] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.441359][T12868] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.450052][T12868] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.623418][T16959] netlink: 'syz.4.4430': attribute type 10 has an invalid length. [ 438.733407][T16959] team0: Device wg2 is of different type [ 442.390898][T16980] netlink: 'syz.4.4435': attribute type 1 has an invalid length. [ 442.502176][T16980] xt_socket: unknown flags 0x48 [ 442.842942][T16992] tipc: Failed to remove unknown binding: 66,0,0/10005162:1917100212/1917100213 [ 442.956051][T16992] tipc: Failed to remove unknown binding: 66,0,0/10005162:1917100212/1917100213 [ 447.384224][T17043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4455'. [ 448.390745][T17079] netlink: 'syz.0.4466': attribute type 1 has an invalid length. [ 448.410953][T17079] 8021q: adding VLAN 0 to HW filter on device bond9 [ 448.429525][T17079] macvlan2: entered promiscuous mode [ 448.435045][T17079] macvlan2: entered allmulticast mode [ 448.437633][T17084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4467'. [ 448.471094][T17084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4467'. [ 448.487706][T17085] bond9: (slave ip6gretap4): making interface the new active one [ 448.496364][T17085] bond9: (slave ip6gretap4): Enslaving as an active interface with an up link [ 451.948583][T17150] futex_wake_op: syz.4.4501 tries to shift op by 144; fix this program [ 452.212138][T17156] netlink: 'syz.0.4494': attribute type 17 has an invalid length. [ 452.734048][T17174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4502'. [ 454.096257][T17217] netlink: 'syz.1.4516': attribute type 17 has an invalid length. [ 454.728461][T17229] ================================================================== [ 454.736702][T17229] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 454.745349][T17229] [ 454.747742][T17229] write to 0xffff88810a45da60 of 8 bytes by task 17228 on cpu 1: [ 454.755485][T17229] shmem_file_splice_read+0x401/0x590 [ 454.760910][T17229] splice_direct_to_actor+0x261/0x680 [ 454.766333][T17229] do_splice_direct+0x119/0x1a0 [ 454.771237][T17229] do_sendfile+0x37d/0x640 [ 454.775724][T17229] __x64_sys_sendfile64+0x105/0x150 [ 454.780960][T17229] x64_sys_call+0x2dc4/0x3020 [ 454.785684][T17229] do_syscall_64+0x136/0x3c0 [ 454.790335][T17229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.796284][T17229] [ 454.798640][T17229] write to 0xffff88810a45da60 of 8 bytes by task 17229 on cpu 0: [ 454.806387][T17229] shmem_file_splice_read+0x401/0x590 [ 454.811795][T17229] splice_direct_to_actor+0x261/0x680 [ 454.817232][T17229] do_splice_direct+0x119/0x1a0 [ 454.822223][T17229] do_sendfile+0x37d/0x640 [ 454.826679][T17229] __x64_sys_sendfile64+0x105/0x150 [ 454.831924][T17229] x64_sys_call+0x2dc4/0x3020 [ 454.836640][T17229] do_syscall_64+0x136/0x3c0 [ 454.841282][T17229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.847222][T17229] [ 454.849572][T17229] value changed: 0x0000000000001ccb -> 0x0000000000001cd3 [ 454.856715][T17229] [ 454.859077][T17229] Reported by Kernel Concurrency Sanitizer on: [ 454.865291][T17229] CPU: 0 UID: 0 PID: 17229 Comm: syz.1.4522 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 454.876352][T17229] Tainted: [W]=WARN [ 454.880187][T17229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 454.890365][T17229] ==================================================================