last executing test programs: 2m23.803982526s ago: executing program 1 (id=139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40805}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m23.729606488s ago: executing program 1 (id=141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2m23.66372968s ago: executing program 1 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000002000087d1eb42d0000000000010902"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 2m22.911248246s ago: executing program 1 (id=145): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x21081e, &(0x7f0000000540)={[{@usrquota}, {@debug}, {@resuid}, {@noblock_validity}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) open(&(0x7f0000000200)='./bus\x00', 0x14507f, 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xacdd, 0x1000, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000000008000", [0x4, 0x4]}) fallocate(0xffffffffffffffff, 0x8, 0x2000000, 0x10000) 2m22.476244611s ago: executing program 1 (id=155): socket$kcm(0x21, 0x2, 0xa) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0xa0400, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m22.114910103s ago: executing program 1 (id=156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000203010200000000000000000100000a080003400000040008000340000008000800010001"], 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x24, 0x2, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x888d37bc0d423146}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4040800) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0xc, 0x1, 0xfffffffa}, &(0x7f0000000080)=0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioprio_get$pid(0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m22.072185745s ago: executing program 32 (id=156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000203010200000000000000000100000a080003400000040008000340000008000800010001"], 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x24, 0x2, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x888d37bc0d423146}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4040800) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0xc, 0x1, 0xfffffffa}, &(0x7f0000000080)=0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioprio_get$pid(0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m52.568795243s ago: executing program 2 (id=470): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0x9, 0x4) 1m52.377604339s ago: executing program 2 (id=471): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r3}, './file1\x00'}) 1m52.316849401s ago: executing program 2 (id=473): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0x90000009}) write$P9_RSTATFS(r1, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x569142f7, 0x4, 0x4, 0x0, 0x7f, 0x5, 0x7, 0x200, 0x6}}, 0x43) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r3 = syz_open_pts(r0, 0x80) dup3(r3, r0, 0x80000) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000003c0)={0x20001003, 0x4, 0xfffefffe, 0x400c, 0x9, "4698ddc1220200cf0000002c0100", 0xfffffffe, 0xdc2}) read(r0, &(0x7f00000005c0)=""/227, 0x25) 1m52.253544253s ago: executing program 2 (id=474): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000300), 0xf7, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_setup(0x1, &(0x7f00000004c0)=0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x7, r2, &(0x7f0000000140)='i', 0x1, 0x9fd}]) 1m51.769983699s ago: executing program 2 (id=479): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = eventfd2(0x0, 0x0) close(0x3) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x240, 0x4) sendto$inet(r2, &(0x7f0000000040)="ee", 0x1, 0x20004010, 0x0, 0xfffffffffffffd2d) shutdown(r2, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m50.202568453s ago: executing program 2 (id=497): syz_io_uring_setup(0x1dc7, &(0x7f00000002c0)={0x0, 0xd5a8, 0x2, 0x2, 0x382}, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0xfd26, r1, 0x0, 0x0, 0x0, 0x0, 0x4}]) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x20) splice(r0, 0x0, r3, 0x0, 0x8000, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m50.116005486s ago: executing program 33 (id=497): syz_io_uring_setup(0x1dc7, &(0x7f00000002c0)={0x0, 0xd5a8, 0x2, 0x2, 0x382}, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0xfd26, r1, 0x0, 0x0, 0x0, 0x0, 0x4}]) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x20) splice(r0, 0x0, r3, 0x0, 0x8000, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m3.874905238s ago: executing program 4 (id=979): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x10) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d250080001400000000014000000110001"], 0x80}}, 0x20000084) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) close(r0) 1m3.190445211s ago: executing program 4 (id=983): socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000080)=0x1) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000680)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @timestamp}}}}, 0x0) 1m2.605228111s ago: executing program 4 (id=995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) socket(0x10, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 1m1.75333964s ago: executing program 4 (id=1005): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x22) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x102f) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x20000000], 0x2, 0x0, &(0x7f0000000000)=[{}, {}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44901}, 0x20048080) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x140f, 0x401, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}]}, 0x1c}}, 0x20000040) 1m1.603745195s ago: executing program 4 (id=1007): bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x140020, 0x0) 1m1.088679293s ago: executing program 4 (id=1008): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) timer_settime(r1, 0x1, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) 45.621512587s ago: executing program 34 (id=1008): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) timer_settime(r1, 0x1, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) 4.155457031s ago: executing program 6 (id=1566): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) ppoll(&(0x7f0000000000)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20000020, 0x0) 4.016302625s ago: executing program 5 (id=1569): creat(&(0x7f0000010280)='./file0\x00', 0x182) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.2794591s ago: executing program 6 (id=1574): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) 3.149912584s ago: executing program 5 (id=1575): openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x106200, 0x10004, 0x20da, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mkdir(0x0, 0x4) mkdir(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.080008067s ago: executing program 5 (id=1576): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) chdir(&(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42442, 0x1c1) 2.99444538s ago: executing program 0 (id=1579): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) getxattr(0x0, 0x0, 0x0, 0x0) 2.340252462s ago: executing program 6 (id=1583): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x3, 0x0, &(0x7f0000000c40)="63eced", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000014000103f70000000100000005"], 0x14}}, 0x4014) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.290201994s ago: executing program 6 (id=1584): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) socket$inet_smc(0x2b, 0x1, 0x0) add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, &(0x7f00000003c0), 0x0, 0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="d9ea693249ca", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @local, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4c010000", @ANYRES16, @ANYBLOB="08002abd7000fedbdf25890000000c0099000e0000004c00000028011d80ec00007cdc000d80700000803d0002005003403d132b30514141094452094d3d35504538010a0924093d4e1c08361a4c2949290038243d501a254e51463f2f2a4a1b441f163f02574d0000000d000100180c3603480c0b0660000000190001001b18010903160c050b180b361b09160436480609300000004400018014000300ff89080000000000060006000600020014000300000002000800c1af03000001fcffa50005000400010000000500070002000000050004000100000020000380060001"], 0x14c}, 0x1, 0x0, 0x0, 0x20008005}, 0x4000000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.170400138s ago: executing program 5 (id=1585): readlink(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_config_ext={0xfffffffffffffc04, 0x1}, 0x8201, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010022"], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r1) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="11002dbd7000fcdbdf2502"], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) 2.168854657s ago: executing program 7 (id=1586): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x3008000, &(0x7f0000000040)={[{@min_batch_time}]}, 0x30, 0x527, &(0x7f0000000200)="$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") chdir(&(0x7f00000007c0)='./file0\x00') symlink(0x0, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4020) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x6, 0xffffffffffffffff, 0xffffffff, 0x8000004}, 0x1}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_PARMS={0x0, 0x2, {{0x0, 0x1, 0x7, 0x4, 0x9}, 0x9}}]}, {0x4}, {0x44}, {0xc, 0x8, {0x3}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 2.10817978s ago: executing program 6 (id=1587): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x0, 0xa04, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0xa, @in=@broadcast, 0x0, 0x0, 0x3, 0x8, 0x49}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x45, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.0939944s ago: executing program 0 (id=1588): memfd_create(&(0x7f00000008c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xa0\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2@\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1152, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x826, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x400000000000004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x703d26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x40a18}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) 2.002349813s ago: executing program 3 (id=1589): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={0xffffffffffffffff, r0, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d80000001800811a0681f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8007e38a3fd8705df0100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000b607a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4e95367a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9eebee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4b43a3d93000000000000000000", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xffffffffffffff92, &(0x7f0000000080), 0x1}, 0x8100) socket$inet_sctp(0x2, 0x4, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x17}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x8048802) 526.298162ms ago: executing program 5 (id=1590): r0 = syz_io_uring_setup(0xf40, &(0x7f0000000080)={0x0, 0x1e58, 0x13001, 0x0, 0x2ff}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$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") chdir(&(0x7f0000000040)='./file0\x00') r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40800, 0x11e) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) io_uring_enter(r0, 0x1, 0x71a3, 0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@cruft}, {@cruft, 0x0}, {@unhide}, {@utf8}, {@map_normal}, {@map_off, 0x41}, {@session={'session', 0x3d, 0x61}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '}._f[\x0f\x13\x89\xfbI\x9e\x9cT\x95l\xcb\xe9\r\xa4T\x84\x1b\xed_Y^z\x9a\x80\x11\x998\xcc\x81>\x1d\xbeL\x8cD[.\xf7//\t0$\xf0\xa2\x97\xb0b\x05\x00\x00\x00\x00\x00\x00\x00\x8b\'\x0f\xa1\xc0\xf6\x1f\xda\xca\a\x95\x93\x06\xdem\x10\x01\xaf$J8T\xf3\xae\xda\x03\xaf-\xc1D\xe6\x80\xdd\xf2\x13\xfc#\nXs\x95\xf9\xb2\x1e\xee\xf6\xbbi\xae.\x9eF\xce\x80\x90mju\x85VUc\xbf\xc6w\"\x179S\fm\x87\xcfU:B\xdc\x91,\xe6\xa3\xd9\x83\xe4\x01\xc7E\x16f\xbeLg\xf9\xa7Ja\xac_\x18P\x9f;\xabI\x02&\x8b\xe6\x1c\x97\xda\x13\xb8px\x1b\xb2\xd3)n\xff\x05\rl\x01G\x04\xae\xc2\x8a;\x8c\xd6\xd3\xc12\xbc`1u,\x80`\x7f\xab\x17\x8a\xf2\x8a\x1aL\t\xe6`\x92\x17?!\xfd\xbeK>\xc3\xee\xce5h\x88T# \x15\xfb\xd7\xa2Q>\xb7A\\\x0e\x7f\\\x14', &(0x7f0000000940)='Yockfs\x00\x01\f\xcc\x0e\xc94\x0f/\xb7~\x10\xf8\xe9\xd71\xc1s}\x9d\xd8\xc0\xb1>\xb4\x7f\xcf\x93\xf3^X\x1e<\xa1\xa992\x88\xd4/\xb9\xb3\xd2,\xa5:\x8d\x0e\x8ei\x03v\xf4\t%\x1aR\x84(\xe0\xb3O\xe2\x96a\xa2O\xa6\x90\xfd;0\\\xb8\x94\rz\x80\xbf{\xf1\xbfP\xd4#\xf1WH\x01#\xf3D\xa8/0T\xed\x92F\xe6&\x88\x83\x10\x83zU\xe4t\xf2\\\b\xa0\xef\x04\xeb\xe4\xbfu\x9a\x0eyb\xfb\x1d\xd6#\xaf\x18\xfa\xa8\xef\x9cm\x9dU\x9cg\xdek\x1fA\xa6\xd9\xc1\xc6a\x94\xec\xa7D\x05;\xd5\x95e\t\xc4y\x90\xbfx\x97\xe0\x04jp(>\xca\xfc\x18C\xa2\xa3aEk\x9f\vo\xe1\x11\xa2\x05\xd7\xd0e|\ns\xb1X\x86\xde\xea\xeaP\xdf\xe4\xe9\xe7\x128\xe9BP\xe0{<\xa8\x91\xa0>\xe1\xceR\x1a\xcd\x8c\x03A\xa1\x81*e\xd9\x06P\x87\x89\xf2\x96\x0f\xb8\x8eBG0\x04\xfd\n\x12\xfa\x01\'\xa8i\xd8\x19Ibm!5j\xd6\xae\xd8\xb5(w\xa9\xcdy\x84\xa0i\xcc\x8e\xba\xab\xd8p#m', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000f40)='\x00\xfb\xd4\xbe\xf0\x93D\x1f\xa9\x06\x00/8\xee\xce\x96*9\xa3/$\xa3\x1b\x92\xfe<\xf0\x94\f\xd6\x16\xbdD\x01y\x1a\xa4\x96\x88\x94K{\x7fs\xc0\xa8c\xe1\xfcH%\xd5\xe43H\xca\xa4!W\xa2@\xfbKgW=\x03\xc6\xdb%W\xfc\xaa\x93\xed\x8d\x86\xb3\x98\xd42\xc0\x95G\xd12\x12\x05}&\x10Y^\xb0\xcew\xc6\x00a2\xc9\x97(4\x05\x86\xd2\xc8\xc6\xb4K\x112\x1a\xd6\xcf\xa9\\j\x91\x9ag\x9e\xba\x87\x8b\"ttQ\n$\x9f\xaa\xf6\x12(\xb1\x84U\xf6M\xadD\xec\xeb\x99\xd1.\xc2\x96\xde\xcb\xcd\xca\xb0CA\x16o}9\xd9\xca_\xeb\x94A\xc8\x97\x88\x1dS\x82\xa7\\\x14\\\xb3\x8d/\x86d3:)S\xef[[|\xd2\xfe\xa9WS]bQ\xd2\x11\xe2\x9ao\xcc\xd4\x9e\xc3\xf0\xd67/\r\xdd*:\xe6w\xdaj\x11z\xe0\x15', &(0x7f00000001c0)='(\x18\x02', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000780)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\x7f\fG\xa75\xd8aM!\xe6\xe3\x05\xed.\x90\xae~\x93#*\xcc\xa0aZ-\x16\x1fmO\xfe|\x94\x7f\xf5\x8a\xf4\x83\x16\xf2L\x8b\xc7m\xf3m\xaa[\x03\x00\x00\x00R\xafg\xff\xbc3\xcd\xde\xe9F\xc2&b\xfd\xee3j\xf8\x8a\xa2\xbf\f\xe2Rxn\xa7.BW\xb6\x1bC\x91\x1fW\xaa\xc8z\xc4(\x12\xbc\xaa\x97_\xb8\xa9\xc1\x19ba\xbb\xf2\xe5H\xae\xa4\x05\xb6', 0x0) close(r2) 448.802315ms ago: executing program 0 (id=1594): syz_open_dev$usbfs(&(0x7f0000000200), 0x200, 0xa401) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x889, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0xa0002018}) epoll_pwait2(r1, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_pwait2(r1, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x8000014}) 438.493796ms ago: executing program 7 (id=1595): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000000c0)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES64=r4], 0x18, 0xc1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000010000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 390.110887ms ago: executing program 7 (id=1596): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000080), 0x10) 360.898599ms ago: executing program 3 (id=1597): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) socket$inet_smc(0x2b, 0x1, 0x0) add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, &(0x7f00000003c0), 0x0, 0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="d9ea693249ca", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @local, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4c010000", @ANYRES16, @ANYBLOB="08002abd7000fedbdf25890000000c0099000e0000004c00000028011d80ec00007cdc000d80700000803d0002005003403d132b30514141094452094d3d35504538010a0924093d4e1c08361a4c2949290038243d501a254e51463f2f2a4a1b441f163f02574d0000000d000100180c3603480c0b0660000000190001001b18010903160c050b180b361b09160436480609300000004400018014000300ff89080000000000060006000600020014000300000002000800c1af03000001fcffa50005000400010000000500070002000000050004000100000020000380060001"], 0x14c}, 0x1, 0x0, 0x0, 0x20008005}, 0x4000000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 309.84939ms ago: executing program 3 (id=1598): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mbind(&(0x7f000094a000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000040)=0x8, 0x8001, 0x5) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x118}, 0x1, 0x0, 0x0, 0x240401d4}, 0x240408d0) epoll_create1(0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 308.47774ms ago: executing program 5 (id=1599): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000200)="c788a5", 0x3) sendfile(r1, r0, 0x0, 0x3ffff) 308.27503ms ago: executing program 7 (id=1600): prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x41, 0x0) mlockall(0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 229.385122ms ago: executing program 3 (id=1601): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 214.108783ms ago: executing program 0 (id=1602): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000c00)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x110, 0x220, 0x310, 0x310, 0x310, 0x7fffffe, 0x0, {[{{@arp={@local, @dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0xceb58e62eea6b7fc]}}, 0x1, 0x8, 0x0, 0x0, 0x40, 0x256d, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="a4c1b7017d24", @empty, @remote, @remote, 0x8}}}, {{@arp={@remote, @remote, 0x0, 0xff, 0xfe, 0x2, {}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xb294b1ee1ef148c0]}}, 0x0, 0x0, 0x0, 0x200, 0x4, 0x0, 'pim6reg0\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @mac=@local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x40}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNMARK={0x0, 'CONNMARK\x00', 0x1, {0x4, 0x8b6b, 0x5, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x479) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x10) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2076) quotactl$Q_SETQUOTA(0xffffffff80000802, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 212.507573ms ago: executing program 7 (id=1603): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r3 = dup(r2) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 173.738745ms ago: executing program 0 (id=1604): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_uring_setup(0x4dec, &(0x7f0000000000)={0x0, 0x54c4, 0x8, 0x0, 0x2ff}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xfc, 0x80000000}, 0x1c) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) close_range(r0, 0xffffffffffffffff, 0x0) 102.587097ms ago: executing program 3 (id=1605): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f00000004c0)={r2, r3+60000000}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000003540)) 0s ago: executing program 0 (id=1606): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x8c, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x6, 0x21}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): : error count since last fsck: 1 [ 96.067270][ T5863] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.713: couldn't read orphan inode 15 (err -117) [ 96.079360][ C0] EXT4-fs (loop0): initial error at time 1780901905: ext4_orphan_get:1397: inode 15 [ 96.079396][ C0] EXT4-fs (loop0): last error at time 1780901905: ext4_orphan_get:1397: inode 15 [ 96.129665][ T5863] loop0: lost filesystem error report for type 5 error -117 [ 96.131846][ T5863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.226431][ T28] audit: type=1400 audit(1780901905.504:644): avc: denied { write } for pid=5862 comm="syz.0.713" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.253121][ T28] audit: type=1400 audit(1780901905.504:645): avc: denied { write } for pid=5862 comm="syz.0.713" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.280076][ T28] audit: type=1400 audit(1780901905.534:646): avc: denied { listen } for pid=5866 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 96.410030][ T5869] loop4: detected capacity change from 0 to 256 [ 96.676576][ T5869] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.695507][ T5869] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.711596][ T5869] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.738081][ T5869] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.760478][ T5869] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.773414][ T5869] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.785784][ T5869] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.810564][ T5869] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.835945][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.889921][ T5879] syz_tun: entered promiscuous mode [ 96.901390][ T5869] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.941145][ T5879] vlan0: entered promiscuous mode [ 96.959237][ T5882] loop0: detected capacity change from 0 to 512 [ 96.994329][ T5869] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 97.016189][ T5882] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.557297][ T5891] loop6: detected capacity change from 0 to 512 [ 97.579703][ T5881] EXT4-fs error (device loop0): ext4_quota_enable:7221: comm syz.0.720: Bad quota inum: 2, type: 1 [ 97.596040][ T5891] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.627980][ T5891] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.726: iget: bad i_size value: 38620345925642 [ 97.641981][ T5891] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 97.646524][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 97.670395][ T5891] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.726: couldn't read orphan inode 15 (err -117) [ 97.670866][ C1] EXT4-fs (loop6): initial error at time 1780901906: ext4_orphan_get:1397: inode 15 [ 97.670902][ C1] EXT4-fs (loop6): last error at time 1780901906: ext4_orphan_get:1397: inode 15 [ 97.726853][ T5881] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 97.753094][ T5891] loop6: lost filesystem error report for type 5 error -117 [ 97.763029][ T5891] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.841330][ T3408] IPVS: starting estimator thread 0... [ 97.898643][ T5891] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 97.939830][ T5902] IPVS: using max 2688 ests per chain, 134400 per kthread [ 97.968488][ T5118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.047726][ T28] audit: type=1400 audit(1780901907.354:647): avc: denied { mount } for pid=5906 comm="syz.6.732" name="/" dev="configfs" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 98.093725][ T3311] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 98.118766][ T28] audit: type=1400 audit(1780901907.384:648): avc: denied { search } for pid=5906 comm="syz.6.732" name="/" dev="configfs" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.147563][ T5909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.733'. [ 98.197834][ T28] audit: type=1400 audit(1780901907.384:649): avc: denied { setattr } for pid=5906 comm="syz.6.732" name="/" dev="configfs" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.278553][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'. [ 98.751076][ T28] audit: type=1400 audit(1780901908.054:650): avc: denied { watch watch_reads } for pid=5930 comm="syz.5.741" path="/114" dev="tmpfs" ino=604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 98.939885][ T5931] loop5: detected capacity change from 0 to 512 [ 98.971272][ T5931] EXT4-fs: Ignoring removed oldalloc option [ 99.003699][ T5931] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 99.014389][ T5931] EXT4-fs (loop5): orphan cleanup on readonly fs [ 99.044215][ T5931] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 99.096685][ T5931] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 99.117786][ T5931] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.741: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 99.193940][ T5931] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 99.194491][ T5931] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.741: couldn't read orphan inode 13 (err -117) [ 99.205559][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 99.205637][ C0] EXT4-fs (loop5): last error at time 1780901908: ext4_ext_check_inode:521: inode 13 [ 99.243131][ T5931] loop5: lost filesystem error report for type 5 error -117 [ 99.290708][ T5931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.410380][ T5911] syz.0.744 (5911) used greatest stack depth: 8648 bytes left [ 99.422297][ T5931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.551628][ T5944] loop0: detected capacity change from 0 to 512 [ 99.579310][ T5944] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.672921][ T5947] netlink: 184 bytes leftover after parsing attributes in process `syz.6.747'. [ 99.725494][ T5938] loop3: detected capacity change from 0 to 512 [ 99.790371][ T5938] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.809219][ T5938] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.743: iget: bad i_size value: 38620345925642 [ 99.829861][ T5940] EXT4-fs error (device loop0): ext4_quota_enable:7221: comm syz.0.745: Bad quota inum: 2, type: 1 [ 99.835489][ T5950] loop4: detected capacity change from 0 to 512 [ 99.847756][ T5938] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.851522][ T5938] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.743: couldn't read orphan inode 15 (err -117) [ 99.861813][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 99.861864][ C1] EXT4-fs (loop3): initial error at time 1780901909: ext4_orphan_get:1397: inode 15 [ 99.861993][ C1] EXT4-fs (loop3): last error at time 1780901909: ext4_orphan_get:1397: inode 15 [ 99.888540][ T5940] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 99.891696][ T5938] loop3: lost filesystem error report for type 5 error -117 [ 99.893908][ T5950] EXT4-fs: Ignoring removed i_version option [ 99.893933][ T5950] EXT4-fs: Ignoring removed nobh option [ 100.004746][ T5938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.019440][ T5950] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.042821][ T5950] EXT4-fs (loop4): orphan cleanup on readonly fs [ 100.060673][ T5950] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.748: corrupted in-inode xattr: overlapping e_value [ 100.095926][ T3408] IPVS: starting estimator thread 0... [ 100.111941][ T3311] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 100.123220][ T5938] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 100.132843][ T5950] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.133159][ T5950] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.748: couldn't read orphan inode 15 (err -117) [ 100.146347][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 100.146377][ C1] EXT4-fs (loop4): initial error at time 1780901909: ext4_iget_extra_inode:5128: inode 15 [ 100.146409][ C1] EXT4-fs (loop4): last error at time 1780901909: ext4_iget_extra_inode:5128: inode 15 [ 100.213500][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.223005][ T5950] loop4: lost filesystem error report for type 5 error -117 [ 100.225919][ T5950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 100.247300][ T5956] IPVS: using max 2736 ests per chain, 136800 per kthread [ 100.439199][ T3742] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.569593][ T5979] netlink: 'syz.3.759': attribute type 1 has an invalid length. [ 100.598395][ T5979] bond4: entered promiscuous mode [ 100.604354][ T5979] 8021q: adding VLAN 0 to HW filter on device bond4 [ 100.650898][ T5979] bond4: (slave bridge0): making interface the new active one [ 100.686609][ T5979] bridge0: entered promiscuous mode [ 100.697117][ T5979] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 100.718137][ T5986] loop4: detected capacity change from 0 to 512 [ 100.742158][ T5986] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.823021][ T5986] EXT4-fs (loop4): 1 truncate cleaned up [ 100.843651][ T5986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.930887][ T28] audit: type=1400 audit(1780901910.224:651): avc: denied { write } for pid=5985 comm="syz.4.761" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.017651][ T3742] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.059406][ T6006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.769'. [ 101.167232][ T6022] bridge_slave_1: left allmulticast mode [ 101.181534][ T6022] bridge_slave_1: left promiscuous mode [ 101.195398][ T6025] netlink: 'syz.0.776': attribute type 1 has an invalid length. [ 101.198395][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.215760][ T6022] bridge_slave_0: left allmulticast mode [ 101.225488][ T6022] bridge_slave_0: left promiscuous mode [ 101.233428][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.297556][ T6025] bond1: entered promiscuous mode [ 101.304249][ T6025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.404880][ T6025] bond1: (slave bridge0): making interface the new active one [ 101.430078][ T6025] bridge0: entered promiscuous mode [ 101.437806][ T6025] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 101.463111][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.6.779'. [ 101.481177][ T35] Process accounting resumed [ 101.513168][ T6042] loop0: detected capacity change from 0 to 512 [ 101.522989][ T6038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.531797][ T6042] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 101.597568][ T6042] EXT4-fs (loop0): 1 truncate cleaned up [ 101.617281][ T6042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.631221][ T6038] ipvlan2: entered allmulticast mode [ 101.637879][ T6038] bond1: entered allmulticast mode [ 101.653557][ T6038] bond1: (slave ipip0): refused to change device type [ 101.699886][ T28] audit: type=1400 audit(1780901911.004:652): avc: denied { write } for pid=6041 comm="syz.0.780" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.747441][ T28] audit: type=1400 audit(1780901911.054:653): avc: denied { read } for pid=6049 comm="syz.3.782" name="/" dev="configfs" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.790431][ T28] audit: type=1400 audit(1780901911.054:654): avc: denied { read open } for pid=6049 comm="syz.3.782" path="/" dev="configfs" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.898204][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.963984][ T6060] netlink: 184 bytes leftover after parsing attributes in process `syz.3.787'. [ 102.022135][ T6062] loop5: detected capacity change from 0 to 512 [ 102.160388][ T6062] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.202770][ T6062] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 102.233557][ T6062] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 102.266974][ T6078] loop4: detected capacity change from 0 to 512 [ 102.280585][ T6062] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 102.301140][ T6062] System zones: 0-2, 18-18, 34-35 [ 102.387185][ T6078] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.396540][ T6062] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.538355][ T28] audit: type=1400 audit(1780901911.834:655): avc: denied { write } for pid=6061 comm="syz.5.784" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.576482][ T6078] EXT4-fs error (device loop4): ext4_quota_enable:7221: comm syz.4.793: Bad quota inum: 2, type: 1 [ 102.613955][ T28] audit: type=1400 audit(1780901911.874:656): avc: denied { write } for pid=6061 comm="syz.5.784" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.665081][ T6078] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 102.702695][ T4070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.785504][ T3742] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 102.816307][ T6091] io-wq is not configured for unbound workers [ 102.863142][ T6096] netlink: 'syz.6.809': attribute type 11 has an invalid length. [ 102.911534][ T6096] netlink: 36 bytes leftover after parsing attributes in process `syz.6.809'. [ 103.119736][ T6104] loop6: detected capacity change from 0 to 256 [ 103.422860][ T6104] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 103.445201][ T6111] loop0: detected capacity change from 0 to 128 [ 103.469475][ T6104] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 103.493898][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 103.505417][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 103.519377][ T6104] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 103.533145][ T6104] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 103.607713][ T6104] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 103.668599][ T6104] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 103.707673][ T6104] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 103.741911][ T6104] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 103.787858][ T6104] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 103.806767][ T28] audit: type=1326 audit(1780901913.094:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6129 comm="syz.3.815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ee41ce59 code=0x7ffc0000 [ 103.845041][ T6104] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 103.867383][ T28] audit: type=1326 audit(1780901913.094:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6129 comm="syz.3.815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ee41ce59 code=0x7ffc0000 [ 103.934258][ T28] audit: type=1326 audit(1780901913.104:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.0.813" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f90efce59 code=0x7ffc0000 [ 103.991783][ T28] audit: type=1326 audit(1780901913.104:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.0.813" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f90efce59 code=0x7ffc0000 [ 104.052089][ T28] audit: type=1326 audit(1780901913.104:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.0.813" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f90efce59 code=0x7ffc0000 [ 104.095570][ T6130] loop3: detected capacity change from 0 to 512 [ 104.146114][ T6130] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.160831][ T6132] loop6: detected capacity change from 0 to 512 [ 104.172695][ T28] audit: type=1326 audit(1780901913.104:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.0.813" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f90efce59 code=0x7ffc0000 [ 104.209266][ T28] audit: type=1326 audit(1780901913.104:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.0.813" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5f90efce59 code=0x7ffc0000 [ 104.244881][ T6132] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 104.288723][ T28] audit: type=1326 audit(1780901913.104:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.0.813" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f90efce59 code=0x7ffc0000 [ 104.306344][ T6130] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.815: iget: bad i_size value: 38620345925642 [ 104.320195][ T28] audit: type=1326 audit(1780901913.104:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.0.813" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f90efce59 code=0x7ffc0000 [ 104.346476][ T6132] EXT4-fs (loop6): 1 truncate cleaned up [ 104.369164][ T28] audit: type=1326 audit(1780901913.104:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.0.813" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f90efce59 code=0x7ffc0000 [ 104.400363][ T6130] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 104.404178][ T6132] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.413939][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 104.413961][ C0] EXT4-fs (loop3): initial error at time 1780901913: ext4_orphan_get:1397: inode 15 [ 104.414003][ C0] EXT4-fs (loop3): last error at time 1780901913: ext4_orphan_get:1397: inode 15 [ 104.471771][ T6130] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.815: couldn't read orphan inode 15 (err -117) [ 104.512176][ T6130] loop3: lost filesystem error report for type 5 error -117 [ 104.520978][ T6130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.800508][ T5118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.870724][ T68] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:4: bg 0: block 5: invalid block bitmap [ 104.904190][ T68] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 76 with error 28 [ 104.925265][ T68] EXT4-fs (loop3): This should not happen!! Data will be lost [ 104.925265][ T68] [ 104.954319][ T68] EXT4-fs (loop3): Total free blocks count 0 [ 104.973010][ T68] EXT4-fs (loop3): Free/Dirty block details [ 105.005449][ T68] EXT4-fs (loop3): free_blocks=0 [ 105.027070][ T68] EXT4-fs (loop3): dirty_blocks=80 [ 105.033330][ T68] EXT4-fs (loop3): Block reservation details [ 105.054003][ T68] EXT4-fs (loop3): i_reserved_data_blocks=80 [ 105.078713][ T3306] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 105.105883][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.155252][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.824'. [ 105.201066][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.824'. [ 105.224764][ T6155] netlink: 33 bytes leftover after parsing attributes in process `syz.5.824'. [ 105.235807][ T6155] veth1_to_bridge: entered allmulticast mode [ 105.265748][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.824'. [ 105.278011][ T6155] netlink: 33 bytes leftover after parsing attributes in process `syz.5.824'. [ 105.906331][ T6184] netlink: 'syz.0.835': attribute type 1 has an invalid length. [ 105.953745][ T6184] bond2: (slave veth3): Enslaving as an active interface with a down link [ 106.051046][ T6184] 8021q: adding VLAN 0 to HW filter on device eth0 [ 106.062892][ T6184] 8021q: adding VLAN 0 to HW filter on device eth1 [ 106.076100][ T6184] 8021q: adding VLAN 0 to HW filter on device eth2 [ 106.088080][ T6184] 8021q: adding VLAN 0 to HW filter on device eth3 [ 106.132644][ T6184] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.158275][ T6188] bond2: (slave dummy0): making interface the new active one [ 106.190884][ T6188] dummy0: entered promiscuous mode [ 106.215470][ T6188] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 106.287199][ T1917] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 106.323500][ T6194] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 106.333160][ T6194] bond2: entered allmulticast mode [ 106.461380][ T6194] ip6gretap1: entered promiscuous mode [ 106.483568][ T6194] ip6gretap1: entered allmulticast mode [ 106.490964][ T6194] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 106.535017][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.561275][ T3387] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 106.655343][ T6203] loop0: detected capacity change from 0 to 512 [ 106.734444][ T6214] netlink: 'syz.3.846': attribute type 11 has an invalid length. [ 106.765441][ T6203] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.795832][ T6214] netlink: 36 bytes leftover after parsing attributes in process `syz.3.846'. [ 106.798913][ T6203] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.854644][ T6203] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.928990][ T6221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.847'. [ 107.001507][ T6203] EXT4-fs (loop0): failed to initialize system zone (-117) [ 107.037268][ T6203] EXT4-fs (loop0): mount failed [ 107.196725][ T6232] loop5: detected capacity change from 0 to 256 [ 107.222527][ T6235] loop3: detected capacity change from 0 to 128 [ 107.310653][ T6235] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000f0b) [ 107.331618][ T6235] FAT-fs (loop3): Filesystem has been set read-only [ 107.361319][ T6240] futex_wake_op: syz.0.855 tries to shift op by 32; fix this program [ 107.368829][ T6235] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000f0b) [ 107.454826][ T6235] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000f0b) [ 107.558495][ T6247] loop6: detected capacity change from 0 to 512 [ 107.565947][ T6247] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 107.588217][ T6247] EXT4-fs (loop6): orphan cleanup on readonly fs [ 107.599310][ T6247] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.858: bad orphan inode 15 [ 107.613360][ T6247] loop6: lost filesystem error report for type 5 error -117 [ 107.616281][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 107.633183][ C1] EXT4-fs (loop6): initial error at time 1780901916: ext4_orphan_get:1423 [ 107.643051][ C1] EXT4-fs (loop6): last error at time 1780901916: ext4_orphan_get:1423 [ 107.652235][ T6247] ext4_test_bit(bit=14, block=18) = 1 [ 107.680962][ T6247] is_bad_inode(inode)=0 [ 107.694562][ T6247] NEXT_ORPHAN(inode)=1023 [ 107.708814][ T6247] max_ino=32 [ 107.713009][ T6247] i_nlink=0 [ 107.717197][ T6247] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.858: bg 0: block 161: padding at end of block bitmap is not set [ 107.733712][ T6247] loop6: lost filesystem error report for type 5 error -117 [ 107.737138][ T6247] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 107.757561][ T6247] loop6: lost filesystem error report for type 5 error -117 [ 107.759408][ T6247] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 108.080331][ T6256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.111153][ T6256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.138749][ T5118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.712200][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.872'. [ 108.785930][ T6298] loop4: detected capacity change from 0 to 512 [ 108.802977][ T6298] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.821338][ T6298] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.874: bg 0: block 384: padding at end of block bitmap is not set [ 108.842502][ T6298] loop4: lost filesystem error report for type 5 error -117 [ 108.843370][ T6298] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 108.854128][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 108.854151][ C1] EXT4-fs (loop4): initial error at time 1780901918: ext4_validate_block_bitmap:441 [ 108.854179][ C1] EXT4-fs (loop4): last error at time 1780901918: ext4_validate_block_bitmap:441 [ 108.898560][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 108.898580][ T28] audit: type=1400 audit(1780901918.204:751): avc: denied { mount } for pid=6299 comm="syz.0.875" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 108.935917][ T6298] loop4: lost filesystem error report for type 5 error -117 [ 108.936459][ T6298] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.874: attempt to clear invalid blocks 983260 len 1 [ 108.967431][ T6298] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 108.967663][ T6298] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.874: Invalid inode table block 0 in block_group 0 [ 109.005756][ T6298] loop4: lost filesystem error report for type 5 error -117 [ 109.006830][ T6298] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 109.038541][ T6298] loop4: lost filesystem error report for type 5 error -117 [ 109.056443][ T6298] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 109.112322][ T6298] loop4: lost filesystem error report for type 5 error -117 [ 109.116782][ T6298] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.874: Invalid inode table block 0 in block_group 0 [ 109.144905][ T6298] loop4: lost filesystem error report for type 5 error -117 [ 109.145149][ T6298] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 109.177035][ T6298] EXT4-fs error (device loop4): ext4_truncate:4690: inode #11: comm syz.4.874: mark_inode_dirty error [ 109.193395][ T6298] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 109.193590][ T6298] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 109.220922][ T6298] EXT4-fs (loop4): 1 truncate cleaned up [ 109.232886][ T6298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.310707][ T6298] xt_hashlimit: size too large, truncated to 1048576 [ 109.782125][ T3742] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.039594][ T28] audit: type=1400 audit(1780901919.344:752): avc: denied { watch watch_reads } for pid=6328 comm="syz.4.883" path="pipe:[16759]" dev="pipefs" ino=16759 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 110.201275][ T28] audit: type=1326 audit(1780901919.504:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.6.887" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1415ce59 code=0x7ffc0000 [ 110.251611][ T28] audit: type=1326 audit(1780901919.504:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.6.887" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1415ce59 code=0x7ffc0000 [ 110.317976][ T28] audit: type=1326 audit(1780901919.504:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.6.887" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1415ce59 code=0x7ffc0000 [ 110.398675][ T6341] netlink: 'syz.4.888': attribute type 1 has an invalid length. [ 110.404506][ T28] audit: type=1326 audit(1780901919.504:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.6.887" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3b1415ce59 code=0x7ffc0000 [ 110.451475][ T28] audit: type=1326 audit(1780901919.564:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.6.887" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1415ce59 code=0x7ffc0000 [ 110.481501][ T28] audit: type=1326 audit(1780901919.564:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.6.887" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3b1415cbc2 code=0x7ffc0000 [ 110.514190][ T28] audit: type=1326 audit(1780901919.564:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.6.887" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3b1415cc57 code=0x7ffc0000 [ 110.549027][ T6341] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.597357][ T6341] bond1: (slave bond2): making interface the new active one [ 110.613876][ T28] audit: type=1326 audit(1780901919.564:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.6.887" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3b14119b51 code=0x7ffc0000 [ 110.649274][ T6348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.888'. [ 110.665854][ T6341] bond1: (slave bond2): Enslaving as an active interface with an up link [ 110.675775][ T6346] netlink: 'syz.6.889': attribute type 4 has an invalid length. [ 110.711245][ T6348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.749701][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.6.891'. [ 110.767377][ T6347] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 110.829349][ T6358] futex_wake_op: syz.3.903 tries to shift op by 32; fix this program [ 110.965938][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 110.981773][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.027869][ T6367] loop4: detected capacity change from 0 to 512 [ 111.083213][ T6374] loop0: detected capacity change from 0 to 1024 [ 111.097787][ T6374] EXT4-fs: test_dummy_encryption option not supported [ 111.123630][ T6367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.194404][ T6367] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.215459][ T6367] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.283326][ T6367] EXT4-fs (loop4): failed to initialize system zone (-117) [ 111.296386][ T6367] EXT4-fs (loop4): mount failed [ 112.463456][ T6395] loop0: detected capacity change from 0 to 512 [ 112.525364][ T6395] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.555468][ T6395] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.905: iget: bad i_size value: 38620345925642 [ 112.571241][ T6395] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 112.576285][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 112.595358][ C1] EXT4-fs (loop0): initial error at time 1780901921: ext4_orphan_get:1397: inode 15 [ 112.606702][ C1] EXT4-fs (loop0): last error at time 1780901921: ext4_orphan_get:1397: inode 15 [ 112.618835][ T6395] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.905: couldn't read orphan inode 15 (err -117) [ 112.646931][ T6395] fserror_report: 2 callbacks suppressed [ 112.646985][ T6395] loop0: lost filesystem error report for type 5 error -117 [ 112.664082][ T6395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.726529][ T3408] IPVS: starting estimator thread 0... [ 112.741122][ T6395] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 112.816519][ T6404] IPVS: using max 2976 ests per chain, 148800 per kthread [ 113.673766][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.778530][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.915'. [ 113.838225][ T6419] tipc: Started in network mode [ 113.843586][ T6419] tipc: Node identity 162c10613e2, cluster identity 4711 [ 113.851288][ T6419] tipc: Enabled bearer , priority 0 [ 113.899200][ T6419] tipc: Resetting bearer [ 114.594050][ T6417] tipc: Resetting bearer [ 114.665464][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 114.665483][ T28] audit: type=1400 audit(1780901923.964:800): avc: denied { write } for pid=6424 comm="syz.5.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.705014][ T6417] tipc: Disabling bearer [ 114.729242][ T6429] veth0: entered promiscuous mode [ 114.743089][ T6429] bond0: entered promiscuous mode [ 114.764252][ T6427] loop3: detected capacity change from 0 to 512 [ 114.791763][ T6429] bond_slave_0: entered promiscuous mode [ 114.813013][ T6429] bond_slave_1: entered promiscuous mode [ 114.868734][ T6428] bond0: left promiscuous mode [ 114.892486][ T6434] netlink: 'syz.6.923': attribute type 1 has an invalid length. [ 114.902765][ T6428] bond_slave_0: left promiscuous mode [ 114.910449][ T6428] bond_slave_1: left promiscuous mode [ 114.919069][ T6428] veth0: left promiscuous mode [ 114.940753][ T6434] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.025735][ T6434] vlan0: entered allmulticast mode [ 115.035934][ T6434] bond3: entered allmulticast mode [ 115.054924][ T6434] bond3: (slave geneve2): making interface the new active one [ 115.064027][ T6434] geneve2: entered allmulticast mode [ 115.072951][ T6434] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 115.322974][ T6427] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.382614][ T6427] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 115.454777][ T6427] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.920: bg 0: block 248: padding at end of block bitmap is not set [ 115.550107][ T6427] loop3: lost filesystem error report for type 5 error -117 [ 115.557083][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 115.580837][ C1] EXT4-fs (loop3): last error at time 1780901924: ext4_validate_block_bitmap:441 [ 115.600752][ T6427] Quota error (device loop3): write_blk: dquota write failed [ 115.617779][ T6427] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 115.636726][ T6427] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.920: Failed to acquire dquot type 1 [ 115.661584][ T6427] loop3: lost filesystem error report for type 5 error -28 [ 115.664751][ T28] audit: type=1326 audit(1780901924.964:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.5.933" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329891ce59 code=0x7ffc0000 [ 115.709872][ T6461] loop5: detected capacity change from 0 to 512 [ 115.711555][ T28] audit: type=1326 audit(1780901924.964:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.5.933" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329891ce59 code=0x7ffc0000 [ 115.756498][ T28] audit: type=1326 audit(1780901924.964:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.5.933" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329891ce59 code=0x7ffc0000 [ 115.758579][ T6427] EXT4-fs (loop3): 1 truncate cleaned up [ 115.799015][ T28] audit: type=1326 audit(1780901924.964:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.5.933" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329891ce59 code=0x7ffc0000 [ 115.835990][ T6427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 115.852452][ T6461] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.902951][ T28] audit: type=1326 audit(1780901924.964:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.5.933" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f329891ce59 code=0x7ffc0000 [ 115.905303][ T6461] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.933: iget: bad i_size value: 38620345925642 [ 115.956618][ T6461] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 115.957451][ T6461] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.933: couldn't read orphan inode 15 (err -117) [ 115.959553][ T6427] syz.3.920 (6427) used greatest stack depth: 8000 bytes left [ 115.969569][ T6461] loop5: lost filesystem error report for type 5 error -117 [ 115.984815][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 115.984900][ C0] EXT4-fs (loop5): initial error at time 1780901925: ext4_orphan_get:1397: inode 15 [ 115.985018][ C0] EXT4-fs (loop5): last error at time 1780901925: ext4_orphan_get:1397: inode 15 [ 116.021961][ T28] audit: type=1326 audit(1780901924.964:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.5.933" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329891ce59 code=0x7ffc0000 [ 116.041528][ T6461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.069963][ T6473] loop6: detected capacity change from 0 to 512 [ 116.137447][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 116.155946][ T28] audit: type=1326 audit(1780901924.964:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.5.933" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329891ce59 code=0x7ffc0000 [ 116.279456][ T6473] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 116.352340][ T6473] EXT4-fs (loop6): 1 truncate cleaned up [ 116.379161][ T6473] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.406315][ T6481] xt_HMARK: proto mask must be zero with L3 mode [ 116.416497][ T2130] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:13: bg 0: block 5: invalid block bitmap [ 116.437266][ T2130] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 324 with error 28 [ 116.493017][ T2130] EXT4-fs (loop5): This should not happen!! Data will be lost [ 116.493017][ T2130] [ 116.514610][ T2130] EXT4-fs (loop5): Total free blocks count 0 [ 116.524102][ T5118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.577470][ T2130] EXT4-fs (loop5): Free/Dirty block details [ 116.625297][ T2130] EXT4-fs (loop5): free_blocks=0 [ 116.625508][ T6498] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 116.646948][ T6498] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 116.653945][ T2130] EXT4-fs (loop5): dirty_blocks=328 [ 116.660843][ T6498] vhci_hcd vhci_hcd.0: Device attached [ 116.684513][ T2130] EXT4-fs (loop5): Block reservation details [ 116.695400][ T2130] EXT4-fs (loop5): i_reserved_data_blocks=328 [ 116.710118][ T4070] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 116.728391][ T4070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.764727][ T6501] loop4: detected capacity change from 0 to 512 [ 116.794049][ T6509] netlink: 24 bytes leftover after parsing attributes in process `syz.5.941'. [ 116.800144][ T6501] EXT4-fs: Ignoring removed nobh option [ 116.842424][ T6501] EXT4-fs (loop4): orphan cleanup on readonly fs [ 116.857590][ T6501] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.947: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 116.890661][ T6501] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.890916][ T6501] EXT4-fs (loop4): Remounting filesystem read-only [ 116.901505][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 116.901531][ C0] EXT4-fs (loop4): initial error at time 1780901926: ext4_xattr_inode_update_ref:1037: inode 11 [ 116.901565][ C0] EXT4-fs (loop4): last error at time 1780901926: ext4_xattr_inode_update_ref:1037: inode 11 [ 116.936310][ T3408] usb 10-1: SetAddress Request (2) to port 0 [ 116.952388][ T3408] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 116.969143][ T6501] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.4.947: ea_inode dec ref err=-117 [ 117.001003][ T6501] EXT4-fs (loop4): 1 orphan inode deleted [ 117.016105][ T6501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 117.317941][ T6532] netlink: 'syz.0.959': attribute type 13 has an invalid length. [ 117.388417][ T6534] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 117.455860][ T6499] vhci_hcd: connection reset by peer [ 117.466891][ T2130] vhci_hcd vhci_hcd.4: stop threads [ 117.477537][ T2130] vhci_hcd vhci_hcd.4: release socket [ 117.485318][ T2130] vhci_hcd vhci_hcd.4: disconnect device [ 117.502885][ T6532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.515783][ T6532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.644243][ T6548] loop6: detected capacity change from 0 to 512 [ 117.646771][ T2205] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.690839][ T2205] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.703135][ T6548] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.963: inode has both inline data and extents flags [ 117.725667][ T6551] netlink: 'syz.0.964': attribute type 4 has an invalid length. [ 117.734420][ T2205] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.745815][ T6548] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 117.745951][ T6548] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.963: couldn't read orphan inode 15 (err -117) [ 117.755195][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 117.755220][ C1] EXT4-fs (loop6): initial error at time 1780901927: ext4_orphan_get:1397: inode 15 [ 117.755256][ C1] EXT4-fs (loop6): last error at time 1780901927: ext4_orphan_get:1397: inode 15 [ 117.797293][ T2205] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.818152][ T6551] netlink: 'syz.0.964': attribute type 4 has an invalid length. [ 117.852601][ T6548] loop6: lost filesystem error report for type 5 error -117 [ 117.853260][ T6548] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.995517][ T3742] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.071487][ T6568] netlink: 76 bytes leftover after parsing attributes in process `syz.4.969'. [ 118.127458][ T5118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.202872][ T6570] xt_HMARK: proto mask must be zero with L3 mode [ 118.289542][ T6576] loop4: detected capacity change from 0 to 512 [ 118.303917][ T6576] EXT4-fs: Ignoring removed oldalloc option [ 118.321323][ T6576] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 118.332579][ T6576] EXT4-fs (loop4): orphan cleanup on readonly fs [ 118.345077][ T6576] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 118.365973][ T6576] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 118.374380][ T6576] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.972: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 118.398081][ T6576] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 118.399608][ T6576] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.972: couldn't read orphan inode 13 (err -117) [ 118.411460][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 118.411507][ C1] EXT4-fs (loop4): last error at time 1780901927: ext4_ext_check_inode:521: inode 13 [ 118.447694][ T6576] loop4: lost filesystem error report for type 5 error -117 [ 118.452492][ T6576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.504275][ T6576] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.614330][ T6591] mmap: syz.5.976 (6591) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 119.457416][ T6613] netlink: 20 bytes leftover after parsing attributes in process `syz.6.986'. [ 119.475503][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.6.986'. [ 119.658698][ T6625] capability: warning: `syz.6.991' uses deprecated v2 capabilities in a way that may be insecure [ 119.783940][ T6628] loop6: detected capacity change from 0 to 128 [ 119.814175][ T6628] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000f0b) [ 119.823208][ T6628] FAT-fs (loop6): Filesystem has been set read-only [ 119.836495][ T6628] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000f0b) [ 119.853371][ T6628] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000f0b) [ 119.943263][ T6633] netlink: 76 bytes leftover after parsing attributes in process `syz.6.993'. [ 119.977846][ T6636] loop4: detected capacity change from 0 to 128 [ 120.055438][ T28] kauditd_printk_skb: 1868 callbacks suppressed [ 120.055457][ T28] audit: type=1400 audit(1780901929.354:2676): avc: denied { bind } for pid=6641 comm="syz.6.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.061273][ T6636] syz.4.995: attempt to access beyond end of device [ 120.061273][ T6636] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 120.103595][ T6644] netlink: 24 bytes leftover after parsing attributes in process `syz.5.999'. [ 120.111998][ T28] audit: type=1400 audit(1780901929.414:2677): avc: denied { connect } for pid=6647 comm="syz.6.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 120.136717][ T6636] syz.4.995: attempt to access beyond end of device [ 120.136717][ T6636] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 120.169691][ T6636] syz.4.995: attempt to access beyond end of device [ 120.169691][ T6636] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 120.188784][ T6636] syz.4.995: attempt to access beyond end of device [ 120.188784][ T6636] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 120.210120][ T6636] syz.4.995: attempt to access beyond end of device [ 120.210120][ T6636] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 120.227959][ T6636] syz.4.995: attempt to access beyond end of device [ 120.227959][ T6636] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 120.231811][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.999'. [ 120.247675][ T6636] syz.4.995: attempt to access beyond end of device [ 120.247675][ T6636] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 120.277856][ T6636] syz.4.995: attempt to access beyond end of device [ 120.277856][ T6636] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 120.299012][ T6636] syz.4.995: attempt to access beyond end of device [ 120.299012][ T6636] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 120.321567][ T6636] syz.4.995: attempt to access beyond end of device [ 120.321567][ T6636] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 120.832410][ T6660] loop5: detected capacity change from 0 to 128 [ 120.853987][ T6660] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000f0b) [ 120.863777][ T6660] FAT-fs (loop5): Filesystem has been set read-only [ 120.877214][ T6660] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000f0b) [ 120.891117][ T6660] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000f0b) [ 120.988973][ T28] audit: type=1400 audit(1780901930.294:2678): avc: denied { remount } for pid=6666 comm="syz.4.1007" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 121.166675][ T6662] loop0: detected capacity change from 0 to 512 [ 121.190082][ T6662] EXT4-fs: Ignoring removed oldalloc option [ 121.216718][ T6662] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 121.229464][ T6662] EXT4-fs (loop0): orphan cleanup on readonly fs [ 121.243519][ T6662] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 121.309264][ T6662] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 121.329986][ T6662] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.1003: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 121.376438][ T6662] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 121.381015][ T6662] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1003: couldn't read orphan inode 13 (err -117) [ 121.391160][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 121.391225][ C1] EXT4-fs (loop0): last error at time 1780901930: ext4_ext_check_inode:521: inode 13 [ 121.428476][ T6662] loop0: lost filesystem error report for type 5 error -117 [ 121.439796][ T6662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.477763][ T28] audit: type=1400 audit(1780901930.774:2679): avc: denied { unmount } for pid=3742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 121.569806][ T6662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.704300][ T6673] loop0: detected capacity change from 0 to 512 [ 121.746008][ T6673] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 121.779927][ T6673] EXT4-fs (loop0): 1 truncate cleaned up [ 121.887053][ T6673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.017229][ T3408] usb 10-1: device descriptor read/8, error -110 [ 122.139131][ T3408] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 122.197056][ T3408] usb 10-1: enqueue for inactive port 0 [ 122.198729][ T6694] netlink: 'syz.5.1018': attribute type 10 has an invalid length. [ 122.222492][ T3408] usb 10-1: enqueue for inactive port 0 [ 122.233741][ T3408] usb 10-1: enqueue for inactive port 0 [ 122.247321][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.261771][ T6694] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1018'. [ 122.304535][ T6694] bond0: entered promiscuous mode [ 122.328006][ T6694] bond_slave_0: entered promiscuous mode [ 122.365611][ T28] audit: type=1326 audit(1780901931.664:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6697 comm="syz.0.1020" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f90efce59 code=0x7ffc0000 [ 122.406581][ T6694] bond_slave_1: entered promiscuous mode [ 122.421181][ T6694] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 122.451134][ T28] audit: type=1326 audit(1780901931.664:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6697 comm="syz.0.1020" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f90efce59 code=0x7ffc0000 [ 122.498101][ T6698] loop0: detected capacity change from 0 to 512 [ 122.535697][ T28] audit: type=1326 audit(1780901931.664:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6697 comm="syz.0.1020" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f90efce59 code=0x7ffc0000 [ 122.571745][ T6698] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.586502][ T6700] loop5: detected capacity change from 0 to 512 [ 122.621864][ T28] audit: type=1326 audit(1780901931.664:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6697 comm="syz.0.1020" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5f90efce59 code=0x7ffc0000 [ 122.717604][ T6698] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1020: iget: bad i_size value: 38620345925642 [ 122.797298][ T6698] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.800410][ T6698] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1020: couldn't read orphan inode 15 (err -117) [ 122.812112][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 122.812196][ C1] EXT4-fs (loop0): initial error at time 1780901932: ext4_orphan_get:1397: inode 15 [ 122.812326][ C1] EXT4-fs (loop0): last error at time 1780901932: ext4_orphan_get:1397: inode 15 [ 122.855405][ T28] audit: type=1326 audit(1780901931.664:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6697 comm="syz.0.1020" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f90efce59 code=0x7ffc0000 [ 122.889671][ T6698] loop0: lost filesystem error report for type 5 error -117 [ 122.891130][ T28] audit: type=1326 audit(1780901931.664:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6697 comm="syz.0.1020" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f90efce59 code=0x7ffc0000 [ 122.934067][ T6698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.186554][ T2205] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:14: bg 0: block 5: invalid block bitmap [ 123.208444][ T2205] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 544 with error 28 [ 123.252748][ T2205] EXT4-fs (loop0): This should not happen!! Data will be lost [ 123.252748][ T2205] [ 123.268797][ T2205] EXT4-fs (loop0): Total free blocks count 0 [ 123.278628][ T2205] EXT4-fs (loop0): Free/Dirty block details [ 123.293792][ T2205] EXT4-fs (loop0): free_blocks=0 [ 123.307465][ T3408] usb usb10-port1: attempt power cycle [ 123.312383][ T2205] EXT4-fs (loop0): dirty_blocks=548 [ 123.322761][ T2205] EXT4-fs (loop0): Block reservation details [ 123.335271][ T2205] EXT4-fs (loop0): i_reserved_data_blocks=548 [ 123.351210][ T3311] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 123.374649][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.423453][ T6718] loop0: detected capacity change from 0 to 128 [ 123.483863][ T6718] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000f0b) [ 123.502999][ T6718] FAT-fs (loop0): Filesystem has been set read-only [ 123.514708][ T6716] syzkaller0: entered promiscuous mode [ 123.522310][ T6718] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000f0b) [ 123.534434][ T6716] syzkaller0: entered allmulticast mode [ 123.546535][ T6718] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000f0b) [ 123.867532][ T6733] bridge0: entered allmulticast mode [ 123.898371][ T6733] bond1: (slave bridge0): Releasing backup interface [ 123.917082][ T6733] bridge0 (unregistering): left promiscuous mode [ 124.943115][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1044'. [ 124.992460][ T6753] loop6: detected capacity change from 0 to 512 [ 125.068329][ T6753] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.109553][ T6753] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.1037: iget: bad i_size value: 38620345925642 [ 125.123969][ T6753] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 125.126154][ T6753] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1037: couldn't read orphan inode 15 (err -117) [ 125.126616][ T3408] usb usb10-port1: unable to enumerate USB device [ 125.136807][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 125.164433][ C0] EXT4-fs (loop6): initial error at time 1780901934: ext4_orphan_get:1397: inode 15 [ 125.175793][ C0] EXT4-fs (loop6): last error at time 1780901934: ext4_orphan_get:1397: inode 15 [ 125.192457][ T6753] loop6: lost filesystem error report for type 5 error -117 [ 125.197121][ T6753] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.220060][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 125.220087][ T28] audit: type=1326 audit(1780901934.524:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.6.1037" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b1411d68e code=0x7ffc0000 [ 125.259156][ T28] audit: type=1326 audit(1780901934.534:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.6.1037" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f3b1415b297 code=0x7ffc0000 [ 125.306097][ T28] audit: type=1326 audit(1780901934.534:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.6.1037" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b1411d68e code=0x7ffc0000 [ 125.384119][ T28] audit: type=1326 audit(1780901934.534:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.6.1037" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1415ce59 code=0x7ffc0000 [ 125.440182][ T6785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1061'. [ 125.444165][ T6788] syzkaller0: entered promiscuous mode [ 125.464220][ T28] audit: type=1326 audit(1780901934.534:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.6.1037" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1415ce59 code=0x7ffc0000 [ 125.496831][ T28] audit: type=1326 audit(1780901934.564:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.6.1037" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1415ce59 code=0x7ffc0000 [ 125.532098][ T28] audit: type=1326 audit(1780901934.564:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.6.1037" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1415ce59 code=0x7ffc0000 [ 125.599296][ T28] audit: type=1326 audit(1780901934.564:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.6.1037" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b1415ce59 code=0x7ffc0000 [ 125.632488][ T2205] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:14: bg 0: block 5: invalid block bitmap [ 125.647670][ T28] audit: type=1400 audit(1780901934.564:2780): avc: denied { write } for pid=6751 comm="syz.6.1037" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.682149][ T2205] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 148 with error 28 [ 125.696997][ T2205] EXT4-fs (loop6): This should not happen!! Data will be lost [ 125.696997][ T2205] [ 125.708189][ T2205] EXT4-fs (loop6): Total free blocks count 0 [ 125.715202][ T28] audit: type=1326 audit(1780901934.574:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.6.1037" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1415ce59 code=0x7ffc0000 [ 125.749800][ T2205] EXT4-fs (loop6): Free/Dirty block details [ 125.760197][ T2205] EXT4-fs (loop6): free_blocks=0 [ 125.765527][ T2205] EXT4-fs (loop6): dirty_blocks=148 [ 125.771552][ T2205] EXT4-fs (loop6): Block reservation details [ 125.781717][ T2205] EXT4-fs (loop6): i_reserved_data_blocks=148 [ 125.793870][ T5118] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 125.827582][ T5118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.190074][ T6790] xfrm1: left promiscuous mode [ 127.196053][ T6790] xfrm1: left allmulticast mode [ 127.202321][ T6790] bond1: left promiscuous mode [ 127.359109][ T6807] xt_hashlimit: size too large, truncated to 1048576 [ 127.627387][ T6823] syzkaller0: entered promiscuous mode [ 127.646318][ T6823] syzkaller0: entered allmulticast mode [ 127.870714][ T6834] tipc: Started in network mode [ 127.878346][ T6834] tipc: Node identity 4, cluster identity 4711 [ 127.886991][ T6834] tipc: Node number set to 4 [ 128.564138][ T6842] xt_hashlimit: size too large, truncated to 1048576 [ 128.655059][ T6846] netlink: 'syz.0.1073': attribute type 27 has an invalid length. [ 128.688665][ T6838] Set syz1 is full, maxelem 6117 reached [ 128.821779][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1085'. [ 137.159615][ T6862] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.167977][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.175581][ T6862] bridge_slave_0: entered allmulticast mode [ 137.183313][ T6862] bridge_slave_0: entered promiscuous mode [ 137.190420][ T6862] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.198130][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.206544][ T6862] bridge_slave_1: entered allmulticast mode [ 137.213644][ T6862] bridge_slave_1: entered promiscuous mode [ 137.232767][ T6862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.244784][ T6862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.265907][ T6862] team0: Port device team_slave_0 added [ 137.272897][ T6862] team0: Port device team_slave_1 added [ 137.288767][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.295746][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.321900][ T6862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.333309][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.340288][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.366401][ T6862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.396354][ T6862] hsr_slave_0: entered promiscuous mode [ 137.403319][ T6862] hsr_slave_1: entered promiscuous mode [ 137.410393][ T6862] debugfs: 'hsr0' already exists in 'hsr' [ 137.417476][ T6862] Cannot create hsr debugfs directory [ 137.462565][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1078'. [ 137.488444][ T2205] bridge_slave_1: left allmulticast mode [ 137.498611][ T2205] bridge_slave_1: left promiscuous mode [ 137.505774][ T2205] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.516535][ T2205] bridge_slave_0: left allmulticast mode [ 137.523134][ T2205] bridge_slave_0: left promiscuous mode [ 137.530856][ T2205] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.540074][ T6886] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 137.583298][ T2205] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 137.599930][ T6895] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.608468][ T6895] IPv6: NLM_F_CREATE should be set when creating new route [ 137.616156][ T6895] IPv6: NLM_F_CREATE should be set when creating new route [ 137.621748][ T6894] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1082'. [ 137.624980][ T6895] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.649479][ T2205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.659753][ T2205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.669639][ T2205] bond0 (unregistering): Released all slaves [ 137.678499][ T2205] bond1 (unregistering): (slave bond2): Releasing backup interface [ 137.687820][ T2205] bond1 (unregistering): Released all slaves [ 137.696967][ T2205] bond2 (unregistering): Released all slaves [ 137.711707][ T6887] bond1: entered promiscuous mode [ 137.717290][ T6887] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.730207][ T6892] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.739297][ T6892] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 137.751042][ T6892] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 137.769202][ T6895] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 137.785088][ T6895] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 137.808630][ T2205] tipc: Disabling bearer [ 137.815811][ T2205] tipc: Left network mode [ 137.915567][ T2205] hsr_slave_0: left promiscuous mode [ 137.927609][ T2205] hsr_slave_1: left promiscuous mode [ 137.936156][ T2205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.945259][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 137.945276][ T28] audit: type=1400 audit(1780901947.244:2816): avc: denied { open } for pid=6910 comm="syz.5.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 137.971277][ T2205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.978891][ T28] audit: type=1400 audit(1780901947.244:2817): avc: denied { kernel } for pid=6910 comm="syz.5.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 138.000306][ T28] audit: type=1400 audit(1780901947.244:2818): avc: denied { create } for pid=6910 comm="syz.5.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 138.028124][ T28] audit: type=1400 audit(1780901947.334:2819): avc: denied { write } for pid=6902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.053239][ T2205] veth0_vlan: left promiscuous mode [ 138.073252][ T28] audit: type=1400 audit(1780901947.374:2820): avc: denied { write } for pid=6917 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.154315][ T2205] team0 (unregistering): Port device team_slave_1 removed [ 138.164569][ T2205] team0 (unregistering): Port device team_slave_0 removed [ 138.204421][ T3030] 8021q: adding VLAN 0 to HW filter on device eth5 [ 138.265859][ T6925] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1087'. [ 138.275851][ T6862] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 138.300049][ T6862] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 138.330558][ T6862] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 138.341063][ T6862] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 138.350166][ T6862] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 138.361841][ T6862] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 138.363039][ T6925] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6925 comm=syz.5.1087 [ 138.396914][ T6862] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 138.434063][ T6862] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 138.444340][ T28] audit: type=1400 audit(1780901947.744:2821): avc: denied { write } for pid=6927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.495420][ T6948] loop0: detected capacity change from 0 to 512 [ 138.515039][ T28] audit: type=1400 audit(1780901947.814:2822): avc: denied { write } for pid=6949 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.604798][ T3030] 8021q: adding VLAN 0 to HW filter on device eth6 [ 138.710649][ T6963] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 138.718759][ T6963] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 138.763166][ T6862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.784327][ T6963] vhci_hcd vhci_hcd.0: Device attached [ 138.789937][ T2205] IPVS: stop unused estimator thread 0... [ 138.821140][ T6862] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.842655][ T2130] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.850465][ T2130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.906873][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.914895][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.926984][ T6964] vhci_hcd: connection closed [ 138.928374][ T28] audit: type=1400 audit(1780901948.234:2823): avc: denied { write } for pid=6962 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.965100][ T1728] vhci_hcd vhci_hcd.5: stop threads [ 138.980228][ T1728] vhci_hcd vhci_hcd.5: release socket [ 139.016451][ T1728] vhci_hcd vhci_hcd.5: disconnect device [ 139.056420][ T35] usb 12-1: enqueue for inactive port 0 [ 139.067475][ T28] audit: type=1400 audit(1780901948.374:2824): avc: denied { write } for pid=6978 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.130833][ T28] audit: type=1400 audit(1780901948.404:2825): avc: denied { sys_module } for pid=6862 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 139.163582][ T3030] 8021q: adding VLAN 0 to HW filter on device eth7 [ 139.203186][ T6984] bond4: (slave ip6gretap2): making interface the new active one [ 139.221380][ T6984] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 139.235640][ T6948] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 139.263184][ T6948] System zones: [ 139.266309][ T35] usb 12-1: enqueue for inactive port 0 [ 139.267722][ T6948] 0-2, 18-18, 34-34 [ 139.430497][ T6862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.479488][ T6948] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1091: bg 0: block 248: padding at end of block bitmap is not set [ 139.501302][ T6948] loop0: lost filesystem error report for type 5 error -117 [ 139.531923][ T6948] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.1091: Failed to acquire dquot type 1 [ 139.541394][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 139.542135][ C0] EXT4-fs (loop0): last error at time 1780901948: ext4_validate_block_bitmap:441 [ 139.607286][ T6948] loop0: lost filesystem error report for type 5 error -117 [ 139.645996][ T6948] EXT4-fs (loop0): 1 truncate cleaned up [ 139.660515][ T6948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.686365][ T6948] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.725313][ T3030] 8021q: adding VLAN 0 to HW filter on device eth8 [ 139.828623][ T6862] veth0_vlan: entered promiscuous mode [ 139.851164][ T6862] veth1_vlan: entered promiscuous mode [ 139.893527][ T6862] veth0_macvtap: entered promiscuous mode [ 139.915894][ T6862] veth1_macvtap: entered promiscuous mode [ 139.932349][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.944544][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.955746][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.980763][ T2205] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.991449][ T2205] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.002705][ T2205] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.041420][ T2205] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.370009][ T7060] loop3: detected capacity change from 0 to 512 [ 140.386523][ T35] usb usb12-port1: attempt power cycle [ 140.402707][ T7060] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.441169][ T7060] EXT4-fs (loop3): 1 truncate cleaned up [ 140.465298][ T7060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.540667][ T7067] loop5: detected capacity change from 0 to 512 [ 140.552782][ T7067] EXT4-fs: test_dummy_encryption option not supported [ 140.606612][ T7070] tipc: Failed to remove unknown binding: 66,0,0/0:3746454179/3746454180 [ 140.629586][ T7070] tipc: Failed to remove unknown binding: 66,0,0/0:3746454179/3746454180 [ 140.655457][ T7067] loop5: detected capacity change from 0 to 2048 [ 140.745043][ T7074] Set syz1 is full, maxelem 4 reached [ 140.794227][ T7067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.406089][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.599501][ T7090] loop7: detected capacity change from 0 to 512 [ 141.631383][ T7090] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 141.679494][ T7090] EXT4-fs (loop7): 1 truncate cleaned up [ 141.734983][ T7090] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.804070][ T4070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.859488][ T6862] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.988896][ T7111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.999362][ T7111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.009459][ T7108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1123'. [ 142.027452][ T7108] bond0: (slave bond_slave_0): Releasing backup interface [ 142.071054][ T7108] bond_slave_0: entered promiscuous mode [ 142.077978][ T7108] bond_slave_0: entered allmulticast mode [ 142.210222][ T7129] loop0: detected capacity change from 0 to 512 [ 142.322822][ T7129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.356510][ T7129] ext4 filesystem being mounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.450062][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.846032][ T7181] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1138'. [ 142.950477][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.961233][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 143.057989][ T35] usb usb12-port1: unable to enumerate USB device [ 143.335329][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 143.335349][ T28] audit: type=1400 audit(1780901952.634:2880): avc: denied { bind } for pid=7184 comm="syz.6.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 144.855342][ T7212] netlink: 'syz.6.1149': attribute type 1 has an invalid length. [ 144.909981][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1149'. [ 144.941334][ T7212] bond5: entered promiscuous mode [ 144.967139][ T7212] bond5: entered allmulticast mode [ 144.974236][ T7212] 8021q: adding VLAN 0 to HW filter on device bond5 [ 145.027867][ T7217] bond5 (unregistering): Released all slaves [ 145.590844][ T7252] netlink: 'syz.7.1161': attribute type 1 has an invalid length. [ 145.630254][ T7252] netlink: 5 bytes leftover after parsing attributes in process `syz.7.1161'. [ 146.018460][ T7263] loop5: detected capacity change from 0 to 8192 [ 146.078207][ T7265] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 146.115657][ T28] audit: type=1400 audit(1780901955.414:2881): avc: denied { setopt } for pid=7262 comm="syz.5.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 146.436016][ T28] audit: type=1400 audit(1780901955.734:2882): avc: denied { getopt } for pid=7271 comm="syz.0.1167" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.518177][ T28] audit: type=1400 audit(1780901955.824:2883): avc: denied { cpu } for pid=7273 comm="syz.7.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 147.051550][ T28] audit: type=1400 audit(1780901956.354:2884): avc: denied { ioctl } for pid=7285 comm="syz.7.1172" path="socket:[19390]" dev="sockfs" ino=19390 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 147.548473][ T28] audit: type=1400 audit(1780901956.854:2885): avc: denied { bind } for pid=7292 comm="syz.3.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 148.455854][ T7319] loop5: detected capacity change from 0 to 512 [ 148.570208][ T7319] FAT-fs (loop5): FAT read failed (blocknr 128) [ 148.940255][ T7338] syzkaller0: entered promiscuous mode [ 148.955540][ T28] audit: type=1326 audit(1780901958.244:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.7.1193" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e721bce59 code=0x0 [ 148.992540][ T7338] syzkaller0: entered allmulticast mode [ 149.204019][ T7348] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.1195'. [ 149.620036][ T7376] loop5: detected capacity change from 0 to 2048 [ 149.683199][ T7376] loop5: p2 p3 < > p4 < p5 > [ 149.688768][ T7376] loop5: partition table partially beyond EOD, truncated [ 149.703695][ T7376] loop5: p3 start 4284289 is beyond EOD, truncated [ 149.754545][ T2991] loop5: p2 p3 < > p4 < p5 > [ 149.761843][ T2991] loop5: partition table partially beyond EOD, truncated [ 149.777638][ T2991] loop5: p3 start 4284289 is beyond EOD, truncated [ 149.832995][ T6878] udevd[6878]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 149.838194][ T7092] udevd[7092]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 149.843483][ T6871] udevd[6871]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 149.930416][ T28] audit: type=1400 audit(1780901959.234:2887): avc: denied { write } for pid=7383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.988954][ T28] audit: type=1400 audit(1780901959.294:2888): avc: denied { write } for pid=7403 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.133120][ T7415] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 150.140786][ T7415] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 150.166925][ T7415] vhci_hcd vhci_hcd.0: Device attached [ 150.224228][ T7416] vhci_hcd: connection closed [ 150.225299][ T1917] vhci_hcd vhci_hcd.6: stop threads [ 150.237105][ T1917] vhci_hcd vhci_hcd.6: release socket [ 150.246983][ T1917] vhci_hcd vhci_hcd.6: disconnect device [ 150.586150][ T7431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1217'. [ 150.647135][ T7435] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 150.889816][ T7444] loop6: detected capacity change from 0 to 512 [ 150.976772][ T7444] EXT4-fs: Ignoring removed bh option [ 151.038455][ T7451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1225'. [ 151.048768][ T7444] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 151.096533][ T7444] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.1223: corrupted in-inode xattr: e_value size too large [ 151.131204][ T7444] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 151.144642][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1225'. [ 151.154110][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 151.154144][ C0] EXT4-fs (loop6): initial error at time 1780902216: ext4_iget_extra_inode:5128: inode 15 [ 151.154167][ C0] EXT4-fs (loop6): last error at time 1780902216: ext4_iget_extra_inode:5128: inode 15 [ 151.199063][ T7444] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1223: couldn't read orphan inode 15 (err -117) [ 151.206532][ T28] audit: type=1400 audit(1780902216.481:2889): avc: denied { bind } for pid=7463 comm="syz.7.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 151.225150][ T7444] loop6: lost filesystem error report for type 5 error -117 [ 151.317335][ T28] audit: type=1400 audit(1780902216.611:2890): avc: denied { read } for pid=7472 comm="syz.5.1229" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.351687][ T7444] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.370871][ T28] audit: type=1400 audit(1780902216.621:2891): avc: denied { write } for pid=7447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.427851][ T28] audit: type=1400 audit(1780902216.671:2892): avc: denied { write } for pid=7476 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.556575][ T5118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.682759][ T28] audit: type=1400 audit(1780902216.981:2893): avc: denied { write } for pid=7481 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.715693][ T7495] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1232'. [ 151.742300][ T28] audit: type=1400 audit(1780902217.041:2894): avc: denied { write } for pid=7501 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.915382][ T28] audit: type=1400 audit(1780902217.211:2895): avc: denied { bind } for pid=7515 comm="syz.6.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.282210][ T7533] loop5: detected capacity change from 0 to 4096 [ 152.300377][ T7533] EXT4-fs: dax option not supported [ 152.462993][ T7534] loop6: detected capacity change from 0 to 2048 [ 152.555360][ T7534] loop6: p2 p3 < > p4 < p5 > [ 152.561545][ T7534] loop6: partition table partially beyond EOD, truncated [ 152.581996][ T7534] loop6: p3 start 4284289 is beyond EOD, truncated [ 153.190364][ T7568] loop6: detected capacity change from 0 to 512 [ 153.205377][ T7568] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 153.259864][ T7568] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 153.270055][ T7568] System zones: 1-12 [ 153.278086][ T7568] EXT4-fs (loop6): 1 truncate cleaned up [ 153.285613][ T7568] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.671137][ T7592] macsec1: entered promiscuous mode [ 153.699229][ T5118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.987810][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 153.987828][ T28] audit: type=1400 audit(1780902219.291:2904): avc: denied { create } for pid=7611 comm="syz.6.1271" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.033013][ T7612] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1271'. [ 154.105379][ T7612] loop6: detected capacity change from 0 to 512 [ 154.114767][ T7612] EXT4-fs (loop6): bad s_min_extra_isize: 2304 [ 154.123173][ T28] audit: type=1400 audit(1780902219.411:2905): avc: denied { mounton } for pid=7611 comm="syz.6.1271" path="/164/file0" dev="tmpfs" ino=873 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.196805][ T28] audit: type=1400 audit(1780902219.501:2906): avc: denied { unlink } for pid=5118 comm="syz-executor" name="file0" dev="tmpfs" ino=873 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.473737][ T7642] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 154.528121][ T7644] loop5: detected capacity change from 0 to 1024 [ 154.548096][ T7644] EXT4-fs: Ignoring removed bh option [ 154.575871][ T7644] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.668187][ T7644] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.072788][ T7673] tipc: Failed to remove unknown binding: 66,0,0/0:2608326585/2608326586 [ 155.087494][ T7675] loop6: detected capacity change from 0 to 1024 [ 155.095448][ T7673] tipc: Failed to remove unknown binding: 66,0,0/0:2608326585/2608326586 [ 155.118515][ T7675] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 155.127044][ T7675] System zones: 0-1, 3-8 [ 155.131977][ T7675] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 155.144634][ T7675] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.165337][ T28] audit: type=1400 audit(1780902220.461:2907): avc: denied { write } for pid=7674 comm="syz.6.1294" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.189009][ T7675] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.1294: lblock 0 mapped to illegal pblock 0 (length 1) [ 155.213632][ T7675] EXT4-fs error (device loop6): ext4_ext_remove_space:2969: inode #15: comm syz.6.1294: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 155.244765][ T28] audit: type=1400 audit(1780902220.491:2908): avc: denied { map } for pid=7674 comm="syz.6.1294" path="/166/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.298605][ T28] audit: type=1400 audit(1780902220.541:2909): avc: denied { write } for pid=7678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.299709][ T7675] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.1294: lblock 0 mapped to illegal pblock 0 (length 1) [ 155.323937][ T28] audit: type=1400 audit(1780902220.561:2910): avc: denied { write } for pid=7691 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.373199][ T7675] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 155.406005][ T7675] EXT4-fs (loop6): This should not happen!! Data will be lost [ 155.406005][ T7675] [ 155.482457][ T7704] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 155.489383][ T7704] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 155.498143][ T7704] vhci_hcd vhci_hcd.0: Device attached [ 155.565468][ T5118] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 155.578181][ T5118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 155.684599][ T7705] vhci_hcd: connection closed [ 155.684903][ T2205] vhci_hcd vhci_hcd.7: stop threads [ 155.713541][ T2205] vhci_hcd vhci_hcd.7: release socket [ 155.719449][ T2205] vhci_hcd vhci_hcd.7: disconnect device [ 155.766330][ T3395] usb 16-1: enqueue for inactive port 0 [ 155.781094][ T7724] loop6: detected capacity change from 0 to 512 [ 155.790316][ T7724] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 155.818021][ T7724] EXT4-fs (loop6): 1 truncate cleaned up [ 155.825280][ T7724] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.900184][ T28] audit: type=1400 audit(1780902221.201:2911): avc: denied { create } for pid=7720 comm="syz.6.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.935665][ T28] audit: type=1400 audit(1780902221.221:2912): avc: denied { bind } for pid=7720 comm="syz.6.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.961373][ T5118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.974574][ T28] audit: type=1400 audit(1780902221.221:2913): avc: denied { listen } for pid=7720 comm="syz.6.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.977429][ T3395] usb 16-1: enqueue for inactive port 0 [ 156.029602][ T7733] loop6: detected capacity change from 0 to 256 [ 156.098137][ T7733] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 156.123707][ T7733] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 156.192289][ T7733] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 156.232980][ T7733] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 156.265137][ T7733] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 156.305210][ T7733] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 156.332170][ T7733] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 156.354486][ T7734] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 156.367129][ T7734] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 156.399423][ T7734] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 156.548282][ T7744] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1316'. [ 156.603414][ T7744] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7744 comm=syz.5.1316 [ 156.927594][ T7751] loop5: detected capacity change from 0 to 512 [ 157.136560][ T3395] usb usb16-port1: attempt power cycle [ 157.357276][ T7769] loop5: detected capacity change from 0 to 512 [ 157.388271][ T7769] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 157.404305][ T7769] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 157.414805][ T7769] System zones: 1-12 [ 157.462741][ T7769] EXT4-fs (loop5): 1 truncate cleaned up [ 157.469150][ T7769] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.653339][ T7789] loop6: detected capacity change from 0 to 128 [ 157.843128][ T4070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.278211][ T7839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.289397][ T7839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.324158][ T7839] netlink: 'syz.6.1352': attribute type 4 has an invalid length. [ 159.383336][ T7839] netlink: 'syz.6.1352': attribute type 4 has an invalid length. [ 159.418759][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 159.418779][ T28] audit: type=1400 audit(1780902480.725:2919): avc: denied { ioctl } for pid=7842 comm="syz.5.1353" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 159.496590][ T3395] usb usb16-port1: unable to enumerate USB device [ 160.799055][ T7897] SELinux: security_context_str_to_sid (}ob?3blG;oxodigU) failed with errno=-22 [ 160.910219][ T28] audit: type=1400 audit(1780902482.215:2920): avc: denied { read append } for pid=7902 comm="syz.5.1375" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 160.949587][ T28] audit: type=1400 audit(1780902482.215:2921): avc: denied { open } for pid=7902 comm="syz.5.1375" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 161.029881][ T7907] netlink: 'syz.3.1377': attribute type 4 has an invalid length. [ 161.047826][ T7907] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1377'. [ 161.062157][ T7908] macsec1: entered promiscuous mode [ 161.122427][ T7913] loop6: detected capacity change from 0 to 512 [ 161.149034][ T7913] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.169909][ T7913] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.190537][ T28] audit: type=1400 audit(1780902482.495:2922): avc: denied { setattr } for pid=7906 comm="syz.6.1376" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 161.223005][ T5118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.503387][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'. [ 161.870813][ T7940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1386'. [ 161.893898][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1385'. [ 161.904007][ T7941] netlink: 'syz.5.1385': attribute type 5 has an invalid length. [ 161.912777][ T7941] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1385'. [ 161.946031][ T7938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.957467][ T7938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.006500][ T7940] ip6gre2: entered promiscuous mode [ 162.021765][ T7940] ip6gre2: entered allmulticast mode [ 162.046875][ T3363] syz1: Port: 1 Link DOWN [ 162.062615][ T7941] geneve2: entered promiscuous mode [ 162.070949][ T7941] geneve2: entered allmulticast mode [ 162.078379][ T7943] netlink: 'syz.0.1386': attribute type 6 has an invalid length. [ 162.091891][ T7943] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1386'. [ 162.106489][ T1754] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.117982][ T1754] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 162.129599][ T1754] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.141570][ T1754] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 162.182424][ T1754] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.208919][ T1754] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 162.220525][ T1754] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.232223][ T1754] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 162.421359][ T7966] loop5: detected capacity change from 0 to 512 [ 162.478058][ T7966] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.1396: inode has both inline data and extents flags [ 162.497170][ T7966] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 162.497398][ T7966] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1396: couldn't read orphan inode 15 (err -117) [ 162.508344][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 162.508372][ C0] EXT4-fs (loop5): initial error at time 1780902483: ext4_orphan_get:1397: inode 15 [ 162.508412][ C0] EXT4-fs (loop5): last error at time 1780902483: ext4_orphan_get:1397: inode 15 [ 162.614451][ T28] audit: type=1400 audit(1780902483.915:2923): avc: denied { read } for pid=7971 comm="syz.0.1398" lport=46796 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 162.646462][ T7966] loop5: lost filesystem error report for type 5 error -117 [ 162.648435][ T7966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.679897][ T28] audit: type=1400 audit(1780902483.955:2924): avc: denied { ioctl } for pid=7971 comm="syz.0.1398" path="socket:[21394]" dev="sockfs" ino=21394 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 162.719557][ T28] audit: type=1400 audit(1780902483.955:2925): avc: denied { bind } for pid=7971 comm="syz.0.1398" lport=46796 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 162.760890][ T7975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1399'. [ 162.765686][ T28] audit: type=1400 audit(1780902484.065:2926): avc: denied { write } for pid=7965 comm="syz.5.1396" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.812657][ T7975] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7975 comm=syz.3.1399 [ 162.874096][ T4070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.986114][ T7992] bridge0: port 1(gretap0) entered blocking state [ 162.996451][ T7992] bridge0: port 1(gretap0) entered disabled state [ 163.019272][ T7992] gretap0: entered allmulticast mode [ 163.118126][ T7992] gretap0: entered promiscuous mode [ 163.133168][ T7992] bridge0: port 1(gretap0) entered blocking state [ 163.139759][ T7992] bridge0: port 1(gretap0) entered forwarding state [ 164.123370][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1418'. [ 164.175782][ T8023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1418'. [ 164.233410][ T28] audit: type=1400 audit(1780902485.535:2927): avc: denied { bind } for pid=8024 comm="syz.0.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 164.612176][ T8041] loop5: detected capacity change from 0 to 128 [ 164.648475][ T8041] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 164.673010][ T8041] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.698524][ T28] audit: type=1400 audit(1780902485.995:2928): avc: denied { bind } for pid=8035 comm="syz.3.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 164.705448][ T8041] ext2 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.860298][ T4070] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.954197][ T8046] loop5: detected capacity change from 0 to 2048 [ 165.047638][ T8050] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1427'. [ 165.078718][ T8050] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8050 comm=syz.5.1427 [ 165.924108][ T8072] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.1438'. [ 166.073308][ T8067] IPVS: lc: FWM 3 0x00000003 - no destination available [ 166.081466][ T35] IPVS: starting estimator thread 0... [ 166.186826][ T8081] IPVS: using max 2448 ests per chain, 122400 per kthread [ 166.641991][ T8084] xt_hashlimit: invalid rate [ 166.724904][ T8084] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1445'. [ 166.758227][ T8084] netlink: zone id is out of range [ 166.775948][ T8097] tipc: Failed to remove unknown binding: 66,0,0/0:3047451933/3047451935 [ 166.785165][ T8084] netlink: zone id is out of range [ 166.800806][ T8084] netlink: zone id is out of range [ 166.808549][ T8097] tipc: Failed to remove unknown binding: 66,0,0/0:3047451933/3047451934 [ 166.821806][ T8084] netlink: zone id is out of range [ 166.838062][ T8084] netlink: zone id is out of range [ 166.838496][ T8098] tipc: Failed to remove unknown binding: 66,0,0/0:3047451933/3047451935 [ 166.838535][ T8098] tipc: Failed to remove unknown binding: 66,0,0/0:3047451933/3047451934 [ 166.893368][ T8084] netlink: zone id is out of range [ 166.928481][ T8084] netlink: zone id is out of range [ 166.933213][ T8100] loop2: detected capacity change from 0 to 7 [ 166.945807][ T8100] loop2: p1 [ 166.953155][ T8100] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 166.958479][ T8084] netlink: zone id is out of range [ 166.988293][ T8084] netlink: zone id is out of range [ 167.015728][ T6878] udevd[6878]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 167.320614][ T8103] loop5: detected capacity change from 0 to 1024 [ 167.322344][ T1917] IPVS: stop unused estimator thread 0... [ 167.390520][ T8103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 167.403652][ T8103] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.433553][ T8103] netdevsim netdevsim5: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 167.486725][ T4070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 167.517517][ T8114] loop6: detected capacity change from 0 to 512 [ 167.562414][ T8114] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.576472][ T1917] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.607187][ T8114] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.665381][ T1917] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.720648][ T3363] IPVS: starting estimator thread 0... [ 167.754022][ T1917] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.787701][ T5118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.849662][ T8124] IPVS: using max 2976 ests per chain, 148800 per kthread [ 167.858643][ T1917] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.155147][ T8150] netlink: 'syz.0.1467': attribute type 11 has an invalid length. [ 168.216804][ T8133] macsec1: entered promiscuous mode [ 168.257470][ T8141] syz_tun: entered allmulticast mode [ 168.338404][ T1917] bridge_slave_1: left allmulticast mode [ 168.354151][ T1917] bridge_slave_1: left promiscuous mode [ 168.365251][ T1917] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.380060][ T1917] bridge_slave_0: left allmulticast mode [ 168.390090][ T1917] bridge_slave_0: left promiscuous mode [ 168.397303][ T1917] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.460407][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1469'. [ 168.470424][ T8158] netlink: 'syz.7.1469': attribute type 5 has an invalid length. [ 168.497699][ T8158] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1469'. [ 168.554134][ T1917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.575599][ T1917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.588846][ T1917] bond0 (unregistering): Released all slaves [ 168.599620][ T1917] bond1 (unregistering): Released all slaves [ 168.660598][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.667848][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.771700][ T8155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.799745][ T8162] loop6: detected capacity change from 0 to 2048 [ 168.802382][ T8155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.911820][ T8166] loop6: detected capacity change from 0 to 1024 [ 168.938374][ T8166] EXT4-fs: Ignoring removed bh option [ 168.993579][ T8166] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.289182][ T8158] geneve2: entered promiscuous mode [ 169.299299][ T8158] geneve2: entered allmulticast mode [ 169.310571][ T68] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.327666][ T68] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 169.347746][ T68] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.368913][ T68] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 169.392981][ T8172] No such timeout policy "syz1" [ 169.423170][ T68] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.448864][ T68] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 169.500392][ T68] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.511022][ T68] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 169.526422][ T1917] hsr_slave_0: left promiscuous mode [ 169.544340][ T1917] hsr_slave_1: left promiscuous mode [ 169.586173][ T1917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.671741][ T1917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.681816][ T28] audit: type=1400 audit(1780902490.985:2929): avc: denied { write } for pid=8179 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.723291][ T1917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.764823][ T1917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.825833][ T1917] veth1_macvtap: left promiscuous mode [ 169.849807][ T1917] veth0_macvtap: left promiscuous mode [ 169.867223][ T1917] veth1_vlan: left promiscuous mode [ 169.875038][ T28] audit: type=1400 audit(1780902491.165:2930): avc: denied { write } for pid=8198 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.905969][ T1917] veth0_vlan: left promiscuous mode [ 170.122080][ T8210] loop5: detected capacity change from 0 to 512 [ 170.180374][ T8210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.205558][ T8210] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.367199][ T5118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.384041][ T1917] team0 (unregistering): Port device team_slave_1 removed [ 170.398429][ T1917] team0 (unregistering): Port device team_slave_0 removed [ 170.464456][ T28] audit: type=1400 audit(1780902491.765:2931): avc: denied { ioctl } for pid=8216 comm="syz.6.1485" path="socket:[23872]" dev="sockfs" ino=23872 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 170.492053][ T3030] 8021q: adding VLAN 0 to HW filter on device eth9 [ 170.599034][ T8206] macsec1: entered promiscuous mode [ 170.998194][ T4070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.095698][ T28] audit: type=1400 audit(1780902492.395:2932): avc: denied { mounton } for pid=8250 comm="syz.3.1497" path=2F3237382FE91F7189591E9233614B dev="tmpfs" ino=1467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 171.219437][ T28] audit: type=1400 audit(1780902492.515:2933): avc: denied { write } for pid=8245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.298854][ T28] audit: type=1400 audit(1780902492.595:2934): avc: denied { write } for pid=8275 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.345303][ T3030] 8021q: adding VLAN 0 to HW filter on device eth10 [ 171.489398][ T8283] loop6: detected capacity change from 0 to 8192 [ 171.501639][ T28] audit: type=1400 audit(1780902492.805:2935): avc: denied { write } for pid=8280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.538322][ T3030] 8021q: adding VLAN 0 to HW filter on device eth11 [ 171.539992][ T28] audit: type=1400 audit(1780902492.805:2936): avc: denied { write } for pid=8293 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.591957][ T8283] loop6: p1 < > p2 p4 < p5 > [ 171.597420][ T8283] loop6: partition table partially beyond EOD, truncated [ 171.609920][ T8283] loop6: p1 start 134217728 is beyond EOD, truncated [ 171.617218][ T8283] loop6: p2 size 67072 extends beyond EOD, truncated [ 171.626620][ T8283] loop6: p5 size 67072 extends beyond EOD, truncated [ 171.692527][ T28] audit: type=1400 audit(1780902492.995:2937): avc: denied { write } for pid=8296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.727728][ T28] audit: type=1400 audit(1780902493.025:2938): avc: denied { write } for pid=8313 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.762358][ T3030] 8021q: adding VLAN 0 to HW filter on device eth12 [ 171.971492][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1508'. [ 172.173239][ T8337] loop5: detected capacity change from 0 to 128 [ 172.200037][ T8337] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.218646][ T8337] ext4 filesystem being mounted at /278/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 172.242303][ T28] audit: type=1400 audit(1780902493.545:2939): avc: denied { write } for pid=8336 comm="syz.5.1513" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.421653][ T4070] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.512249][ T8345] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 173.081194][ T8355] futex_wake_op: syz.0.1516 tries to shift op by 35; fix this program [ 173.382408][ T8369] xt_hashlimit: invalid rate [ 173.439256][ T8369] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.1522'. [ 173.470239][ T8369] net_ratelimit: 20 callbacks suppressed [ 173.470363][ T8369] netlink: zone id is out of range [ 173.492356][ T8369] netlink: zone id is out of range [ 173.500657][ T8369] netlink: zone id is out of range [ 173.519742][ T8369] netlink: zone id is out of range [ 173.540359][ T8369] netlink: zone id is out of range [ 173.546966][ T8369] netlink: zone id is out of range [ 173.556982][ T8369] netlink: zone id is out of range [ 173.568775][ T8369] netlink: zone id is out of range [ 173.589934][ T8369] netlink: zone id is out of range [ 173.603353][ T8369] netlink: zone id is out of range [ 173.615367][ T8374] syz_tun: entered allmulticast mode [ 173.861579][ T8382] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1526'. [ 174.111261][ T8391] netlink: 'syz.7.1530': attribute type 1 has an invalid length. [ 174.120204][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1530'. [ 174.189087][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 174.342963][ T8384] loop5: detected capacity change from 0 to 2048 [ 174.354380][ T8400] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 174.946192][ T8384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.788970][ T4070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.247104][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1538'. [ 176.295618][ T8417] loop5: detected capacity change from 0 to 256 [ 176.397018][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 176.397037][ T28] audit: type=1400 audit(1780902497.705:2992): avc: denied { create } for pid=8420 comm="syz.5.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 176.448687][ T28] audit: type=1400 audit(1780902497.745:2993): avc: denied { bind } for pid=8420 comm="syz.5.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 176.488723][ T8421] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.1540'. [ 176.512877][ T28] audit: type=1400 audit(1780902497.745:2994): avc: denied { name_bind } for pid=8420 comm="syz.5.1540" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 176.555134][ T28] audit: type=1400 audit(1780902497.745:2995): avc: denied { node_bind } for pid=8420 comm="syz.5.1540" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 176.694615][ T8428] SELinux: security_context_str_to_sid (}ob?3blG;oxodigU) failed with errno=-22 [ 176.760401][ T8430] batadv0: entered promiscuous mode [ 176.771849][ T8430] macvlan2: entered allmulticast mode [ 176.779745][ T8430] batadv0: entered allmulticast mode [ 176.787146][ T8430] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 176.819391][ T8430] batadv0: left allmulticast mode [ 176.824963][ T8430] batadv0: left promiscuous mode [ 177.144534][ T8437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1546'. [ 177.189618][ T8437] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8437 comm=syz.0.1546 [ 177.299798][ T8434] loop6: detected capacity change from 0 to 1024 [ 177.329503][ T8434] EXT4-fs (loop6): blocks per group (131072) and clusters per group (32) inconsistent [ 177.601793][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1553'. [ 177.866004][ T8459] netlink: 'syz.6.1556': attribute type 1 has an invalid length. [ 177.954824][ T8459] 8021q: adding VLAN 0 to HW filter on device bond5 [ 178.458246][ T28] audit: type=1400 audit(1780902499.765:2996): avc: denied { setopt } for pid=8489 comm="syz.6.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 178.558852][ T8444] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 178.619591][ T28] audit: type=1326 audit(1780902499.925:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.0.1580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f90efce59 code=0x0 [ 178.659066][ T8505] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 178.683594][ T8507] tipc: Enabling of bearer rejected, media not registered [ 178.693912][ T8507] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1572'. [ 178.703974][ T8507] net_ratelimit: 19 callbacks suppressed [ 178.703992][ T8507] netlink: zone id is out of range [ 178.714852][ T8507] netlink: zone id is out of range [ 178.720088][ T8507] netlink: zone id is out of range [ 178.724850][ T28] audit: type=1326 audit(1780902500.025:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.0.1580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f90efce59 code=0x7ffc0000 [ 178.725549][ T8507] netlink: zone id is out of range [ 178.753580][ T28] audit: type=1326 audit(1780902500.025:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.0.1580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f90efce59 code=0x7ffc0000 [ 178.758900][ T8510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8510 comm=syz.3.1572 [ 178.803112][ T8507] netlink: zone id is out of range [ 178.811876][ T8507] netlink: zone id is out of range [ 178.832271][ T28] audit: type=1326 audit(1780902500.065:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.0.1580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f90efce59 code=0x7ffc0000 [ 178.832619][ T8507] netlink: set zone limit has 8 unknown bytes [ 178.869330][ T28] audit: type=1326 audit(1780902500.065:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.0.1580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f90efce59 code=0x7ffc0000 [ 179.656361][ T8530] SELinux: security_context_str_to_sid (}ob?3blG;oxodigU) failed with errno=-22 [ 179.712580][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1582'. [ 180.369574][ T8542] netlink: 199828 bytes leftover after parsing attributes in process `syz.6.1584'. [ 180.511316][ T8550] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1585'. [ 180.555563][ T8553] netlink: 'syz.3.1589': attribute type 21 has an invalid length. [ 180.574932][ T8553] IPv6: NLM_F_CREATE should be specified when creating new route [ 180.597098][ T8553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 180.604600][ T8553] IPv6: NLM_F_CREATE should be set when creating new route [ 180.607715][ T8554] netlink: 'syz.3.1589': attribute type 21 has an invalid length. [ 180.612167][ T8553] IPv6: NLM_F_CREATE should be set when creating new route [ 180.627926][ T8553] IPv6: NLM_F_CREATE should be set when creating new route [ 180.637823][ T8554] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.020957][ T8546] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1586'. [ 182.030595][ T8546] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1586'. [ 182.065752][ T8553] vlan2: entered promiscuous mode [ 182.076769][ T8561] loop5: detected capacity change from 0 to 1024 [ 182.113485][ T8561] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.143677][ T28] kauditd_printk_skb: 319 callbacks suppressed [ 182.143697][ T28] audit: type=1400 audit(1780902503.445:3321): avc: denied { write } for pid=8558 comm="syz.5.1590" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.144224][ T8561] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.5.1590: path /294/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0 [ 182.230755][ T8578] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.1597'. [ 182.264364][ T4070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.345543][ T8586] loop5: detected capacity change from 0 to 4096 [ 182.365783][ T8586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.376963][ T8590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1601'. [ 182.399672][ T8590] 8021q: adding VLAN 0 to HW filter on device bond5 [ 182.400802][ T28] audit: type=1400 audit(1780902503.705:3322): avc: denied { write } for pid=8585 comm="syz.5.1599" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.419479][ T8590] macvlan2: entered promiscuous mode [ 182.434113][ T8590] macvlan2: entered allmulticast mode [ 182.543906][ T28] audit: type=1400 audit(1780902503.845:3323): avc: denied { write } for pid=8596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.601912][ T28] audit: type=1400 audit(1780902503.905:3324): avc: denied { write } for pid=8616 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.787561][ T4353] ================================================================== [ 182.795699][ T4353] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 182.805277][ T4353] [ 182.807631][ T4353] write to 0xffff888144b09749 of 4 bytes by task 8586 on cpu 0: [ 182.815270][ T4353] copy_folio_from_iter_atomic+0x743/0x10b0 [ 182.821174][ T4353] generic_perform_write+0x2c1/0x490 [ 182.826461][ T4353] ext4_buffered_write_iter+0x304/0x4c0 [ 182.832027][ T4353] ext4_file_write_iter+0x380/0xfa0 [ 182.837237][ T4353] iter_file_splice_write+0x6c4/0xa80 [ 182.842620][ T4353] direct_splice_actor+0x156/0x2a0 [ 182.847746][ T4353] splice_direct_to_actor+0x311/0x670 [ 182.853217][ T4353] do_splice_direct+0x119/0x1a0 [ 182.858095][ T4353] do_sendfile+0x382/0x650 [ 182.862601][ T4353] __x64_sys_sendfile64+0x105/0x150 [ 182.867802][ T4353] x64_sys_call+0x2dc4/0x3020 [ 182.872516][ T4353] do_syscall_64+0x12c/0x3b0 [ 182.877118][ T4353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.883024][ T4353] [ 182.885348][ T4353] read to 0xffff888144b09000 of 4096 bytes by task 4353 on cpu 1: [ 182.893178][ T4353] copy_folio_from_iter_atomic+0x743/0x10b0 [ 182.899089][ T4353] generic_perform_write+0x2c1/0x490 [ 182.904385][ T4353] shmem_file_write_iter+0xc5/0xf0 [ 182.909604][ T4353] lo_rw_aio+0x67d/0x730 [ 182.913852][ T4353] loop_process_work+0x56c/0xac0 [ 182.918804][ T4353] loop_workfn+0x31/0x40 [ 182.923069][ T4353] process_scheduled_works+0x4f0/0x9c0 [ 182.928542][ T4353] worker_thread+0x58a/0x780 [ 182.933172][ T4353] kthread+0x22a/0x280 [ 182.937361][ T4353] ret_from_fork+0x146/0x330 [ 182.941989][ T4353] ret_from_fork_asm+0x1a/0x30 [ 182.946778][ T4353] [ 182.949106][ T4353] Reported by Kernel Concurrency Sanitizer on: [ 182.955259][ T4353] CPU: 1 UID: 0 PID: 4353 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(lazy) [ 182.964999][ T4353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 182.975063][ T4353] Workqueue: loop5 loop_workfn [ 182.979854][ T4353] ================================================================== [ 183.187218][ T28] audit: type=1400 audit(1780902504.495:3325): avc: denied { write } for pid=8620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.247052][ T28] audit: type=1400 audit(1780902504.555:3326): avc: denied { write } for pid=8631 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.296092][ T4070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.431258][ T28] audit: type=1400 audit(1780902504.735:3327): avc: denied { write } for pid=8634 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.458509][ T28] audit: type=1400 audit(1780902504.765:3328): avc: denied { write } for pid=8645 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.603781][ T28] audit: type=1400 audit(1780902504.905:3329): avc: denied { write } for pid=8648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.642318][ T28] audit: type=1400 audit(1780902504.945:3330): avc: denied { write } for pid=8659 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1