last executing test programs: 32.727370837s ago: executing program 0 (id=2202): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00, 0xffffffff}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000001140)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) link(0x0, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000000c0)=r1, 0x1) r2 = openat$incfs(0xffffffffffffff9c, 0x0, 0x10000, 0x100) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1000}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r7, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) 31.823824545s ago: executing program 0 (id=2214): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200440c0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[], 0x0) 31.777873616s ago: executing program 0 (id=2215): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2, 0x0, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb253e", 0x28, 0x3a, 0xff, @dev, @remote, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}}, @sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0x7, 0xc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x70}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x40, 0x1, 0x6, 0x9, {{0x5, 0x4, 0x0, 0x2a, 0x14, 0x66, 0x0, 0x1, 0x4, 0x0, @multicast2, @multicast2}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r4, @ANYBLOB="05002d0001000000080006"], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x40, 0x40000) r6 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) unshare(0x20000400) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@loopback, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@multicast1, @in=@private=0xa010102, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0x2, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in=@private=0xa010100, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r7, @ANYRESHEX=r8, @ANYBLOB='\a\x00'], 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f0000000100)='./file0\x00', r5}, 0x18) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000080)) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xa, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 31.620627509s ago: executing program 0 (id=2219): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 31.361837344s ago: executing program 0 (id=2222): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) r1 = socket$kcm(0x2, 0x0, 0x84) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb253e", 0x28, 0x3a, 0xff, @dev, @remote, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}}, @sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0x7, 0xc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x70}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x40, 0x1, 0x6, 0x9, {{0x5, 0x4, 0x0, 0x2a, 0x14, 0x66, 0x0, 0x1, 0x4, 0x0, @multicast2, @multicast2}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r5, @ANYBLOB="05002d0001000000080006"], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x40, 0x40000) r7 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) unshare(0x20000400) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@loopback, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@multicast1, @in=@private=0xa010102, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0x2, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in=@private=0xa010100, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYRESHEX=r9, @ANYBLOB='\a\x00'], 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f0000000100)='./file0\x00', r6}, 0x18) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000080)) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xa, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 30.891209663s ago: executing program 0 (id=2228): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)='5xU', 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="a7", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)='^', 0x1}], 0x1, &(0x7f0000000840)=ANY=[], 0x68}}], 0x4, 0x2401c444) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="9789b5", 0x7ffd}], 0x1}}], 0x1, 0x84) 30.868201435s ago: executing program 32 (id=2228): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)='5xU', 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="a7", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)='^', 0x1}], 0x1, &(0x7f0000000840)=ANY=[], 0x68}}], 0x4, 0x2401c444) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="9789b5", 0x7ffd}], 0x1}}], 0x1, 0x84) 3.428263722s ago: executing program 3 (id=2569): syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x3, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) listns(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000090}, 0x80) 3.402944213s ago: executing program 3 (id=2570): connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.799477274s ago: executing program 5 (id=2585): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) r1 = socket$kcm(0x2, 0x0, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb253e", 0x28, 0x3a, 0xff, @dev, @remote, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}}, @sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0x7, 0xc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x70}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x40, 0x1, 0x6, 0x9, {{0x5, 0x4, 0x0, 0x2a, 0x14, 0x66, 0x0, 0x1, 0x4, 0x0, @multicast2, @multicast2}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r5, @ANYBLOB="05002d0001000000080006"], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x40, 0x40000) r7 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) unshare(0x20000400) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@loopback, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@multicast1, @in=@private=0xa010102, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0x2, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in=@private=0xa010100, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYRESHEX=r9, @ANYBLOB='\a\x00'], 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f0000000100)='./file0\x00', r6}, 0x18) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000080)) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xa, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 2.615781928s ago: executing program 5 (id=2588): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 2.49765285s ago: executing program 3 (id=2592): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xab}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.457676071s ago: executing program 5 (id=2594): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10008, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x7, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c13}], 0x75, 0x5000, 0x0, 0x3) 2.390582853s ago: executing program 3 (id=2596): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.03261648s ago: executing program 3 (id=2601): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_bp={0x0, 0xf}, 0x1a3bd, 0x0, 0x11000, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xcc}, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x6c, &(0x7f00000002c0)=""/108, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) sendmsg(0xffffffffffffffff, 0x0, 0x0) 1.946329272s ago: executing program 1 (id=2604): syz_open_dev$sg(&(0x7f00000002c0), 0xe5, 0x2602) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x90a3b4a3e4f91378) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat(0xffffffffffffff9c, 0x0, 0x80042, 0x1bd) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002"], 0x2c}}, 0x0) 1.944705352s ago: executing program 5 (id=2605): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$kcm(0x2, 0x0, 0x84) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb253e", 0x28, 0x3a, 0xff, @dev, @remote, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31032fbd7000fddbdf", @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) syz_open_dev$vcsn(&(0x7f0000000000), 0x40, 0x40000) r3 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) unshare(0x20000400) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@loopback, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@multicast1, @in=@private=0xa010102, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0x2, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in=@private=0xa010100, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRESHEX=r5, @ANYBLOB='\a\x00'], 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000080)) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xa, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 1.838778623s ago: executing program 2 (id=2606): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d0000140000000000000000000000050006000000000002"], 0xa0}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r1, 0x3, 0x4, 0x8000c62) 1.502591261s ago: executing program 1 (id=2607): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x9}, 0x8210, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0x74, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 1.079352609s ago: executing program 5 (id=2610): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000280)={0x0, 0x2710}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f6, 0x0) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/57, 0x39}], 0x1}, 0x7}], 0x1, 0x0, 0x0) 975.196201ms ago: executing program 4 (id=2611): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 855.487003ms ago: executing program 2 (id=2612): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 855.380454ms ago: executing program 4 (id=2613): socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x244000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000006000000080000000b"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r0, @ANYBLOB="0b00000000000000cc001a8018000a80140007"], 0xec}, 0x1, 0x0, 0x0, 0x20000010}, 0x200080c4) 853.721274ms ago: executing program 5 (id=2622): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 795.845925ms ago: executing program 4 (id=2614): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0) socket$key(0xf, 0x3, 0x2) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 729.239896ms ago: executing program 4 (id=2615): perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6, 0x7, 0x0, 0x3, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x200, 0x0, 0x0, 0x8, 0x3fe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x3) perf_event_open$cgroup(&(0x7f0000000380)={0x5, 0x80, 0x7d, 0x6, 0x4, 0xc7, 0x0, 0x0, 0x20404, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x1, 0x10, 0x8, 0x1, 0x9, 0x793, 0x48, 0x0, 0x0, 0x0, 0x801}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="5c00000014006b03000000d86e6c1d000a117ea6e070d6060000000000004e23250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4d49346d88037e786a6d0bdd7000000", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x5}, 0x104101, 0x4, 0x9, 0x8, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7, 0x7, 0x9, 0x3, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 728.032646ms ago: executing program 2 (id=2616): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10008, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x7, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c13}], 0x75, 0x5000, 0x0, 0x3) 631.151728ms ago: executing program 4 (id=2617): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESDEC=0x0, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESDEC, @ANYRES64], 0x1, 0x2c3, &(0x7f0000000ac0)="$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") socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x2, 0x503fa, 0x8100014e}) getdents64(r0, &(0x7f0000001f00)=""/4111, 0x100f) 614.226478ms ago: executing program 1 (id=2618): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x23, 0x0, 0x81, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0), 0x0}, 0x40) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) 552.272429ms ago: executing program 1 (id=2619): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x1, 0x122d, &(0x7f0000001280)="$eJzs3M9rHGUYB/DHTdrUxGSj1moF6Yu96GVIcvCiIEFSkC4obSO0gjA1G10y7obMElgRoyevXvwDvIpHb4J400s8+Dd4y8WjB3Uku/1h7NqgpZ2lfD6Xfdh3vswzM8sL77LvHrzy+Qdbm2W2mfej8cir0diOmP4jRYpG3PRJvPjyDz8+d/nqtYurrdbapZQurF5ZfimltHDuu7c/+vr57/tzb32z8O1M7C++c/Dryi/7Z/bPHvx55f1OmTpl6vb6KU/Xe71+fr1op41OuZWl9GbRzst26nTL9s6R8c2it709SHl3Y352e6ddlinvDtJWe5D6vdTfGaT8vbzTTVmWpfnZ4F6sf/VbVVURVXUiTkZVVdWjMRuNeCzmYyGasRiPxxPxZJyOp+JMPB3PxNnhUXX3DQAAAAAAAAAAAAAAAAAAAA+Xcfv/5+7Y//9FxLj9/+dqbh4AAAAAAAAAAAAAAAAAAAAeEpevXru42mqtXUrpVETx2e767vrodTS+uhmdKKIdS9GM32O4+39kVJ+M1tpSGlqMT4u9G/m93fWpo/nl4d8J3JG/8HprbXmUT0fzM7ebPMyvRDNOj8+v/CN/fpg/FS+c/9v5s2jGz+9GL4rYiMPs7fzHyym99kbrVv6n/dFpN+p4IAAAAHAfZOmWsev3LPu38VH+uO8HDtfXS2PX99Px7HS9105EOfhwKy+K9k7txc2ORu/sRcSENPa/i0ZETEAbdylOHHvMXA2NfTkXcQ/xqSMfpIm4z5NZVM273ajjZo6p+zcp8cDceOgzdfcBAAAAAAAAAADAf/MgfmlY9zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7EDxwIAAAAAwvyt0+jYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCrAAAA//+acsVc") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) 487.059801ms ago: executing program 3 (id=2620): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x10000, 0x3, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x19) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000000)='./file1\x00', 0x490, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8ffff) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) 271.341115ms ago: executing program 2 (id=2621): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$kcm(0x2, 0x0, 0x84) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb253e", 0x28, 0x3a, 0xff, @dev, @remote, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31032fbd7000fddbdf", @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) syz_open_dev$vcsn(&(0x7f0000000000), 0x40, 0x40000) r3 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) unshare(0x20000400) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@loopback, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@multicast1, @in=@private=0xa010102, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0x2, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in=@private=0xa010100, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRESHEX=r5, @ANYBLOB='\a\x00'], 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000080)) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xa, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 226.326536ms ago: executing program 1 (id=2623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001340)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0xfac, 0x0, @opaque="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"}}}, 0xfce) 219.935476ms ago: executing program 4 (id=2624): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r2], 0x1c}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) 128.749428ms ago: executing program 2 (id=2625): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) r1 = socket$kcm(0x2, 0x0, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb253e", 0x28, 0x3a, 0xff, @dev, @remote, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}}, @sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0x7, 0xc}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x58}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x40, 0x1, 0x6, 0x9, {{0x5, 0x4, 0x0, 0x2a, 0x14, 0x66, 0x0, 0x1, 0x4, 0x0, @multicast2, @multicast2}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r5, @ANYBLOB="05002d0001000000080006"], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x40, 0x40000) r7 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) unshare(0x20000400) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@loopback, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@multicast1, @in=@private=0xa010102, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0x2, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in=@private=0xa010100, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYRESHEX=r9, @ANYBLOB='\a\x00'], 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f0000000100)='./file0\x00', r6}, 0x18) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000080)) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xa, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 1.17893ms ago: executing program 1 (id=2626): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 2 (id=2627): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x97}, 0x0, 0x0, 0x1, 0x8, 0x400, 0x7ffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$kcm(0x2, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4a20, 0x5, @loopback={0xff00}, 0xfffffff7}, 0x1c, 0x0}, 0x4000010) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): : 'syz.1.1303': attribute type 10 has an invalid length. [ 406.462752][ T8537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.476944][ T8537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.498738][ T8537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.520940][ T8537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.540188][ T8549] netlink: 'syz.3.1309': attribute type 10 has an invalid length. [ 406.887985][ T8567] futex_wake_op: syz.2.1317 tries to shift op by -1; fix this program [ 406.943462][ T8589] loop3: detected capacity change from 0 to 764 [ 407.064976][ T8597] netlink: 'syz.3.1329': attribute type 10 has an invalid length. [ 407.127911][ T8596] futex_wake_op: syz.4.1330 tries to shift op by -1; fix this program [ 407.336444][ T8627] futex_wake_op: syz.3.1335 tries to shift op by -1; fix this program [ 407.439221][ T8635] loop1: detected capacity change from 0 to 512 [ 407.453205][ T8635] ext4: Unknown parameter 'smackfsfloor' [ 407.480098][ T8638] netlink: 'syz.3.1345': attribute type 10 has an invalid length. [ 407.647968][ T8645] futex_wake_op: syz.4.1347 tries to shift op by -1; fix this program [ 407.818506][ T8666] futex_wake_op: syz.3.1355 tries to shift op by -1; fix this program [ 407.932707][ T8700] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 408.032186][ T8707] futex_wake_op: syz.3.1365 tries to shift op by -1; fix this program [ 408.209216][ T8722] futex_wake_op: syz.2.1371 tries to shift op by -1; fix this program [ 408.294295][ T8743] ipt_REJECT: TCP_RESET invalid for non-tcp [ 408.425182][ T8751] futex_wake_op: syz.4.1382 tries to shift op by -1; fix this program [ 408.563089][ T8765] validate_nla: 1 callbacks suppressed [ 408.563123][ T8765] netlink: 'syz.4.1385': attribute type 2 has an invalid length. [ 408.593617][ T8765] netlink: 'syz.4.1385': attribute type 10 has an invalid length. [ 408.805570][ T8771] futex_wake_op: syz.4.1388 tries to shift op by -1; fix this program [ 408.814852][ T8769] loop1: detected capacity change from 0 to 512 [ 408.911591][ T8769] ext4: Unknown parameter 'smackfsfloor' [ 409.043481][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 409.043498][ T28] audit: type=1400 audit(1782888799.252:1934): avc: denied { read append } for pid=8779 comm="syz.0.1390" name="file0" dev="tmpfs" ino=1578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 409.075866][ T8780] block device autoloading is deprecated and will be removed. [ 409.124783][ T28] audit: type=1400 audit(1782888799.252:1935): avc: denied { ioctl open } for pid=8779 comm="syz.0.1390" path="/298/file0" dev="tmpfs" ino=1578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 409.894475][ T8807] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 410.158780][ T8817] __nla_validate_parse: 3 callbacks suppressed [ 410.158859][ T8817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1403'. [ 410.196607][ T8819] loop3: detected capacity change from 0 to 512 [ 410.205925][ T8819] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 410.237431][ T8819] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 410.252671][ T8819] EXT4-fs (loop3): orphan cleanup on readonly fs [ 410.271479][ T8819] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 410.300816][ T8819] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 410.320952][ T8819] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1404: Failed to acquire dquot type 0 [ 410.346755][ T8819] loop3: lost filesystem error report for type 5 error -5 [ 410.347144][ T8819] EXT4-fs (loop3): Remounting filesystem read-only [ 410.354357][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 410.354381][ C0] EXT4-fs (loop3): initial error at time 1782888800: ext4_acquire_dquot:7041 [ 410.354414][ C0] EXT4-fs (loop3): last error at time 1782888800: ext4_acquire_dquot:7041 [ 410.393517][ T8819] EXT4-fs (loop3): 1 truncate cleaned up [ 410.402530][ T8819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 410.483762][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.544402][ T28] audit: type=1400 audit(1782888800.752:1936): avc: denied { setattr } for pid=8837 comm="syz.3.1411" name="QIPCRTR" dev="sockfs" ino=20801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 410.605627][ T8846] loop4: detected capacity change from 0 to 512 [ 410.651543][ T8846] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 410.680783][ T8846] System zones: 1-12 [ 410.702055][ T8846] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.1417: Directory hole found for htree index block 0 [ 410.722504][ T8846] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 410.722680][ T8846] EXT4-fs (loop4): Remounting filesystem read-only [ 410.731876][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 410.731903][ C0] EXT4-fs (loop4): initial error at time 1782888800: dx_probe:791: inode 2 [ 410.731941][ C0] EXT4-fs (loop4): last error at time 1782888800: dx_probe:791: inode 2 [ 410.881461][ T8846] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 410.905286][ T8846] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 410.927849][ T8846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.003882][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.067030][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1429'. [ 411.307097][ T8899] tipc: Enabled bearer , priority 10 [ 411.391529][ T8900] netlink: 'syz.3.1433': attribute type 4 has an invalid length. [ 411.426444][ T8900] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 411.426444][ T8900] program syz.3.1433 not setting count and/or reply_len properly [ 412.271557][ T8917] netlink: 'syz.1.1444': attribute type 2 has an invalid length. [ 412.306705][ T28] audit: type=1400 audit(1782888802.512:1937): avc: denied { write } for pid=8923 comm="syz.4.1446" name="file2" dev="tmpfs" ino=1468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 412.308519][ T8912] futex_atomic_op_inuser: 3 callbacks suppressed [ 412.308571][ T8912] futex_wake_op: syz.2.1442 tries to shift op by -1; fix this program [ 412.353879][ T8917] netlink: 'syz.1.1444': attribute type 10 has an invalid length. [ 412.471777][ T8938] pim6reg9: entered allmulticast mode [ 412.551942][ T8942] loop1: detected capacity change from 0 to 512 [ 412.615072][ T8942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.669331][ T8942] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.698353][ T8949] netlink: 'syz.4.1455': attribute type 2 has an invalid length. [ 412.736073][ T8949] netlink: 'syz.4.1455': attribute type 10 has an invalid length. [ 412.780801][ T28] audit: type=1400 audit(1782888802.942:1938): avc: denied { write } for pid=8941 comm="syz.1.1453" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 412.806938][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.860164][ T8961] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 412.935552][ T8964] netlink: 'syz.4.1463': attribute type 2 has an invalid length. [ 412.969618][ T8964] netlink: 'syz.4.1463': attribute type 10 has an invalid length. [ 413.048737][ T8965] futex_wake_op: syz.2.1464 tries to shift op by -1; fix this program [ 413.172730][ T8984] netlink: 'syz.1.1460': attribute type 2 has an invalid length. [ 413.219640][ T8978] futex_wake_op: syz.4.1468 tries to shift op by -1; fix this program [ 413.220040][ T8990] loop3: detected capacity change from 0 to 512 [ 413.242980][ T8990] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1471: bg 0: block 104: invalid block bitmap [ 413.256119][ T8990] loop3: lost filesystem error report for type 5 error -117 [ 413.260758][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 413.274596][ C1] EXT4-fs (loop3): initial error at time 1782888803: ext4_validate_block_bitmap:432 [ 413.284042][ C1] EXT4-fs (loop3): last error at time 1782888803: ext4_validate_block_bitmap:432 [ 413.294577][ T8990] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 413.303552][ T8990] loop3: lost filesystem error report for type 5 error -117 [ 413.303824][ T8990] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1471: invalid indirect mapped block 1 (level 1) [ 413.325013][ T8990] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 413.325266][ T8990] EXT4-fs (loop3): 1 truncate cleaned up [ 413.346941][ T8990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.362657][ T28] audit: type=1400 audit(1782888803.572:1939): avc: denied { write } for pid=8989 comm="syz.3.1471" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 413.386351][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.530084][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1479'. [ 413.559440][ T8994] futex_wake_op: syz.3.1472 tries to shift op by -1; fix this program [ 413.709918][ T9027] validate_nla: 5 callbacks suppressed [ 413.709986][ T9027] netlink: 'syz.1.1485': attribute type 2 has an invalid length. [ 413.731760][ T9034] netlink: 'syz.3.1490': attribute type 10 has an invalid length. [ 413.746266][ T9027] netlink: 'syz.1.1485': attribute type 10 has an invalid length. [ 413.804243][ T9026] futex_wake_op: syz.4.1486 tries to shift op by -1; fix this program [ 413.870909][ T9044] netlink: 'syz.2.1491': attribute type 2 has an invalid length. [ 413.885834][ T9047] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1493'. [ 413.917873][ T9044] netlink: 'syz.2.1491': attribute type 10 has an invalid length. [ 413.939024][ T9049] loop1: detected capacity change from 0 to 512 [ 413.961724][ T9051] loop3: detected capacity change from 0 to 164 [ 413.995709][ T9051] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 414.008453][ T9049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.019708][ T9051] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 414.028145][ T28] audit: type=1400 audit(1782888804.232:1940): avc: denied { write } for pid=9048 comm="syz.1.1494" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.055046][ T9051] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 414.063976][ T28] audit: type=1400 audit(1782888804.262:1941): avc: denied { write } for pid=9048 comm="syz.1.1494" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.085907][ T28] audit: type=1400 audit(1782888804.262:1942): avc: denied { rmdir } for pid=9048 comm="syz.1.1494" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 414.149416][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.211030][ T9063] loop1: detected capacity change from 0 to 512 [ 414.227258][ T9063] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 414.264964][ T9063] EXT4-fs (loop1): 1 truncate cleaned up [ 414.281308][ T9063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.411150][ T9061] futex_wake_op: syz.3.1500 tries to shift op by -1; fix this program [ 414.445150][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.546614][ T9076] netlink: 'syz.1.1503': attribute type 2 has an invalid length. [ 414.566326][ T9076] netlink: 'syz.1.1503': attribute type 10 has an invalid length. [ 414.680432][ T9082] futex_wake_op: syz.4.1506 tries to shift op by -1; fix this program [ 414.747753][ T9086] futex_wake_op: syz.3.1507 tries to shift op by -1; fix this program [ 414.861213][ T9114] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 414.881417][ T9118] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1519'. [ 414.916864][ T9122] netlink: 'syz.3.1521': attribute type 2 has an invalid length. [ 414.951616][ T9122] netlink: 'syz.3.1521': attribute type 10 has an invalid length. [ 415.100698][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1529'. [ 415.127249][ T9128] loop4: detected capacity change from 0 to 1024 [ 415.192471][ T9138] futex_wake_op: syz.3.1528 tries to shift op by -1; fix this program [ 415.229834][ T9128] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 415.327870][ T9150] futex_wake_op: syz.0.1532 tries to shift op by -1; fix this program [ 415.354217][ T9128] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.1524: lblock 2 mapped to illegal pblock 2 (length 1) [ 415.386789][ T9128] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 415.391151][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 415.414125][ C0] EXT4-fs (loop4): initial error at time 1782888805: ext4_map_blocks:791: inode 3: block 2 [ 415.426235][ C0] EXT4-fs (loop4): last error at time 1782888805: ext4_map_blocks:791: inode 3: block 2 [ 415.440520][ T9128] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 415.458670][ T9128] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.1524: lblock 0 mapped to illegal pblock 48 (length 1) [ 415.474736][ T9128] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 415.477557][ T9128] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 415.500429][ T9128] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.1524: Failed to acquire dquot type 0 [ 415.515251][ T9128] loop4: lost filesystem error report for type 5 error -117 [ 415.519001][ T9128] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 415.543951][ T9128] loop4: lost filesystem error report for type 5 error -117 [ 415.555278][ T9128] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.1524: mark_inode_dirty error [ 415.583606][ T9128] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 415.586642][ T9128] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 415.625826][ T9128] EXT4-fs (loop4): 1 orphan inode deleted [ 415.641793][ T270] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 415.650607][ T9128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.703234][ T270] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 415.704663][ T270] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 415.762366][ T270] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 0 [ 415.848898][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.858518][ T9189] loop1: detected capacity change from 0 to 512 [ 415.860709][ T3301] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 415.870359][ T9189] ext4: Unknown parameter 'smackfsfloor' [ 415.895773][ T3301] loop4: lost filesystem error report for type 5 error -117 [ 415.897523][ T3301] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 415.918961][ T3301] loop4: lost filesystem error report for type 5 error -117 [ 415.920345][ T3301] EXT4-fs error (device loop4): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 415.952242][ T3301] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 415.999098][ T9197] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1543'. [ 416.009017][ T9195] netlink: 'syz.0.1545': attribute type 2 has an invalid length. [ 416.067434][ T9203] loop4: detected capacity change from 0 to 128 [ 416.335747][ T9228] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 416.458490][ T9234] loop0: detected capacity change from 0 to 512 [ 416.476397][ T9234] ext4: Unknown parameter 'smackfsfloor' [ 416.851905][ T9260] loop0: detected capacity change from 0 to 512 [ 416.877193][ T9260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.895851][ T9260] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.046214][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.077635][ T9268] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1568'. [ 417.101797][ T28] audit: type=1400 audit(1782888807.302:1943): avc: denied { getopt } for pid=9269 comm="syz.0.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 417.429805][ T9286] futex_atomic_op_inuser: 6 callbacks suppressed [ 417.429829][ T9286] futex_wake_op: syz.3.1577 tries to shift op by -1; fix this program [ 417.691633][ T9329] 9p: Bad value for 'rfdno' [ 417.751412][ T9335] loop4: detected capacity change from 0 to 512 [ 417.785727][ T9335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.830115][ T9335] ext4 filesystem being mounted at /298/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 417.861018][ T28] audit: type=1400 audit(1782888808.062:1944): avc: denied { write } for pid=9334 comm="syz.4.1597" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 417.883365][ T28] audit: type=1400 audit(1782888808.062:1945): avc: denied { write } for pid=9334 comm="syz.4.1597" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 417.905382][ T28] audit: type=1400 audit(1782888808.062:1946): avc: denied { rename } for pid=9334 comm="syz.4.1597" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 417.928316][ T28] audit: type=1400 audit(1782888808.062:1947): avc: denied { unlink } for pid=9334 comm="syz.4.1597" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 417.986745][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.184248][ T9367] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1609'. [ 418.450076][ T9400] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 418.668615][ T9413] futex_wake_op: syz.1.1628 tries to shift op by -1; fix this program [ 418.746161][ T9412] loop0: detected capacity change from 0 to 1024 [ 418.785467][ T9435] validate_nla: 7 callbacks suppressed [ 418.785501][ T9435] netlink: 'syz.1.1641': attribute type 2 has an invalid length. [ 418.822402][ T9435] netlink: 'syz.1.1641': attribute type 10 has an invalid length. [ 418.833210][ T9412] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 418.837317][ T9440] futex_wake_op: syz.3.1638 tries to shift op by -1; fix this program [ 418.852144][ T9412] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.1632: lblock 2 mapped to illegal pblock 2 (length 1) [ 418.875279][ T9412] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 418.878426][ T9412] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.1632: lblock 0 mapped to illegal pblock 48 (length 1) [ 418.888699][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 418.888755][ C0] EXT4-fs (loop0): initial error at time 1782888809: ext4_map_blocks:791: inode 3: block 2 [ 418.888915][ C0] EXT4-fs (loop0): last error at time 1782888809: ext4_map_blocks:791: inode 3: block 2 [ 418.934001][ T9412] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 418.936544][ T9412] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.1632: Failed to acquire dquot type 0 [ 418.968316][ T9412] loop0: lost filesystem error report for type 5 error -117 [ 418.970695][ T9412] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 419.008297][ T9412] loop0: lost filesystem error report for type 5 error -117 [ 419.010037][ T9412] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.1632: mark_inode_dirty error [ 419.042710][ T9412] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 419.045917][ T9412] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 419.066297][ T9447] loop1: detected capacity change from 0 to 512 [ 419.086265][ T9447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.105228][ T9412] EXT4-fs (loop0): 1 orphan inode deleted [ 419.114907][ T9412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.131017][ T49] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 419.131064][ T49] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 419.131365][ T49] __quota_error: 5 callbacks suppressed [ 419.131380][ T49] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 419.131401][ T49] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 0 [ 419.131491][ T49] loop0: lost filesystem error report for type 5 error -117 [ 419.196522][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.283237][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.330819][ T3294] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 419.350594][ T3294] loop0: lost filesystem error report for type 5 error -117 [ 419.362356][ T3294] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 419.417702][ T3294] loop0: lost filesystem error report for type 5 error -117 [ 419.419238][ T3294] EXT4-fs error (device loop0): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 419.471438][ T3294] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 419.493411][ T9463] futex_wake_op: syz.2.1652 tries to shift op by -1; fix this program [ 419.742876][ T9483] futex_wake_op: syz.0.1657 tries to shift op by -1; fix this program [ 419.772722][ T9490] netlink: 'syz.2.1659': attribute type 2 has an invalid length. [ 419.801195][ T9490] netlink: 'syz.2.1659': attribute type 10 has an invalid length. [ 419.986396][ T9501] netlink: 'syz.3.1664': attribute type 2 has an invalid length. [ 420.006856][ T9501] netlink: 'syz.3.1664': attribute type 10 has an invalid length. [ 420.131434][ T9516] futex_wake_op: syz.2.1666 tries to shift op by -1; fix this program [ 420.148909][ T9518] loop3: detected capacity change from 0 to 512 [ 420.189520][ T9518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.202274][ T9518] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.216246][ T9518] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.1670: corrupted xattr block 6: invalid header [ 420.232504][ T9518] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 420.245277][ T9518] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.1670: corrupted xattr block 6: invalid header [ 420.259957][ T9518] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 420.263917][ T28] audit: type=1400 audit(1782888810.462:1951): avc: denied { bind } for pid=9525 comm="syz.0.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 420.300385][ T9527] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.1670: corrupted xattr block 6: invalid header [ 420.311134][ T28] audit: type=1400 audit(1782888810.462:1952): avc: denied { write } for pid=9525 comm="syz.0.1673" path="socket:[22906]" dev="sockfs" ino=22906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 420.354238][ T9527] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 420.363900][ T28] audit: type=1400 audit(1782888810.482:1953): avc: denied { setattr } for pid=9517 comm="syz.3.1670" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 420.390245][ T9518] EXT4-fs error (device loop3): ext4_xattr_block_find:1881: inode #12: comm syz.3.1670: corrupted xattr block 6: invalid header [ 420.418140][ T9536] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 420.418140][ T9536] Please contact the netfilter-devel mailing list or update your nftables rules. [ 420.453609][ T9538] loop4: detected capacity change from 0 to 512 [ 420.459432][ T9527] EXT4-fs error (device loop3): ext4_xattr_block_list:766: inode #12: comm syz.3.1670: corrupted xattr block 6: invalid header [ 420.477539][ T9540] netlink: 'syz.0.1678': attribute type 2 has an invalid length. [ 420.530450][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.543213][ T9540] netlink: 'syz.0.1678': attribute type 10 has an invalid length. [ 420.605571][ T9543] futex_wake_op: syz.4.1680 tries to shift op by -1; fix this program [ 420.844741][ T9571] netlink: 'syz.4.1693': attribute type 2 has an invalid length. [ 420.861417][ T9571] netlink: 'syz.4.1693': attribute type 10 has an invalid length. [ 421.013948][ T9581] futex_wake_op: syz.0.1698 tries to shift op by -1; fix this program [ 421.107055][ T9598] loop4: detected capacity change from 0 to 512 [ 421.147980][ T9598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.187467][ T9598] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.208582][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1710'. [ 421.240278][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.292519][ T9621] tipc: Enabling of bearer rejected, failed to enable media [ 421.316331][ T9616] geneve2: entered promiscuous mode [ 421.385082][ T9636] loop1: detected capacity change from 0 to 512 [ 421.409432][ T9639] loop0: detected capacity change from 0 to 512 [ 421.419887][ T9639] EXT4-fs: Ignoring removed oldalloc option [ 421.438002][ T9639] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 421.454641][ T9639] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 421.462990][ T9636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.475995][ T9636] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.478663][ T9639] EXT4-fs (loop0): orphan cleanup on readonly fs [ 421.491066][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 421.503367][ T9639] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1722: bad orphan inode 267 [ 421.513753][ T9639] loop0: lost filesystem error report for type 5 error -117 [ 421.517931][ T9639] EXT4-fs (loop0): Remounting filesystem read-only [ 421.517958][ T28] audit: type=1400 audit(1782888811.712:1954): avc: denied { write } for pid=9634 comm="syz.1.1719" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 421.518058][ T28] audit: type=1400 audit(1782888811.722:1955): avc: denied { write } for pid=9634 comm="syz.1.1719" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 421.525470][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 421.525489][ C0] EXT4-fs (loop0): initial error at time 1782888811: ext4_orphan_get:1425 [ 421.525513][ C0] EXT4-fs (loop0): last error at time 1782888811: ext4_orphan_get:1425 [ 421.591384][ T9649] loop4: detected capacity change from 0 to 2048 [ 421.610259][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.610945][ T9639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 421.647236][ T9649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.690954][ T28] audit: type=1400 audit(1782888811.892:1956): avc: denied { write } for pid=9648 comm="syz.4.1725" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 421.715036][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 421.737624][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.818193][ T9671] SELinux: invalid class [ 421.819714][ T28] audit: type=1400 audit(1782888812.022:1957): avc: denied { load_policy } for pid=9670 comm="syz.0.1734" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 421.824847][ T9671] SELinux: failed to load policy [ 421.863196][ T9663] futex_wake_op: syz.3.1732 tries to shift op by -1; fix this program [ 421.881341][ T9673] loop1: detected capacity change from 0 to 2048 [ 421.921097][ T9679] loop0: detected capacity change from 0 to 164 [ 421.928265][ T9673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.947730][ T9673] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.979497][ T28] audit: type=1400 audit(1782888812.182:1958): avc: denied { write } for pid=9672 comm="syz.1.1735" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 422.020012][ T9673] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1735: bg 0: block 345: padding at end of block bitmap is not set [ 422.022842][ T9687] futex_wake_op: syz.4.1736 tries to shift op by -1; fix this program [ 422.057295][ T9673] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 28 [ 422.072936][ T9673] EXT4-fs (loop1): This should not happen!! Data will be lost [ 422.072936][ T9673] [ 422.083191][ T9673] EXT4-fs (loop1): Total free blocks count 0 [ 422.089463][ T9673] EXT4-fs (loop1): Free/Dirty block details [ 422.095657][ T9673] EXT4-fs (loop1): free_blocks=0 [ 422.100685][ T9673] EXT4-fs (loop1): dirty_blocks=16 [ 422.105992][ T9673] EXT4-fs (loop1): Block reservation details [ 422.112278][ T9673] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 422.165931][ T9699] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1743'. [ 422.181453][ T3299] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 422.207503][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.355861][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1752'. [ 422.430815][ T9733] loop1: detected capacity change from 0 to 1024 [ 422.439021][ T9733] EXT4-fs: Ignoring removed nomblk_io_submit option [ 422.455042][ T9733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 422.475178][ T9733] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.514399][ T28] audit: type=1400 audit(1782888812.722:1959): avc: denied { write } for pid=9730 comm="syz.1.1757" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 422.538796][ T9726] futex_atomic_op_inuser: 1 callbacks suppressed [ 422.538829][ T9726] futex_wake_op: syz.4.1756 tries to shift op by -1; fix this program [ 422.557406][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 422.661907][ T9740] futex_wake_op: syz.0.1760 tries to shift op by -1; fix this program [ 422.759380][ T9767] loop4: detected capacity change from 0 to 512 [ 422.787930][ T9767] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 422.837899][ T9767] EXT4-fs (loop4): 1 truncate cleaned up [ 422.852025][ T9767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.885739][ T9767] EXT4-fs error (device loop4): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.4.1769: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 422.981125][ T9767] EXT4-fs (loop4): Remounting filesystem read-only [ 423.026358][ T9786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1776'. [ 423.047991][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.235378][ T9795] futex_wake_op: syz.2.1780 tries to shift op by -1; fix this program [ 423.253719][ T9798] loop1: detected capacity change from 0 to 8192 [ 423.616722][ T9827] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 423.623347][ T9827] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 423.641252][ T9827] vhci_hcd vhci_hcd.0: Device attached [ 423.653234][ T9828] vhci_hcd: connection closed [ 423.663064][ T12] vhci_hcd vhci_hcd.0: stop threads [ 423.673585][ T12] vhci_hcd vhci_hcd.0: release socket [ 423.683817][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 423.711082][ T9837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1797'. [ 423.724883][ T9836] loop1: detected capacity change from 0 to 512 [ 423.740049][ T9836] EXT4-fs: inline encryption not supported [ 423.770376][ T9833] futex_wake_op: syz.2.1795 tries to shift op by -1; fix this program [ 423.783983][ T9836] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 423.800022][ T9836] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 423.818870][ T9841] EXT4-fs: Ignoring removed bh option [ 423.847617][ T9841] EXT4-fs (loop3): stripe (15) is not aligned with cluster size (16), stripe is disabled [ 423.861787][ T9836] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 423.877892][ T9836] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1796: bg 0: block 248: padding at end of block bitmap is not set [ 423.892797][ T9836] loop1: lost filesystem error report for type 5 error -117 [ 423.893027][ T9836] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1796: Failed to acquire dquot type 1 [ 423.911700][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 423.911748][ C0] EXT4-fs (loop1): last error at time 1782888814: ext4_validate_block_bitmap:441 [ 423.928456][ T9841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.941174][ T9836] loop1: lost filesystem error report for type 5 error -28 [ 423.941735][ T9836] EXT4-fs (loop1): 1 truncate cleaned up [ 423.979230][ T9836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 424.016118][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.071089][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 424.227723][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 424.227804][ T28] audit: type=1400 audit(1782888814.432:1964): avc: denied { shutdown } for pid=9872 comm="syz.4.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 424.276373][ T9869] futex_wake_op: syz.0.1809 tries to shift op by -1; fix this program [ 424.289982][ T28] audit: type=1400 audit(1782888814.432:1965): avc: denied { write } for pid=9873 comm="syz.1.1813" path="socket:[24297]" dev="sockfs" ino=24297 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 424.347978][ T9886] random: crng reseeded on system resumption [ 424.528213][ T9898] futex_wake_op: syz.3.1822 tries to shift op by -1; fix this program [ 424.579791][ T9908] EXT4-fs (loop0): 1 truncate cleaned up [ 424.597046][ T9908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.619080][ T28] audit: type=1400 audit(1782888814.822:1966): avc: denied { write } for pid=9907 comm="syz.0.1826" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 424.619442][ T9908] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1826: bg 0: block 465: padding at end of block bitmap is not set [ 424.655910][ T28] audit: type=1400 audit(1782888814.822:1967): avc: denied { link } for pid=9907 comm="syz.0.1826" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 424.754460][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.781693][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1831'. [ 424.873804][ T9920] futex_wake_op: syz.0.1829 tries to shift op by -1; fix this program [ 424.892454][ T9924] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 424.908863][ T9924] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 424.933838][ T9924] System zones: 0-1, 15-15, 18-18, 34-34 [ 424.948264][ T9924] EXT4-fs (loop3): orphan cleanup on readonly fs [ 424.958682][ T9924] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 424.968481][ T9924] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 424.983293][ T9924] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 424.990961][ T9924] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1832: bad orphan inode 16 [ 425.031437][ T9924] loop3: lost filesystem error report for type 5 error -117 [ 425.031603][ T9924] ext4_test_bit(bit=15, block=18) = 1 [ 425.044474][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 425.044492][ C1] EXT4-fs (loop3): initial error at time 1782888815: ext4_orphan_get:1425 [ 425.044523][ C1] EXT4-fs (loop3): last error at time 1782888815: ext4_orphan_get:1425 [ 425.068107][ T9924] is_bad_inode(inode)=0 [ 425.072785][ T9924] NEXT_ORPHAN(inode)=0 [ 425.077001][ T9924] max_ino=32 [ 425.080269][ T9924] i_nlink=2 [ 425.086534][ T9924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 425.108891][ T9937] validate_nla: 4 callbacks suppressed [ 425.108923][ T9937] netlink: 'syz.0.1838': attribute type 2 has an invalid length. [ 425.132480][ T9939] futex_wake_op: syz.4.1837 tries to shift op by -1; fix this program [ 425.146263][ T9937] netlink: 'syz.0.1838': attribute type 10 has an invalid length. [ 425.165255][ T28] audit: type=1400 audit(1782888815.372:1968): avc: denied { read } for pid=9923 comm="syz.3.1832" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 425.220219][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.244986][ T28] audit: type=1400 audit(1782888815.452:1969): avc: denied { name_bind } for pid=9954 comm="syz.3.1845" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 425.356927][ T9964] futex_wake_op: syz.4.1849 tries to shift op by -1; fix this program [ 425.408007][ T9961] futex_wake_op: syz.1.1846 tries to shift op by -1; fix this program [ 425.439974][ T9979] EXT4-fs: Ignoring removed i_version option [ 425.462282][ T9981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1854'. [ 425.486748][ T9979] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 425.495149][ T28] audit: type=1400 audit(1782888815.692:1970): avc: denied { create } for pid=9987 comm="syz.4.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 425.519420][ T9979] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.1853: invalid block [ 425.539468][ T9979] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 425.539713][ T9979] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1853: invalid indirect mapped block 4294967295 (level 1) [ 425.548992][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 425.549015][ C1] EXT4-fs (loop0): initial error at time 1782888815: ext4_get_branch:178: inode 11: block 4294967295 [ 425.549056][ C1] EXT4-fs (loop0): last error at time 1782888815: ext4_get_branch:178: inode 11: block 4294967295 [ 425.592529][ T9979] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 425.592620][ T28] audit: type=1400 audit(1782888815.722:1971): avc: denied { setopt } for pid=9987 comm="syz.4.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 425.592779][ T9979] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1853: invalid indirect mapped block 4294967295 (level 1) [ 425.641263][ T9979] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 425.644960][ T9979] EXT4-fs (loop0): 2 truncates cleaned up [ 425.660875][ T9979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.678620][ T9979] EXT4-fs error (device loop0): ext4_get_parent:1832: inode #11: comm syz.0.1853: bad parent inode number: 3 [ 425.711853][T10002] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1862'. [ 425.741887][ T28] audit: type=1400 audit(1782888815.942:1972): avc: denied { recv } for pid=9977 comm="syz.0.1853" saddr=10.128.0.163 src=30036 daddr=10.128.0.187 dest=53232 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 425.789672][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.857869][T10017] xt_hashlimit: size too large, truncated to 1048576 [ 425.892163][T10018] netlink: 'syz.0.1866': attribute type 2 has an invalid length. [ 425.912558][T10018] netlink: 'syz.0.1866': attribute type 10 has an invalid length. [ 426.161504][T10054] set_capacity_and_notify: 4 callbacks suppressed [ 426.161523][T10054] loop0: detected capacity change from 0 to 512 [ 426.169460][T10049] 9pnet_fd: p9_fd_create_tcp (10049): problem connecting socket to 127.0.0.1 [ 426.205442][T10054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.228487][T10054] ext4 filesystem being mounted at /406/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.329451][T10070] loop3: detected capacity change from 0 to 512 [ 426.351802][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.364593][T10070] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 426.376061][T10070] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.1889: corrupted in-inode xattr: e_value size too large [ 426.390514][T10075] loop4: detected capacity change from 0 to 512 [ 426.391104][T10070] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 426.396974][T10070] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1889: couldn't read orphan inode 15 (err -117) [ 426.406219][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 426.406242][ C0] EXT4-fs (loop3): initial error at time 1782888816: ext4_iget_extra_inode:5180: inode 15 [ 426.406284][ C0] EXT4-fs (loop3): last error at time 1782888816: ext4_iget_extra_inode:5180: inode 15 [ 426.447762][T10070] loop3: lost filesystem error report for type 5 error -117 [ 426.451369][T10070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.460709][T10075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.484384][T10075] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.501778][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.512717][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.528804][T10081] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1893'. [ 426.538519][T10081] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1893'. [ 427.004798][T10149] loop4: detected capacity change from 0 to 512 [ 427.011741][T10149] EXT4-fs: Ignoring removed nobh option [ 427.022613][T10149] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 427.032624][T10149] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #13: comm syz.4.1919: inode has both inline data and extents flags [ 427.050149][T10149] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 427.050325][T10149] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1919: couldn't read orphan inode 13 (err -117) [ 427.059626][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 427.059651][ C0] EXT4-fs (loop4): initial error at time 1782888817: ext4_orphan_get:1399: inode 13 [ 427.059703][ C0] EXT4-fs (loop4): last error at time 1782888817: ext4_orphan_get:1399: inode 13 [ 427.096909][T10149] loop4: lost filesystem error report for type 5 error -117 [ 427.097828][T10149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.135391][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.260665][T10170] loop4: detected capacity change from 0 to 1024 [ 427.272278][T10170] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 427.282720][T10170] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 427.448446][T10170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 427.515880][T10186] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1936'. [ 427.541113][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.584708][T10193] ieee802154 phy0 wpan0: encryption failed: -22 [ 427.651707][T10199] loop4: detected capacity change from 0 to 764 [ 427.911826][T10221] xt_hashlimit: size too large, truncated to 1048576 [ 428.206305][T10240] loop3: detected capacity change from 0 to 512 [ 428.230308][T10240] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 428.238910][T10240] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 428.259102][T10240] EXT4-fs (loop3): orphan cleanup on readonly fs [ 428.269190][T10240] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #13: comm syz.3.1960: iget: bad i_size value: 12154761577498 [ 428.290068][T10240] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 428.290412][T10240] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1960: couldn't read orphan inode 13 (err -117) [ 428.299675][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 428.299701][ C0] EXT4-fs (loop3): initial error at time 1782888818: ext4_orphan_get:1399: inode 13 [ 428.299746][ C0] EXT4-fs (loop3): last error at time 1782888818: ext4_orphan_get:1399: inode 13 [ 428.361669][T10246] netlink: 'syz.1.1961': attribute type 2 has an invalid length. [ 428.383769][T10246] netlink: 'syz.1.1961': attribute type 10 has an invalid length. [ 428.393712][T10240] loop3: lost filesystem error report for type 5 error -117 [ 428.394600][T10240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 428.422403][T10240] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1960: dx entry: limit 65535 != root limit 120 [ 428.458992][T10240] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1960: Corrupt directory, running e2fsck is recommended [ 428.503564][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.723608][T10270] sg_write: data in/out 457436/249 bytes for SCSI command 0x0-- guessing data in; [ 428.723608][T10270] program syz.3.1972 not setting count and/or reply_len properly [ 428.878481][T10278] futex_atomic_op_inuser: 10 callbacks suppressed [ 428.878499][T10278] futex_wake_op: syz.1.1975 tries to shift op by -1; fix this program [ 428.916839][T10283] netlink: 'syz.3.1977': attribute type 2 has an invalid length. [ 428.927456][T10283] netlink: 'syz.3.1977': attribute type 10 has an invalid length. [ 429.174349][T10300] netlink: 'syz.4.1988': attribute type 2 has an invalid length. [ 429.201276][T10300] netlink: 'syz.4.1988': attribute type 10 has an invalid length. [ 429.296724][T10309] futex_wake_op: syz.2.1989 tries to shift op by -1; fix this program [ 429.325158][T10318] loop1: detected capacity change from 0 to 512 [ 429.332050][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1993'. [ 429.341692][T10318] ext4: Unknown parameter 'smackfsfloor' [ 429.498866][T10328] futex_wake_op: syz.0.1996 tries to shift op by -1; fix this program [ 429.566332][T10344] loop4: detected capacity change from 0 to 256 [ 430.412950][T10358] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.439821][T10362] netlink: 'syz.4.2013': attribute type 21 has an invalid length. [ 430.441830][T10358] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.459152][T10362] IPv6: NLM_F_CREATE should be specified when creating new route [ 430.527054][T10365] netlink: 'syz.1.2014': attribute type 2 has an invalid length. [ 430.558756][T10365] netlink: 'syz.1.2014': attribute type 10 has an invalid length. [ 430.568117][T10358] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.597772][T10358] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.666162][T10358] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.692653][T10358] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.729694][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2020'. [ 430.783292][T10358] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 430.795482][T10358] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.806404][T10358] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.853038][T10384] futex_wake_op: syz.1.2023 tries to shift op by -1; fix this program [ 430.893795][ T3419] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.903620][ T3419] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.932749][ T3419] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.943340][ T3419] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.955205][T10393] loop1: detected capacity change from 0 to 512 [ 430.967395][ T3419] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.983351][ T3419] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.002155][T10393] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.2025: bad orphan inode 13 [ 431.017646][ T3419] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.047122][ T3419] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.065388][T10393] loop1: lost filesystem error report for type 5 error -117 [ 431.065600][T10393] ext4_test_bit(bit=12, block=4) = 1 [ 431.072978][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 431.072996][ C1] EXT4-fs (loop1): initial error at time 1782888821: ext4_orphan_get:1425 [ 431.073032][ C1] EXT4-fs (loop1): last error at time 1782888821: ext4_orphan_get:1425 [ 431.132245][T10393] is_bad_inode(inode)=0 [ 431.136611][T10393] NEXT_ORPHAN(inode)=0 [ 431.143871][T10393] max_ino=32 [ 431.150644][T10393] i_nlink=1 [ 431.157810][T10393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.230007][T10393] EXT4-fs warning (device loop1): dx_probe:813: inode #2: comm syz.1.2025: Hash code is SIPHASH, but hash not in dirent [ 431.243244][T10393] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2025: Corrupt directory, running e2fsck is recommended [ 431.243259][T10395] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 431.271816][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 431.271833][ T28] audit: type=1400 audit(1782888821.462:1980): avc: denied { write } for pid=10392 comm="syz.1.2025" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 431.275554][T10393] EXT4-fs warning (device loop1): dx_probe:813: inode #2: comm syz.1.2025: Hash code is SIPHASH, but hash not in dirent [ 431.278386][ T28] audit: type=1400 audit(1782888821.462:1981): avc: denied { create } for pid=10392 comm="syz.1.2025" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 431.361593][T10393] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2025: Corrupt directory, running e2fsck is recommended [ 431.400876][T10393] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.2025: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=131076, size=1024 fake=0 [ 431.440210][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2028'. [ 431.506951][T10405] netlink: 'syz.2.2030': attribute type 2 has an invalid length. [ 431.539486][T10405] netlink: 'syz.2.2030': attribute type 10 has an invalid length. [ 431.549029][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.588729][ T28] audit: type=1400 audit(1782888821.792:1982): avc: denied { write } for pid=10412 comm="syz.3.2035" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 431.614971][T10415] netlink: 'syz.2.2045': attribute type 21 has an invalid length. [ 431.806942][T10426] futex_wake_op: syz.2.2039 tries to shift op by -1; fix this program [ 431.850368][T10435] loop1: detected capacity change from 0 to 512 [ 431.874178][T10435] ext4: Unknown parameter 'smackfsfloor' [ 432.034901][T10437] futex_wake_op: syz.2.2042 tries to shift op by -1; fix this program [ 432.411777][T10464] futex_wake_op: syz.2.2053 tries to shift op by -1; fix this program [ 432.459466][T10473] xt_hashlimit: size too large, truncated to 1048576 [ 432.735650][T10489] netlink: 'syz.3.2062': attribute type 2 has an invalid length. [ 432.775132][T10489] netlink: 'syz.3.2062': attribute type 10 has an invalid length. [ 432.838548][T10491] futex_wake_op: syz.2.2063 tries to shift op by -1; fix this program [ 432.982654][T10505] loop4: detected capacity change from 0 to 8192 [ 433.004417][T10505] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 433.086075][T10517] netlink: 'syz.3.2072': attribute type 2 has an invalid length. [ 433.105864][T10517] netlink: 'syz.3.2072': attribute type 10 has an invalid length. [ 433.574464][T10539] loop3: detected capacity change from 0 to 8192 [ 433.618303][T10539] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 433.723829][T10552] loop4: detected capacity change from 0 to 1024 [ 433.755783][T10552] EXT4-fs: Ignoring removed orlov option [ 433.782733][T10552] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 433.798815][T10552] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 433.826045][T10552] EXT4-fs (loop4): orphan cleanup on readonly fs [ 433.837798][T10552] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.2089: Invalid inode table block 0 in block_group 0 [ 433.851101][T10552] loop4: lost filesystem error report for type 5 error -117 [ 433.851209][T10552] EXT4-fs (loop4): Remounting filesystem read-only [ 433.865294][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 433.865321][ C1] EXT4-fs (loop4): initial error at time 1782888824: __ext4_get_inode_loc:4886 [ 433.865350][ C1] EXT4-fs (loop4): last error at time 1782888824: __ext4_get_inode_loc:4886 [ 433.903338][T10552] Quota error (device loop4): write_blk: dquota write failed [ 433.911680][T10552] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 433.923649][T10552] EXT4-fs (loop4): 1 truncate cleaned up [ 433.930180][T10552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 434.041055][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.127470][T10573] loop4: detected capacity change from 0 to 128 [ 434.136730][T10573] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 434.154131][ T28] audit: type=1400 audit(1782888824.362:1983): avc: denied { remount } for pid=10572 comm="syz.4.2097" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 434.219584][T10576] xt_hashlimit: size too large, truncated to 1048576 [ 434.342817][ T28] audit: type=1326 audit(1782888824.552:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10581 comm="syz.0.2101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2effde59 code=0x7ffc0000 [ 434.382484][ T28] audit: type=1326 audit(1782888824.552:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10581 comm="syz.0.2101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2effde59 code=0x7ffc0000 [ 434.439518][ T28] audit: type=1326 audit(1782888824.572:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10581 comm="syz.0.2101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f4c2effde59 code=0x7ffc0000 [ 434.467817][ T28] audit: type=1326 audit(1782888824.572:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10581 comm="syz.0.2101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2effde59 code=0x7ffc0000 [ 434.501283][T10586] loop0: detected capacity change from 0 to 512 [ 434.508546][T10586] ext4: Unknown parameter 'smackfsfloor' [ 434.575640][T10591] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 434.585480][T10592] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2104'. [ 434.649705][T10599] loop4: detected capacity change from 0 to 512 [ 434.664653][T10599] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 434.690157][T10599] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2108: iget: bad i_size value: 38620345925642 [ 434.703989][T10599] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 434.704254][T10599] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2108: couldn't read orphan inode 15 (err -117) [ 434.713506][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 434.713574][ C0] EXT4-fs (loop4): initial error at time 1782888824: ext4_orphan_get:1399: inode 15 [ 434.713633][ C0] EXT4-fs (loop4): last error at time 1782888824: ext4_orphan_get:1399: inode 15 [ 434.751294][T10599] loop4: lost filesystem error report for type 5 error -117 [ 434.751954][T10599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.813578][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.889127][T10615] xt_hashlimit: size too large, truncated to 1048576 [ 434.956433][T10607] futex_wake_op: syz.2.2112 tries to shift op by -1; fix this program [ 435.019662][T10623] loop1: detected capacity change from 0 to 256 [ 435.032528][T10623] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 435.072408][T10623] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 435.092291][T10623] FAT-fs (loop1): Filesystem has been set read-only [ 435.448532][T10641] validate_nla: 8 callbacks suppressed [ 435.448564][T10641] netlink: 'syz.0.2123': attribute type 2 has an invalid length. [ 435.478512][T10641] netlink: 'syz.0.2123': attribute type 10 has an invalid length. [ 435.632850][T10650] futex_wake_op: syz.0.2127 tries to shift op by -1; fix this program [ 435.824954][T10662] loop0: detected capacity change from 0 to 4096 [ 435.838670][T10662] EXT4-fs: inline encryption not supported [ 435.875820][T10662] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 435.900240][T10662] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=4ec118, mo2=0002] [ 435.914955][T10662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.956559][T10666] netlink: 'syz.3.2133': attribute type 2 has an invalid length. [ 435.996501][T10666] netlink: 'syz.3.2133': attribute type 10 has an invalid length. [ 436.131503][T10675] netlink: 'syz.2.2137': attribute type 2 has an invalid length. [ 436.142456][T10675] netlink: 'syz.2.2137': attribute type 10 has an invalid length. [ 436.203071][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.340221][T10679] loop3: detected capacity change from 0 to 8192 [ 436.379389][T10685] futex_wake_op: syz.4.2140 tries to shift op by -1; fix this program [ 436.413398][T10679] loop3: p1 p2 p3 [ 436.417369][T10679] loop3: p1 start 51379968 is beyond EOD, truncated [ 436.438154][T10694] futex_wake_op: syz.1.2143 tries to shift op by -1; fix this program [ 436.447519][T10679] loop3: p3 size 100663552 extends beyond EOD, truncated [ 436.467978][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 436.467999][ T28] audit: type=1400 audit(1782888826.672:1995): avc: denied { read write } for pid=10678 comm="syz.3.2138" name="loop3p3" dev="devtmpfs" ino=1470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 436.525958][T10701] Buffer I/O error on dev loop4, logical block 0, async page read [ 436.547032][T10701] Buffer I/O error on dev loop4, logical block 0, async page read [ 436.564783][T10703] EXT4-fs: Ignoring removed nobh option [ 436.566930][T10701] loop4: unable to read partition table [ 436.584378][ T28] audit: type=1400 audit(1782888826.672:1996): avc: denied { open } for pid=10678 comm="syz.3.2138" path="/dev/loop3p3" dev="devtmpfs" ino=1470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 436.595264][T10705] EXT4-fs: Ignoring removed orlov option [ 436.633981][T10701] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 436.637995][ T7012] Buffer I/O error on dev loop4, logical block 0, async page read [ 436.654430][ T7012] Buffer I/O error on dev loop4, logical block 0, async page read [ 436.665809][T10703] ------------[ cut here ]------------ [ 436.671514][T10703] EA inode 11 i_nlink=2 [ 436.671540][T10703] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#1: syz.3.2148/10703 [ 436.677996][ T7012] Buffer I/O error on dev loop4, logical block 0, async page read [ 436.687699][T10703] Modules linked in: [ 436.687731][T10703] CPU: 1 UID: 0 PID: 10703 Comm: syz.3.2148 Not tainted syzkaller #0 PREEMPT(lazy) [ 436.703404][ T7012] Buffer I/O error on dev loop4, logical block 0, async page read [ 436.711012][T10703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 436.719776][ T7012] Buffer I/O error on dev loop4, logical block 0, async page read [ 436.729446][T10703] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 436.739228][ T7012] Buffer I/O error on dev loop4, logical block 0, async page read [ 436.745303][T10703] Code: 16 d2 96 ff 49 8d 7e 40 4c 8d 2d eb 8c 5a 05 e8 26 af b5 ff 49 8b 6e 40 4c 89 e7 e8 5a aa b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 21 1a d9 03 90 90 90 90 90 90 90 [ 436.753940][T10706] Buffer I/O error on dev loop4, logical block 0, async page read [ 436.773873][T10703] RSP: 0018:ffffc90000f637f8 EFLAGS: 00010246 [ 436.788226][T10703] RAX: ffff888103ccd030 RBX: ffff888106f105a8 RCX: ffffffff81c2a526 [ 436.789554][T10706] Buffer I/O error on dev loop4, logical block 0, async page read [ 436.797144][T10703] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3200 [ 436.810910][ T7013] udevd[7013]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 436.813295][T10703] RBP: 000000000000000b R08: 0001888106f1055b R09: 0000000000000000 [ 436.829710][ T6813] udevd[6813]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 436.831897][T10703] R10: 000188815323e128 R11: 0001c90000f63728 R12: ffff888106f10558 [ 436.831918][T10703] R13: ffffffff871d3200 R14: ffff888106f10510 R15: 0000000000000001 [ 436.858377][T10703] FS: 00007fbeb14f76c0(0000) GS:ffff8882ae9d1000(0000) knlGS:0000000000000000 [ 436.867785][T10703] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 436.875980][T10703] CR2: 00007f97be5c5ff8 CR3: 00000001548a6000 CR4: 00000000003506f0 [ 436.884701][T10703] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 436.892947][T10703] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 436.901362][T10703] Call Trace: [ 436.905333][T10703] [ 436.908734][T10703] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 436.915359][T10703] ext4_xattr_delete_inode+0x6b5/0x790 [ 436.922164][T10703] ext4_evict_inode+0xb18/0xdf0 [ 436.927756][T10703] ? __pfx_ext4_evict_inode+0x10/0x10 [ 436.933847][T10703] evict+0x2a5/0x510 [ 436.937925][T10703] iput+0x430/0x5a0 [ 436.941832][T10703] ext4_process_orphan+0x1a4/0x1c0 [ 436.947578][T10703] ext4_orphan_cleanup+0x6a6/0xa10 [ 436.952922][T10703] ? ext4_register_li_request+0x14c/0x440 [ 436.958885][T10703] ext4_fill_super+0x33ab/0x3760 [ 436.961008][T10706] loop4: unable to read partition table [ 436.963936][T10703] ? set_blocksize+0x14c/0x270 [ 436.974734][T10703] ? __pfx_ext4_fill_super+0x10/0x10 [ 436.980420][T10703] get_tree_bdev_flags+0x291/0x300 [ 436.985921][T10703] ? __pfx_ext4_fill_super+0x10/0x10 [ 436.991415][T10703] get_tree_bdev+0x1f/0x30 [ 436.996083][T10703] ext4_get_tree+0x1c/0x30 [ 437.000573][T10703] vfs_get_tree+0x57/0x1d0 [ 437.005788][T10703] do_new_mount+0x288/0x8d0 [ 437.010390][T10703] path_mount+0x4ad/0xb90 [ 437.014859][T10703] __se_sys_mount+0x28c/0x2e0 [ 437.019787][T10703] __x64_sys_mount+0x67/0x80 [ 437.024616][T10703] x64_sys_call+0x2d61/0x3020 [ 437.029605][T10703] do_syscall_64+0x136/0x3c0 [ 437.034650][T10703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.042284][T10703] RIP: 0033:0x7fbeb2a9f0ca [ 437.046792][T10703] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.066914][T10705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.067305][T10703] RSP: 002b:00007fbeb14f6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 437.087971][T10703] RAX: ffffffffffffffda RBX: 00007fbeb14f6ee0 RCX: 00007fbeb2a9f0ca [ 437.096048][T10703] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fbeb14f6ea0 [ 437.104614][T10703] RBP: 00002000000009c0 R08: 00007fbeb14f6ee0 R09: 0000000000800718 [ 437.112674][T10703] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 437.120765][T10703] R13: 00007fbeb14f6ea0 R14: 000000000000048d R15: 0000200000000200 [ 437.128875][T10703] [ 437.132129][T10703] ---[ end trace 0000000000000000 ]--- [ 437.170601][ T28] audit: type=1400 audit(1782888827.372:1997): avc: denied { write } for pid=10704 comm="syz.0.2150" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 437.221101][T10703] EXT4-fs (loop3): 1 orphan inode deleted [ 437.227582][T10703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.249027][ T28] audit: type=1400 audit(1782888827.372:1998): avc: denied { write } for pid=10704 comm="syz.0.2150" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 437.274507][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.315102][T10718] set_capacity_and_notify: 3 callbacks suppressed [ 437.315155][T10718] loop0: detected capacity change from 0 to 512 [ 437.382067][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.402793][T10718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.428691][T10718] ext4 filesystem being mounted at /441/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 437.478355][T10715] futex_wake_op: syz.1.2151 tries to shift op by -1; fix this program [ 437.597314][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.711586][T10738] loop1: detected capacity change from 0 to 512 [ 437.725205][T10738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.772445][T10738] ext4 filesystem being mounted at /425/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 437.858913][T10743] futex_wake_op: syz.0.2159 tries to shift op by -1; fix this program [ 437.882534][T10738] EXT4-fs: Ignoring removed bh option [ 437.914067][T10738] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 437.977550][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.195327][T10759] futex_wake_op: syz.2.2166 tries to shift op by -1; fix this program [ 438.230381][T10780] loop4: detected capacity change from 0 to 512 [ 438.256707][T10780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.270119][T10780] ext4 filesystem being mounted at /432/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 438.289414][T10780] EXT4-fs: Ignoring removed bh option [ 438.299831][T10780] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 438.325213][T10786] futex_wake_op: syz.0.2174 tries to shift op by -1; fix this program [ 438.354522][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.522875][T10800] loop0: detected capacity change from 0 to 512 [ 438.548815][T10800] ext4: Unknown parameter 'smackfsfloor' [ 438.742650][T10812] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 438.883432][T10814] futex_wake_op: syz.4.2186 tries to shift op by -1; fix this program [ 438.961368][T10823] netlink: 'syz.2.2188': attribute type 2 has an invalid length. [ 438.993072][T10823] netlink: 'syz.2.2188': attribute type 10 has an invalid length. [ 439.065448][T10825] futex_wake_op: syz.4.2189 tries to shift op by -1; fix this program [ 439.211095][T10843] xt_hashlimit: size too large, truncated to 1048576 [ 439.235783][T10845] loop1: detected capacity change from 0 to 4096 [ 439.251453][T10845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.266745][ T28] audit: type=1400 audit(1782888829.472:1999): avc: denied { write } for pid=10844 comm="syz.1.2198" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 439.310076][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.582196][T10859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.592627][T10859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.077528][T10885] netlink: 'syz.2.2209': attribute type 2 has an invalid length. [ 440.089004][T10885] netlink: 'syz.2.2209': attribute type 10 has an invalid length. [ 440.294945][T10893] futex_atomic_op_inuser: 3 callbacks suppressed [ 440.295020][T10893] futex_wake_op: syz.1.2213 tries to shift op by -1; fix this program [ 440.409745][T10903] futex_wake_op: syz.1.2216 tries to shift op by -1; fix this program [ 440.429031][T10900] futex_wake_op: syz.0.2215 tries to shift op by -1; fix this program [ 440.499180][T10914] loop1: detected capacity change from 0 to 512 [ 440.510274][T10913] loop0: detected capacity change from 0 to 512 [ 440.547079][T10913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.572733][T10913] ext4 filesystem being mounted at /453/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 440.586945][T10913] EXT4-fs (loop0): shut down requested (2) [ 440.603277][T10913] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 440.625693][T10913] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 440.655204][T10913] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 440.667227][ T28] audit: type=1400 audit(1782888830.872:2000): avc: denied { mounton } for pid=10912 comm="syz.0.2219" path="/453/bus/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 440.701295][T10921] netlink: 'syz.1.2221': attribute type 2 has an invalid length. [ 440.713792][T10921] netlink: 'syz.1.2221': attribute type 10 has an invalid length. [ 440.723862][ T3294] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 440.740880][ T3294] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 440.750324][ T3294] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 440.764327][ T3294] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 440.785535][ T3294] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 440.804753][ T3294] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 440.829581][ T3294] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 440.856629][ T3294] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 440.858067][ T28] audit: type=1400 audit(1782888831.062:2001): avc: denied { write } for pid=3294 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 440.900983][ T28] audit: type=1400 audit(1782888831.092:2002): avc: denied { rmdir } for pid=3294 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 440.982400][ T5165] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.097138][T10930] futex_wake_op: syz.2.2226 tries to shift op by -1; fix this program [ 441.166531][ T49] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.179138][ T49] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.249575][ T49] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.261971][ T49] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.303331][T10941] loop4: detected capacity change from 0 to 736 [ 441.347873][ T49] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.367614][ T49] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.445107][ T49] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.468211][ T49] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.668558][ T49] 0{X: left promiscuous mode [ 441.674653][ T49] bridge0: port 3(30{X) entered disabled state [ 441.690976][ T49] bridge_slave_1: left allmulticast mode [ 441.706561][ T49] bridge_slave_1: left promiscuous mode [ 441.722406][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.748157][ T49] bridge_slave_0: left allmulticast mode [ 441.760921][ T49] bridge_slave_0: left promiscuous mode [ 441.796769][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.836037][ T49] pim6reg9: left allmulticast mode [ 441.867564][T10976] futex_wake_op: syz.3.2238 tries to shift op by -1; fix this program [ 441.910571][ T28] audit: type=1400 audit(1782888832.112:2003): avc: denied { write } for pid=10967 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.936876][T10994] futex_wake_op: syz.4.2239 tries to shift op by -1; fix this program [ 442.017960][ T28] audit: type=1400 audit(1782888832.222:2004): avc: denied { write } for pid=10997 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.100517][T11004] loop3: detected capacity change from 0 to 2048 [ 442.111265][T11002] xt_hashlimit: size too large, truncated to 1048576 [ 442.126697][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.148586][T11004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.169240][T11009] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 442.198274][ T49] bond0 (unregistering): Released all slaves [ 442.232909][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 442.261928][ T49] tipc: Left network mode [ 442.267504][ T28] audit: type=1400 audit(1782888832.462:2005): avc: denied { write } for pid=11003 comm="syz.3.2243" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 442.311999][T11014] loop4: detected capacity change from 0 to 512 [ 442.331706][T11014] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 442.372925][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.397561][T11014] EXT4-fs (loop4): 1 truncate cleaned up [ 442.419645][T11014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.527309][ T28] audit: type=1400 audit(1782888832.732:2006): avc: denied { write } for pid=11013 comm="syz.4.2245" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 442.560057][T11022] loop3: detected capacity change from 0 to 256 [ 442.585254][T10946] lo speed is unknown, defaulting to 1000 [ 442.617207][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.768852][ T28] audit: type=1400 audit(1782888832.972:2007): avc: denied { write } for pid=11020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.774384][T11037] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2251'. [ 442.834965][ T28] audit: type=1400 audit(1782888833.042:2008): avc: denied { write } for pid=11043 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.942870][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 443.043505][ T49] veth1_macvtap: left promiscuous mode [ 443.054428][ T49] veth0_macvtap: left promiscuous mode [ 443.064968][ T49] veth1_vlan: left promiscuous mode [ 443.075574][ T49] veth0_vlan: left promiscuous mode [ 443.207989][T11059] loop1: detected capacity change from 0 to 512 [ 443.293182][T11059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.358270][T11059] ext4 filesystem being mounted at /443/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.400076][ T35] infiniband syz2: ib_query_port failed (-19) [ 443.443058][ T28] audit: type=1400 audit(1782888833.652:2009): avc: denied { write } for pid=11058 comm="syz.1.2258" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 443.544159][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.626339][T11081] netlink: 'syz.1.2262': attribute type 3 has an invalid length. [ 443.637602][T11081] netlink: 'syz.1.2262': attribute type 1 has an invalid length. [ 443.649492][T11081] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2262'. [ 443.672255][ T49] IPVS: stop unused estimator thread 0... [ 443.765288][ T28] audit: type=1400 audit(1782888833.972:2010): avc: denied { write } for pid=11071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.765855][T10946] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.796785][T10946] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.804587][T10946] bridge_slave_0: entered allmulticast mode [ 443.811718][T10946] bridge_slave_0: entered promiscuous mode [ 443.821236][T11100] loop4: detected capacity change from 0 to 128 [ 443.823862][T10946] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.850256][T11100] EXT4-fs: Ignoring removed nobh option [ 443.880211][T10946] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.889067][T11100] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 443.897966][ T28] audit: type=1400 audit(1782888834.072:2011): avc: denied { write } for pid=11101 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.924364][T11100] ext4 filesystem being mounted at /450/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 443.932796][T10946] bridge_slave_1: entered allmulticast mode [ 443.942926][T10946] bridge_slave_1: entered promiscuous mode [ 443.963778][T10946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.980669][T10946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.994023][ T28] audit: type=1400 audit(1782888834.202:2012): avc: denied { write } for pid=11098 comm="syz.4.2267" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 444.013479][T10946] team0: Port device team_slave_0 added [ 444.024875][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 444.035128][T10946] team0: Port device team_slave_1 added [ 444.064358][T10946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.073264][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.118190][T10946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.129959][T10946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.137066][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.163795][T10946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.169350][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 444.292420][T10946] hsr_slave_0: entered promiscuous mode [ 444.310438][T11111] futex_wake_op: syz.1.2270 tries to shift op by -1; fix this program [ 444.338027][T10946] hsr_slave_1: entered promiscuous mode [ 444.579619][T11143] syzkaller1: entered promiscuous mode [ 444.606244][T11143] syzkaller1: entered allmulticast mode [ 444.635599][T10946] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 444.669207][T10946] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 444.703353][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 444.719951][T10946] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 444.730394][T10946] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 444.739506][T10946] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 444.751170][T10946] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 444.768087][T10946] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 444.778967][T10946] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 444.885996][T10946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.898266][T11169] futex_wake_op: syz.1.2282 tries to shift op by -1; fix this program [ 444.926490][T10946] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.941035][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.948721][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.986219][ T3419] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.993565][ T3419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.043410][T11178] netlink: 'syz.3.2285': attribute type 2 has an invalid length. [ 445.076678][T11178] netlink: 'syz.3.2285': attribute type 10 has an invalid length. [ 445.320300][T10946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.678410][T11251] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 445.714832][T10946] veth0_vlan: entered promiscuous mode [ 445.736427][T10946] veth1_vlan: entered promiscuous mode [ 445.783156][T10946] veth0_macvtap: entered promiscuous mode [ 445.807172][T10946] veth1_macvtap: entered promiscuous mode [ 445.825956][T10946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.839135][T10946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.861996][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.872460][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.897253][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.912693][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.039804][T11278] netlink: 'syz.4.2297': attribute type 2 has an invalid length. [ 446.074449][T11278] netlink: 'syz.4.2297': attribute type 10 has an invalid length. [ 446.114528][T11280] futex_wake_op: syz.5.2229 tries to shift op by -1; fix this program [ 446.261524][T11300] futex_wake_op: syz.5.2300 tries to shift op by -1; fix this program [ 446.461197][T11334] loop5: detected capacity change from 0 to 512 [ 446.478440][T11334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.550448][T10946] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.810973][T11359] futex_wake_op: syz.2.2317 tries to shift op by -1; fix this program [ 447.185468][T10992] Process accounting resumed [ 447.449321][T11383] loop1: detected capacity change from 0 to 128 [ 447.608357][T11393] netlink: 'syz.4.2329': attribute type 14 has an invalid length. [ 447.628593][T11392] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 447.631016][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2329'. [ 447.647667][T11392] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 447.689948][T11393] netlink: 'syz.4.2329': attribute type 14 has an invalid length. [ 447.701340][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2329'. [ 448.767863][T11442] futex_wake_op: syz.1.2346 tries to shift op by -1; fix this program [ 448.805397][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 448.805416][ T28] audit: type=1400 audit(1782888839.012:2036): avc: denied { execute_no_trans } for pid=11449 comm="syz.4.2348" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 449.002513][ T28] audit: type=1400 audit(1782888839.212:2037): avc: denied { watch watch_reads } for pid=11461 comm="syz.1.2354" path="/464/file1" dev="tmpfs" ino=2470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 449.011107][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 449.258825][T11474] loop3: detected capacity change from 0 to 256 [ 449.271580][T11474] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 449.394583][T11483] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 449.858902][T11498] loop3: detected capacity change from 0 to 7 [ 449.868046][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 449.877458][ C0] buffer_io_error: 4 callbacks suppressed [ 449.877498][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 449.892504][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 449.901795][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 449.910664][T11498] loop3: unable to read partition table [ 449.914993][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811b157400: rx timeout, send abort [ 449.917822][T11498] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 449.925549][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811b157400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 449.991453][T11499] Invalid logical block size (1275) [ 449.998818][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 450.008691][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.018056][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 450.027446][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.036921][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 450.045286][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.054496][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 450.063696][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.073210][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 450.082134][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.091386][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 450.099386][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.108641][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 450.117089][T11498] loop3: unable to read partition table [ 450.117323][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.123823][T11498] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 450.132003][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 450.177360][T11510] loop1: detected capacity change from 0 to 1024 [ 450.184863][T11510] EXT4-fs: Ignoring removed bh option [ 450.195772][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 450.237959][T11510] EXT4-fs: Ignoring removed oldalloc option [ 450.253818][T11510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.266664][T11513] loop4: detected capacity change from 0 to 512 [ 450.273914][T11513] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 450.288906][ T28] audit: type=1400 audit(1782888840.492:2038): avc: denied { write } for pid=11509 comm="syz.1.2371" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 450.327801][T11513] EXT4-fs (loop4): 1 truncate cleaned up [ 450.344090][T11513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.357255][T11519] loop3: detected capacity change from 0 to 512 [ 450.368153][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.415257][T11519] EXT4-fs: Ignoring removed nomblk_io_submit option [ 450.432666][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.492063][T11519] EXT4-fs (loop3): too many log groups per flexible block group [ 450.512429][T11519] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 450.530085][T11519] EXT4-fs (loop3): mount failed [ 450.607317][T11531] futex_wake_op: syz.5.2378 tries to shift op by -1; fix this program [ 450.768793][T11538] futex_wake_op: syz.1.2380 tries to shift op by -1; fix this program [ 450.778409][T11544] futex_wake_op: syz.5.2382 tries to shift op by -1; fix this program [ 450.852017][T11556] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2386'. [ 450.866994][ T49] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.867126][T11556] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2386'. [ 450.882572][ T49] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.920248][ T49] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.932462][ T49] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.016919][T11567] futex_wake_op: syz.5.2391 tries to shift op by -1; fix this program [ 451.045870][T11572] loop3: detected capacity change from 0 to 512 [ 451.069228][T11572] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.2393: corrupted in-inode xattr: invalid ea_ino [ 451.100782][T11572] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 451.102176][T11572] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2393: couldn't read orphan inode 15 (err -117) [ 451.113535][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 451.113567][ C1] EXT4-fs (loop3): initial error at time 1782888841: ext4_iget_extra_inode:5180: inode 15 [ 451.113606][ C1] EXT4-fs (loop3): last error at time 1782888841: ext4_iget_extra_inode:5180: inode 15 [ 451.157597][T11572] loop3: lost filesystem error report for type 5 error -117 [ 451.160074][T11572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.256526][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.317411][T11581] futex_wake_op: syz.5.2396 tries to shift op by -1; fix this program [ 451.342768][ T28] audit: type=1400 audit(1782888841.552:2039): avc: denied { ioctl } for pid=11583 comm="syz.3.2397" path="socket:[29626]" dev="sockfs" ino=29626 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 451.512196][T11591] futex_wake_op: syz.5.2399 tries to shift op by -1; fix this program [ 451.909549][T11608] futex_wake_op: syz.2.2405 tries to shift op by -1; fix this program [ 451.948076][T11615] xt_hashlimit: size too large, truncated to 1048576 [ 452.014068][ T28] audit: type=1326 audit(1782888842.222:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11617 comm="syz.2.2407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67803ade59 code=0x0 [ 452.249945][T11622] loop5: detected capacity change from 0 to 512 [ 452.268389][T11622] EXT4-fs: Ignoring removed oldalloc option [ 452.285158][T11622] EXT4-fs: Ignoring removed i_version option [ 452.322562][T11622] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 452.343107][T11622] EXT4-fs (loop5): orphan cleanup on readonly fs [ 452.357104][T11622] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2408: invalid block [ 452.437825][T11622] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 452.438077][T11622] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2408: invalid indirect mapped block 4294967295 (level 1) [ 452.448383][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 452.448413][ C1] EXT4-fs (loop5): initial error at time 1782888842: ext4_get_branch:178: inode 11: block 4294967295 [ 452.448455][ C1] EXT4-fs (loop5): last error at time 1782888842: ext4_get_branch:178: inode 11: block 4294967295 [ 452.503742][T11624] futex_wake_op: syz.3.2409 tries to shift op by -1; fix this program [ 452.521954][T11622] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 452.523570][T11622] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2408: invalid indirect mapped block 4294967295 (level 1) [ 452.554013][T11622] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 452.554765][T11622] EXT4-fs (loop5): 2 truncates cleaned up [ 452.597786][T11622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 452.707277][T11635] futex_wake_op: syz.4.2411 tries to shift op by -1; fix this program [ 452.740976][T10946] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.187023][T11668] futex_wake_op: syz.4.2423 tries to shift op by -1; fix this program [ 453.785859][T11701] loop3: detected capacity change from 0 to 512 [ 453.816838][T11701] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 453.850242][T11701] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.2432: bad orphan inode 131083 [ 453.884373][T11704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2433'. [ 453.897186][T11704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2433'. [ 453.906802][T11701] loop3: lost filesystem error report for type 5 error -117 [ 453.910775][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 453.925796][ C1] EXT4-fs (loop3): initial error at time 1782888844: ext4_orphan_get:1425 [ 453.934480][ C1] EXT4-fs (loop3): last error at time 1782888844: ext4_orphan_get:1425 [ 453.943477][T11701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.004965][ T28] audit: type=1400 audit(1782888844.202:2041): avc: denied { write } for pid=11700 comm="syz.3.2432" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 454.074610][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.086194][ T28] audit: type=1400 audit(1782888844.202:2042): avc: denied { lock } for pid=11700 comm="syz.3.2432" path="/474/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 454.160236][ T28] audit: type=1400 audit(1782888844.202:2043): avc: denied { write } for pid=11700 comm="syz.3.2432" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 454.259903][T11714] loop3: detected capacity change from 0 to 1024 [ 454.308385][T11714] EXT4-fs: Ignoring removed nomblk_io_submit option [ 454.350313][T11714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.399923][ T28] audit: type=1400 audit(1782888844.602:2044): avc: denied { write } for pid=11713 comm="syz.3.2438" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 454.494977][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2444'. [ 454.922527][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.872362][T11758] syzkaller1: entered promiscuous mode [ 455.883184][T11758] syzkaller1: entered allmulticast mode [ 456.056184][T11765] futex_wake_op: syz.4.2456 tries to shift op by -1; fix this program [ 456.104487][T11778] futex_wake_op: syz.2.2458 tries to shift op by -1; fix this program [ 456.242388][T11790] netlink: 'syz.2.2463': attribute type 18 has an invalid length. [ 456.265175][T11792] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 456.284167][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2463'. [ 456.329865][T11790] netlink: 'syz.2.2463': attribute type 18 has an invalid length. [ 456.377976][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2463'. [ 456.603520][ T28] audit: type=1400 audit(1782888846.812:2045): avc: denied { write } for pid=11799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.639562][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 456.647875][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 456.681675][T11817] loop4: detected capacity change from 0 to 1024 [ 456.710816][ T28] audit: type=1400 audit(1782888846.912:2046): avc: denied { write } for pid=11819 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.773770][T11817] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 456.809807][T11817] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 457.076780][T11832] netlink: 'syz.1.2474': attribute type 2 has an invalid length. [ 457.104158][T11832] netlink: 'syz.1.2474': attribute type 10 has an invalid length. [ 457.183617][T11817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 457.262203][ T28] audit: type=1400 audit(1782888847.462:2047): avc: denied { write } for pid=11830 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.343901][T11842] xt_hashlimit: size too large, truncated to 1048576 [ 457.361256][ T28] audit: type=1400 audit(1782888847.562:2048): avc: denied { write } for pid=11848 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.378573][T11852] loop5: detected capacity change from 0 to 256 [ 457.420434][T11852] msdos: Unknown parameter 'QK.ah†;vK!' [ 457.705559][ T28] audit: type=1400 audit(1782888847.912:2049): avc: denied { write } for pid=11855 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.759034][ T28] audit: type=1400 audit(1782888847.962:2050): avc: denied { write } for pid=11867 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.990824][T11873] futex_wake_op: syz.2.2480 tries to shift op by -1; fix this program [ 460.359145][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.735433][T11908] loop5: detected capacity change from 0 to 1024 [ 460.742023][T11909] netlink: 'syz.2.2486': attribute type 2 has an invalid length. [ 460.743837][T11908] EXT4-fs: Ignoring removed orlov option [ 460.756318][T11909] netlink: 'syz.2.2486': attribute type 10 has an invalid length. [ 460.776103][T11915] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 460.790661][T11908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.826983][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 460.826999][ T28] audit: type=1400 audit(1782888851.032:2053): avc: denied { write } for pid=11906 comm="syz.5.2487" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 460.894478][T10946] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.225976][T11933] futex_wake_op: syz.2.2496 tries to shift op by -1; fix this program [ 461.376738][T11952] loop4: detected capacity change from 0 to 128 [ 461.401254][T11952] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 461.496618][T11952] ext4 filesystem being mounted at /494/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 461.587587][T11952] EXT4-fs error (device loop4): dx_make_map:1296: inode #2: block 63: comm syz.4.2501: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 461.607183][ T28] audit: type=1400 audit(1782888851.792:2054): avc: denied { write } for pid=11951 comm="syz.4.2501" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 461.634905][ T28] audit: type=1400 audit(1782888851.792:2055): avc: denied { write } for pid=11951 comm="syz.4.2501" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 461.668996][T11952] EXT4-fs error (device loop4) in do_split:2027: Corrupt filesystem [ 461.701170][ T28] audit: type=1400 audit(1782888851.792:2056): avc: denied { create } for pid=11951 comm="syz.4.2501" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 461.749157][ T28] audit: type=1400 audit(1782888851.792:2057): avc: denied { write } for pid=11951 comm="syz.4.2501" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 461.833540][ T28] audit: type=1400 audit(1782888851.792:2058): avc: denied { write } for pid=11951 comm="syz.4.2501" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 462.566928][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 462.961580][T11975] loop4: detected capacity change from 0 to 512 [ 463.189489][T11975] EXT4-fs (loop4): invalid journal inode [ 463.197750][T11975] EXT4-fs (loop4): can't get journal size [ 463.213863][T11975] EXT4-fs (loop4): 1 truncate cleaned up [ 463.221994][T11975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.259216][ T28] audit: type=1400 audit(1782888853.462:2059): avc: denied { write } for pid=11974 comm="syz.4.2511" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 463.288703][T11975] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2511'. [ 463.313765][T11980] futex_wake_op: syz.5.2512 tries to shift op by -1; fix this program [ 463.635595][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.869077][T11987] lo speed is unknown, defaulting to 1000 [ 464.075321][T11999] loop3: detected capacity change from 0 to 512 [ 464.099784][T11999] EXT4-fs: Ignoring removed oldalloc option [ 464.168419][T11999] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 464.207940][T11999] EXT4-fs (loop3): orphan cleanup on readonly fs [ 464.236670][T11999] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 464.257995][T11999] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 464.269106][T11999] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.2520: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 464.301687][T11999] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 464.301961][T11999] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2520: couldn't read orphan inode 13 (err -117) [ 464.312793][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 464.313244][ C1] EXT4-fs (loop3): last error at time 1782888854: ext4_ext_check_inode:521: inode 13 [ 464.357424][T11999] loop3: lost filesystem error report for type 5 error -117 [ 464.464092][T12008] netlink: 'syz.4.2522': attribute type 2 has an invalid length. [ 464.510134][T12008] netlink: 'syz.4.2522': attribute type 10 has an invalid length. [ 464.536697][T11999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 464.679596][T12014] futex_wake_op: syz.1.2526 tries to shift op by -1; fix this program [ 464.696863][T11999] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.964717][T12044] loop4: detected capacity change from 0 to 256 [ 465.012117][T12044] FAT-fs (loop4): Directory bread(block 64) failed [ 465.033228][T12044] FAT-fs (loop4): Directory bread(block 65) failed [ 465.048631][T12046] hub 8-0:1.0: USB hub found [ 465.064770][T12044] FAT-fs (loop4): Directory bread(block 66) failed [ 465.078859][T12046] hub 8-0:1.0: 8 ports detected [ 465.087302][T12044] FAT-fs (loop4): Directory bread(block 67) failed [ 465.102090][T12044] FAT-fs (loop4): Directory bread(block 68) failed [ 465.115341][T12044] FAT-fs (loop4): Directory bread(block 69) failed [ 465.135178][T12044] FAT-fs (loop4): Directory bread(block 70) failed [ 465.146445][T12044] FAT-fs (loop4): Directory bread(block 71) failed [ 465.158032][T12044] FAT-fs (loop4): Directory bread(block 72) failed [ 465.167234][T12044] FAT-fs (loop4): Directory bread(block 73) failed [ 465.228128][T12044] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 465.245193][T12054] netlink: 'syz.2.2538': attribute type 2 has an invalid length. [ 465.262318][T12044] FAT-fs (loop4): Filesystem has been set read-only [ 465.276437][T12054] netlink: 'syz.2.2538': attribute type 10 has an invalid length. [ 465.380185][T12052] loop3: detected capacity change from 0 to 512 [ 465.450788][ T28] audit: type=1400 audit(1782888855.642:2060): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 465.491577][ T28] audit: type=1400 audit(1782888855.682:2061): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 465.535641][ T28] audit: type=1400 audit(1782888855.742:2062): avc: denied { accept } for pid=12061 comm="syz.4.2540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 465.578325][T12052] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 465.666190][T12052] EXT4-fs error (device loop3): ext4_quota_enable:7228: comm syz.3.2536: Bad quota inum: 2, type: 1 [ 465.692883][T12052] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 465.739065][T12077] loop5: detected capacity change from 0 to 512 [ 465.779025][T12077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.256329][T12087] netlink: 'syz.1.2551': attribute type 2 has an invalid length. [ 466.279790][T12087] netlink: 'syz.1.2551': attribute type 10 has an invalid length. [ 466.398230][T10946] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.434617][ T3295] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 466.530637][T12093] loop3: detected capacity change from 0 to 256 [ 466.565022][T12093] FAT-fs (loop3): Directory bread(block 64) failed [ 466.579662][T12093] FAT-fs (loop3): Directory bread(block 65) failed [ 466.607429][T12093] FAT-fs (loop3): Directory bread(block 66) failed [ 466.615350][T12093] FAT-fs (loop3): Directory bread(block 67) failed [ 466.624741][T12093] FAT-fs (loop3): Directory bread(block 68) failed [ 466.633029][T12093] FAT-fs (loop3): Directory bread(block 69) failed [ 466.639991][T12093] FAT-fs (loop3): Directory bread(block 70) failed [ 466.646688][T12093] FAT-fs (loop3): Directory bread(block 71) failed [ 466.653525][T12093] FAT-fs (loop3): Directory bread(block 72) failed [ 466.660842][T12093] FAT-fs (loop3): Directory bread(block 73) failed [ 466.706683][T12093] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 466.718662][T12103] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2557'. [ 466.719342][T12093] FAT-fs (loop3): Filesystem has been set read-only [ 466.761875][T12103] syzkaller1: entered promiscuous mode [ 466.768452][T12103] syzkaller1: entered allmulticast mode [ 466.893376][T12109] syz.1.2559: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 466.915133][T12109] CPU: 0 UID: 0 PID: 12109 Comm: syz.1.2559 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 466.915262][T12109] Tainted: [W]=WARN [ 466.915272][T12109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 466.915292][T12109] Call Trace: [ 466.915301][T12109] [ 466.915312][T12109] __dump_stack+0x1d/0x30 [ 466.915346][T12109] dump_stack_lvl+0x95/0xd0 [ 466.915452][T12109] dump_stack+0x15/0x1b [ 466.915472][T12109] warn_alloc+0x145/0x1c0 [ 466.915581][T12109] __vmalloc_node_range_noprof+0xaa/0x11e0 [ 466.915625][T12109] ? __futex_wait+0x1fd/0x260 [ 466.915722][T12109] ? __pfx_futex_wake_mark+0x10/0x10 [ 466.915763][T12109] ? should_fail_ex+0x30/0x270 [ 466.915794][T12109] ? xskq_create+0x36/0xe0 [ 466.915919][T12109] ? should_failslab+0x8c/0xb0 [ 466.915972][T12109] vmalloc_user_noprof+0x7d/0xb0 [ 466.916007][T12109] ? xskq_create+0x80/0xe0 [ 466.916616][T12109] xskq_create+0x80/0xe0 [ 466.916686][T12109] xsk_init_queue+0x70/0xb0 [ 466.916737][T12109] xsk_setsockopt+0x3ef/0x640 [ 466.916808][T12109] ? __pfx_xsk_setsockopt+0x10/0x10 [ 466.916848][T12109] __sys_setsockopt+0x184/0x200 [ 466.916885][T12109] __x64_sys_setsockopt+0x64/0x80 [ 466.916921][T12109] x64_sys_call+0x2327/0x3020 [ 466.916958][T12109] do_syscall_64+0x136/0x3c0 [ 466.917005][T12109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.917028][T12109] RIP: 0033:0x7f97bfb8de59 [ 466.917109][T12109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.917134][T12109] RSP: 002b:00007f97be5c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 466.917207][T12109] RAX: ffffffffffffffda RBX: 00007f97bfe16090 RCX: 00007f97bfb8de59 [ 466.917266][T12109] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 466.917283][T12109] RBP: 00007f97bfc23e6f R08: 0000000000000004 R09: 0000000000000000 [ 466.917302][T12109] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.917363][T12109] R13: 00007f97bfe16128 R14: 00007f97bfe16090 R15: 00007ffed2b3fe58 [ 466.917391][T12109] [ 466.917533][T12109] Mem-Info: [ 467.197389][T12109] active_anon:8092 inactive_anon:3565 isolated_anon:0 [ 467.197389][T12109] active_file:304 inactive_file:25505 isolated_file:0 [ 467.197389][T12109] unevictable:0 dirty:235 writeback:0 [ 467.197389][T12109] slab_reclaimable:3577 slab_unreclaimable:108510 [ 467.197389][T12109] mapped:30458 shmem:3776 pagetables:3592 [ 467.197389][T12109] sec_pagetables:0 bounce:0 [ 467.197389][T12109] kernel_misc_reclaimable:0 [ 467.197389][T12109] free:1764384 free_pcp:7829 free_cma:0 [ 467.263121][T12109] Node 0 active_anon:32368kB inactive_anon:14260kB active_file:1216kB inactive_file:102020kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121832kB dirty:940kB writeback:0kB shmem:15104kB kernel_stack:3872kB pagetables:14368kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 467.341543][T12109] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 467.415195][T12109] lowmem_reserve[]: 0 2878 7857 7857 [ 467.432582][T12109] Node 0 DMA32 free:2944204kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947728kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 467.500897][T12109] lowmem_reserve[]: 0 0 4978 4978 [ 467.506432][T12109] Node 0 Normal free:4097972kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32368kB inactive_anon:14260kB active_file:1216kB inactive_file:102020kB unevictable:0kB writepending:940kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:27644kB local_pcp:25688kB free_cma:0kB [ 467.551759][T12109] lowmem_reserve[]: 0 0 0 0 [ 467.560133][T12109] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 467.585456][T12109] Node 0 DMA32: 5*4kB (M) 3*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944204kB [ 467.620675][T12109] Node 0 Normal: 809*4kB (UME) 1041*8kB (UME) 656*16kB (UME) 427*32kB (UME) 301*64kB (UM) 215*128kB (UME) 105*256kB (UME) 68*512kB (UME) 27*1024kB (UM) 11*2048kB (UM) 953*4096kB (UM) = 4097868kB [ 467.641764][T12109] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 467.654548][T12109] 29592 total pagecache pages [ 467.678636][T12109] 3 pages in swap cache [ 467.683993][T12109] Free swap = 119816kB [ 467.688355][T12109] Total swap = 124996kB [ 467.697423][T12109] 2097051 pages RAM [ 467.702094][T12109] 0 pages HighMem/MovableOnly [ 467.709294][T12109] 81720 pages reserved [ 467.827699][T12113] loop5: detected capacity change from 0 to 1024 [ 467.847010][T12113] EXT4-fs: Ignoring removed bh option [ 467.931143][T12123] loop4: detected capacity change from 0 to 4096 [ 467.952723][T12113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.994622][T12123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.019360][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 468.019377][ T28] audit: type=1400 audit(1782888858.222:2066): avc: denied { write } for pid=12122 comm="syz.4.2566" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 468.049945][ T28] audit: type=1400 audit(1782888858.252:2067): avc: denied { write } for pid=12112 comm="syz.5.2561" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 468.643959][T10946] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.683069][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.812645][T12146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2574'. [ 468.844509][T12141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2568'. [ 468.920212][T12151] futex_wake_op: syz.1.2573 tries to shift op by -1; fix this program [ 468.984677][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2577'. [ 469.073683][T12157] syzkaller1: entered allmulticast mode [ 469.078776][ T28] audit: type=1400 audit(1782888859.282:2068): avc: denied { append } for pid=12159 comm="syz.5.2578" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 469.272534][T12179] netlink: 'syz.2.2582': attribute type 2 has an invalid length. [ 469.281927][T12179] netlink: 'syz.2.2582': attribute type 10 has an invalid length. [ 469.405301][T12181] futex_wake_op: syz.5.2585 tries to shift op by -1; fix this program [ 469.481141][T12189] futex_wake_op: syz.4.2587 tries to shift op by -1; fix this program [ 469.561069][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2588'. [ 469.575265][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2588'. [ 469.720583][T12206] loop5: detected capacity change from 0 to 4096 [ 469.736782][T12206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.806975][ T28] audit: type=1400 audit(1782888860.012:2069): avc: denied { write } for pid=12205 comm="syz.5.2594" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 470.110267][T12228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.134409][T12228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.226837][T12232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2604'. [ 470.270064][T10946] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.712279][T12241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2608'. [ 470.736136][T12241] syz_tun (unregistering): left allmulticast mode [ 470.891169][ T28] audit: type=1400 audit(1782888861.092:2070): avc: denied { name_bind } for pid=12244 comm="syz.4.2609" path="socket:[33074]" dev="sockfs" ino=33074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 470.948128][T12250] futex_wake_op: syz.5.2605 tries to shift op by -1; fix this program [ 471.122810][ T28] audit: type=1400 audit(1782888861.332:2071): avc: denied { cmd } for pid=12253 comm="syz.4.2611" path="socket:[33100]" dev="sockfs" ino=33100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 471.248384][ T3419] Bluetooth: hci0: Frame reassembly failed (-84) [ 471.615233][T12273] loop1: detected capacity change from 0 to 8192 [ 471.622764][T12273] vfat: Unknown parameter '0xffffffffffffffff' [ 471.679596][T12275] loop3: detected capacity change from 0 to 8192 [ 471.690027][T12269] loop4: detected capacity change from 0 to 128 [ 471.699001][T12269] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 471.740805][T12269] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 471.905557][T12288] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2623'. [ 471.927263][T12291] futex_wake_op: syz.2.2621 tries to shift op by -1; fix this program [ 471.943242][T12288] syzkaller1: entered promiscuous mode [ 471.969232][T12288] syzkaller1: entered allmulticast mode [ 472.021460][T12286] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 472.044262][T12296] futex_wake_op: syz.2.2625 tries to shift op by -1; fix this program [ 472.105287][ T270] ================================================================== [ 472.113868][ T270] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat12_ent_put [ 472.123956][ T270] [ 472.127131][ T270] write to 0xffff88811a96602b of 1 bytes by task 12275 on cpu 0: [ 472.137200][ T270] fat12_ent_put+0x74/0x180 [ 472.143018][ T270] fat_alloc_clusters+0x55e/0xc40 [ 472.148865][ T270] fat_get_block+0x252/0x5e0 [ 472.153819][ T270] __block_write_begin_int+0x400/0xf90 [ 472.159651][ T270] cont_write_begin+0x5bf/0x920 [ 472.164830][ T270] fat_write_begin+0x52/0xe0 [ 472.169493][ T270] cont_write_begin+0x18d/0x920 [ 472.174397][ T270] fat_write_begin+0x52/0xe0 [ 472.179045][ T270] generic_cont_expand_simple+0xb0/0x150 [ 472.185046][ T270] fat_cont_expand+0x3e/0x170 [ 472.189772][ T270] fat_fallocate+0x177/0x1c0 [ 472.194548][ T270] vfs_fallocate+0x3ac/0x400 [ 472.199897][ T270] __x64_sys_fallocate+0x7a/0xd0 [ 472.205412][ T270] x64_sys_call+0x298e/0x3020 [ 472.210282][ T270] do_syscall_64+0x136/0x3c0 [ 472.215789][ T270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.222982][ T270] [ 472.225952][ T270] read to 0xffff88811a966000 of 512 bytes by task 270 on cpu 1: [ 472.234677][ T270] copy_folio_from_iter_atomic+0x728/0x10a0 [ 472.241161][ T270] generic_perform_write+0x2c4/0x490 [ 472.247411][ T270] shmem_file_write_iter+0xc5/0xf0 [ 472.253450][ T270] lo_rw_aio+0x6a9/0x760 [ 472.258453][ T270] loop_process_work+0x567/0xac0 [ 472.264535][ T270] loop_workfn+0x31/0x40 [ 472.269119][ T270] process_scheduled_works+0x4d4/0x9a0 [ 472.275791][ T270] worker_thread+0x569/0x750 [ 472.282234][ T270] kthread+0x221/0x270 [ 472.286697][ T270] ret_from_fork+0x146/0x330 [ 472.291905][ T270] ret_from_fork_asm+0x1a/0x30 [ 472.297507][ T270] [ 472.299879][ T270] Reported by Kernel Concurrency Sanitizer on: [ 472.306081][ T270] CPU: 1 UID: 0 PID: 270 Comm: kworker/u8:5 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 472.317602][ T270] Tainted: [W]=WARN [ 472.321976][ T270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 472.333464][ T270] Workqueue: loop3 loop_workfn [ 472.339966][ T270] ================================================================== [ 473.250854][T12260] Bluetooth: hci0: command 0x1003 tx timeout [ 473.250854][ T3519] Bluetooth: hci0: Opcode 0x1003 failed: -110