last executing test programs: 3.432369898s ago: executing program 1 (id=587): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000d00)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xa}, @in=@multicast1, 0x4e20, 0x1, 0x4e23, 0xfffa, 0x2, 0xa0, 0xa0, 0x0, 0x0, 0xee01}, {0x101, 0x100, 0x65e, 0xf, 0x2, 0x3000000, 0x63, 0x7}, {0x175, 0x9, 0x5, 0x8001}, 0x3, 0x0, 0x2, 0x0, 0x1, 0x3}, {{@in=@private=0xa010100, 0x4d4, 0xff}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3500, 0x4, 0x2, 0x9, 0x3, 0x6472, 0x1}}, 0xe8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="fb", 0x1}], 0x1) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x90, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r4, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0xfffffffe, 0x9}, 0x8) close(r2) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34000000180020002abd7000fbdbdf2580140000fe05c8020020000005001b000600000008000500ac1e010108000400", @ANYRES32=0x0, @ANYBLOB="e8c17acc30f7f8a67a860c2a9e08a78563e1e2823c1554e50fed7ad6e0091aa41ac5f3bffc39fafa6c1f9ab01e8612a6eb98b6c46857914f1a331667d500c6a79fe42e3ccafd71ee493889448d1251f0780ba97782478844272119c1bddb24c288db2dc712b800"/114], 0x34}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a78000000060a0b04000000000000000002000005"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="090000000400000006000000ff00"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r5}, 0x38) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x18000, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r3, @ANYRES64=r3, @ANYRESOCT=r0, @ANYRESOCT=r3, @ANYRES64], 0x8, 0x2fc, &(0x7f00000010c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000001c0)={'#! ', '', [], 0xa, "4a59b08b5d8f56172741c55623e3b0a9a2d928620b491fbadf8274662b363ae27b7c0920bce40a8207829675e3a26789e7a4c1d03fb0b3851f7453042968b09a02ab964bf5bd5b74488a7a23faf02ccc910d6d3434692a7b9052a0825f214963bc4918ce96afbbaa754fcb2bdc"}, 0x71) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28031, r6, 0x7ed34000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) msgget(0x3, 0xc8) 1.995683826s ago: executing program 0 (id=606): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x7f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x1) r2 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)=0x5) sysinfo(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') munmap(&(0x7f0000123000/0x4000)=nil, 0x4000) preadv(r5, &(0x7f0000000340)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000200), 0x4) pipe2$9p(&(0x7f0000000100), 0x4000) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) ioctl$TCSETSF(r7, 0x5433, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 1.923869169s ago: executing program 3 (id=608): syz_emit_ethernet(0x7a, &(0x7f0000000400)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "fd7100", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x13}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x0, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x6}}}}}}}, 0x0) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffffff69, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) (async) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r3 = syz_open_dev$sg(&(0x7f0000000380), 0x2, 0x10000) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f00000003c0)) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200010000000000000000000100000080000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000300"/28], 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f0000000580)='^\x82^\'!$\xcf@#o\x00', 0xc0002, &(0x7f00000005c0)={@align=0xd2c, {0x1ff, 0x9, 0x0, 0x9}}, 0x100, &(0x7f0000000600), &(0x7f0000000640)=0x1ff}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x81, 0x0}, 0x8) (async) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xa, 0x3f7, 0x4, 0x2}, 0x50) (async) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000840)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x1f, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x22d}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xe}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x80000001}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xc7, &(0x7f0000000480)=""/199, 0x41100, 0x18, '\x00', 0x0, @fallback=0x1d, r5, 0x8, &(0x7f00000006c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, r6, r8, 0x0, &(0x7f0000000740)=[0x1, r9], 0x0, 0x10, 0x2}, 0x94) 1.900273563s ago: executing program 1 (id=609): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1200fff}, 0x28) sigaltstack(0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="20000000100001070000000000000000"], 0x20}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') setns(r3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {}, {0xf, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffa}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 1.801957069s ago: executing program 3 (id=610): unshare(0x24020400) socket$inet_udp(0x2, 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000380), 0x240000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x7) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket(0x9, 0x6, 0xfffffffe) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200)=0xfffffffffffffff9, 0x8) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040)) sendmsg$inet6(r8, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e23, 0x1, @local, 0x38a}, 0x5e, &(0x7f0000000b00)=[{&(0x7f0000000400)="80004b77efe55463", 0x8}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000000000000029000000", @ANYRES8=r8], 0x30}, 0x4) 1.572262257s ago: executing program 1 (id=614): quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, 0x0) 1.572044107s ago: executing program 1 (id=615): socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$caif_stream(0x25, 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089"], 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8000, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0xa000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.145139949s ago: executing program 2 (id=622): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x400000000000000, 0x0, 0x4040000}, 0x8024) 1.131945231s ago: executing program 0 (id=623): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x5, 0x4, 0x8, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80010000}, 0x50) 1.070647341s ago: executing program 0 (id=624): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.070435781s ago: executing program 2 (id=625): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffffd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000100"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 1.070204211s ago: executing program 2 (id=626): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c"], 0x3c}}, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x884) 1.064605942s ago: executing program 0 (id=627): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0xff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[], 0x0) futex(0x0, 0x5, 0xf2, 0x0, &(0x7f0000000000)=0x3, 0x4ffffff) sendmsg$kcm(r0, 0x0, 0x4040800) clock_gettime(0x0, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r1 = getpgid(0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x48084) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="29c726bd7000fedbc8251900000008000300", @ANYRES64=r6], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x48800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x48, r9, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x10) 868.189485ms ago: executing program 4 (id=628): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x47b, &(0x7f0000000280)="$eJzs3EtvG1UbAOB3xk16+3L5Srn0AjUUREQhadICFWIDAqkbJCRYwDKkoQpNW9QEiVYVLQgVsUL8AmCJxC9gBRsErEBsYY+QKtQNhQUymvEMceIkOHZdN/XzSGOfM5ec887Mic/M8TiAvlXNXpKIWkT8HBEj9ezyFar1t+vXLs78ee3iTBK12ku/J/l6f1y7OFOuWm63s8iMpRHp+0nsW6XchfMXTk3Pz8+eK/ITi6ffnFg4f+GxudPTJ2dPzp6ZOnbs6JHJJ5+YevyGxDmU1XXvO2f37zn+6scvzNTite++yOr7v2J5Yxx1ox2XWY3q8n2ZG8xfH+r4r99ahhrSyZYeVoQNqUREdrgG8vY/EpVYOngj8fx7Pa0c0FW1Wq22tWlupUxcrgG3sSR6XQOgN8oP+uz6t5xuYvej564+U78AyuK+Xkz1JVsizd621a/Yh7pUfjUiXrn81yfZFKveh1jdti7VBwC4/X2V9X8eXa3/N5zc1bDecDE2NBoRhyJiV0TcERG7I+LOiMjWvTsi7tlg+dUV+eb+z4/b2wqsRVn/7+libGt5/y8tVxmtFLmhPP6B5PW5+dnDxT4Zi4GtWX5ynTK+fu6nj9Za1tj/y6as/LIvWNTjty0rbtCdmF6c7iTmRk/N1d+b41+6L5BExJ6I2Lt0udCybJ/NPfL5/iw9vLN5+X/Hv44bMM5U+yzi4Xr8l2NF/KWkXtJa45MT22J+9vBEeVY0+/6HKy825gca0h3FfwNcfTdixxrHP1c2g3K8dmHjZVz55YM1r2naPf8Hk5fz9GAx7+3pxcVzkxGDxYxl86eWti3z5fpZ/GMHV4t/ONkV8fenxXb7IiI7ie+NiPsi4kBR9/sj4oGIOLhO/N8+++Ab6++h3h7/E+sd/4jRpHG8vo1E5dQ3X65VfmvH/2ieGivmtPL/r9UKdrLvAAAAYLNI8+/AJ+n4v+k0HR+vf4d/d+xI588uLB6qxltnTtS/Kz8aA2l5p2uk4X7oZHFvuMxPrcgfiYj/53cUt+f58Zmz890aUwdas3ON9p/5tdLr2gFdt6FxtOYn2oBNzPOa0KcGtH/oZ9o/9C/tH/rXau3/UsT1HlQFuMl8/kP/0v6hf2n/0L+0f+hLzY/Elz+30s6T/kuJXcc72nxTJT6M9jbfnicqXapYNP5oRxcSkfZ+z7edSG+FahwoElsjotWtLnX1mK48fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa/fwIAAP//5w/pXg==") bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$kcm(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a0000008500000006"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) setreuid(0x0, 0xee00) keyctl$clear(0x5, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 849.124318ms ago: executing program 0 (id=629): socket$kcm(0x21, 0x2, 0x2) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x4, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020000000100000000df83000400000000837000108cff000000000020"], 0x24, 0x0) 831.394071ms ago: executing program 4 (id=630): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x4}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x4e, 0x0, 0x3}, 0x28) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)={0x2, 0x5, "ba4e9d", 0xa0, 0x8}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) wait4(0x0, 0x0, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x808719, &(0x7f00000002c0)={[{@data_err_ignore}, {@data_err_ignore}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}, 0x0}, {@quota}, {@orlov}, {@test_dummy_encryption_v1}, {@debug}, {@nouid32}, {@quota}, {@nobarrier}, {@dax_inode}, {@noblock_validity}, {@nogrpid}, {@data_err_abort}, {@resgid}, {@jqfmt_vfsv1}, {@block_validity}, {@noquota}], [{@subj_type={'subj_type', 0x3d, '@'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@fsname={'fsname', 0x3d, 'errO\xd3s}rem\xa4E\xe1\x96-r\x8f'}}], 0x2c}, 0x2, 0x4fc, &(0x7f0000000e40)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2100, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$kcm(0x10, 0x100000000002, 0x4) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) write$UHID_INPUT(r5, &(0x7f0000001000)={0x8, {"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", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x2, 0x7, 0xc, 0x4, 0x0, 0x8, 0x11, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x1, @perf_config_ext={0x10001, 0x2}, 0xc110, 0x2, 0x2f65, 0x8, 0xe1ea, 0x0, 0x68, 0x0, 0x1000, 0x0, 0xc94}, 0xffffffffffffffff, 0xd, r5, 0x1) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r7, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e1c, 0x70, @empty, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x18}, 0x440e0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) 830.783421ms ago: executing program 0 (id=631): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r5, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) r8 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x8) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000000440)='\x00', 0x0, r8) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000"], 0xb8}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7050000000000f16110480000000000dc0500001000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030528bd7000000000", @ANYRES32=0x0, @ANYBLOB], 0x64}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)}], 0x1}, 0x24048800) io_uring_register$IORING_UNREGISTER_NAPI(r5, 0x1c, &(0x7f0000000140), 0x1) 823.239372ms ago: executing program 3 (id=632): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x3, 0x7ffe}, 0xc) (async) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x3, 0x7ffe}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000140)=""/45, 0x2d) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) bind$qrtr(r0, &(0x7f00000001c0)={0x2a, 0x1, 0x8000}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x90ff}, 0x0, 0x0, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x2e) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x859}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, r2, 0x2000000000000b, r5, 0x0) unshare(0x22020400) socket(0x40000000015, 0x5, 0x0) (async) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r6, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) io_uring_setup(0x1b7a, 0x0) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 536.39049ms ago: executing program 4 (id=633): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x18, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x1000006}, 0x0, 0x8000, 0x800000, 0x4, 0x3ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r0], 0xc8}, 0x1, 0x0, 0x0, 0x24004011}, 0x8000) 516.152363ms ago: executing program 1 (id=634): setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0xa00, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 500.187386ms ago: executing program 2 (id=635): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x822b01) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x40000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 333.403204ms ago: executing program 4 (id=636): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000040)={0x0, 0x0, 0x1, [0x3, 0x4000000000000, 0xe, 0xe], [0x401, 0x9, 0x5, 0x7, 0x8, 0x56c, 0x2b44, 0x4, 0x100, 0x8, 0x2, 0x7, 0x6, 0x7, 0x9, 0xffffffffffff8001, 0x3, 0x6, 0x6, 0x6, 0x7, 0x5739, 0x1, 0x1, 0x4, 0x8, 0x5, 0x8, 0xffffffffffffffff, 0x7, 0x100, 0x2, 0x8, 0x9, 0x80, 0x8000000000000001, 0x2, 0x7fffffffffffffff, 0x5, 0x7f, 0x7f, 0xa9c4, 0x3, 0xfffffffffffff801, 0x4, 0x202, 0x9, 0x2, 0xc80f, 0x8000000000000001, 0x9, 0x100000001, 0x1, 0x5, 0x6, 0x7e, 0x40, 0x3, 0x7ff, 0x4, 0x1, 0x0, 0x1, 0xfffffffffffffffb, 0x7ff, 0x0, 0x5, 0x2343dc4e80000, 0x3, 0x40c5, 0x17, 0x3, 0x7fff, 0xad0, 0x2, 0xfffffffffffffab9, 0x1, 0x6, 0x6, 0x401, 0xff, 0x400, 0xd, 0x2, 0x1000, 0x9, 0xfffffffffffffffb, 0x1, 0x81, 0x8, 0x8, 0x6, 0x859, 0x833, 0x0, 0xe9, 0x80, 0x9, 0x6, 0x2, 0xfffffffffffff8c3, 0x8000, 0x9, 0x5, 0x227, 0x54, 0x8, 0x7, 0x3, 0xfffffffffffffffb, 0xe332, 0x0, 0xb3e9, 0xc, 0x6, 0x9, 0x5, 0x7, 0x800, 0x6, 0x12e]}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000480)={0x2, 0x5c4c90c2, @start={r2, 0x1, "1fb17cb47180aa47552fd3b9e15c78f121bf69b5f941af7b5032a7aea346deb30727a9e17b4b9f9babc2edc4277a2aa8ef1e177479fd47724d53942d5b1a17ab0dac4b86117cf7ec38e66227c2c1ba334c1c642bd6f5ce3e9ec3614703c45798facc95634778c5764d5710ef577bce52370699d4551084fd6ca8a2fe083459059488717ab83f0801f8e168379e21eede0af64017f3afa0380c6d6f6a8d3ae662ec7ae2332a1f8b1208a6ee7fd386fc0c82c450984fcc9bfa1295b2e8c194e4d7b48d7bf6e7e6e30e3cad89ca2a8b9a1f2c9fd970ab0cac66edfd239189624526b64a7f12164f64431bb6dd29cc5e4e74d7e8aeddb674e066c8bea2a2c18f390e23535749b7f922e0d8bf5d2b2abbe1d0366c7b711261e342744e641fd2e1372be1148688a9b97034365d9adc043bb6ff24b86fa99c3f0cbadf811e115711ae53f4c8480db5cf32f5ea56ac2c51cab4d2e4659ea7c6a9a9c5346cf69bdbbb7fcae2702782064bcf3aab965dfd43ed5334665345e2152e876e856d21339fb4b76bc3a1e22f05cd956ffc7bf0dd3f70ef6814059e0b0f0d658ca79a87230ca8826cc1f1f2ad25b6c8fa293f6572c2bfd19b8715c25fbc5c56bba84619c68b9d712b0659a7996e613ceea3418d55475cf89656b04f15bfbc52f0ee4306aad4aff9436bb99cb1a9e842766d420d7fe66d6fc9ec11f8877ed4685286402c5e2b917c8bbd8a9e8edcd082a2cf2df3085d76b67bbe7428211b181afaba9ed33ec8936bd53a922d9352abb80ba07d6988ab5a418e0e520128cd88fcb0e91520f4b46d24b59ae323eae334e6cd7b017dce7735837347a412c9878ac9db6218c511e284d0d483611a0f2771f0fff50826d8f853aca1894b2621c4b5c7206c5245014421a15a5c0f35c12db5ca3231723249adc95ca68adb155c2c4c40e2c391a94bf8561bfd15608baf8706fa9e730ac24ae5c6dbce89261dc9a3f3f567bd8a8668361a58cc671c780ad781d2a313b935714259efa832a02efda9f35ea996453f958aa0618d1fc72a0855c7be4bd2577aa4ccc28d043aacd08f6149214ee4dcad9bb9cdd05c43ce4423a609e770f974bf00e5279eff500d22ee5b77cb95388215b49c414e6a08396a1007ff2657a84369fec963b297751302d99ffe12a609c40ff2eaf181f8d88d64187731cc1867c63eec5203e2fc9d48c0da5ec39bae8b1ea33e5db143a6c79feecac3a96aa29bbf44efccc4540640fed22c710bb4654d5a28f8b92f7f8eb50fd3cfda34eafd7d072f493cfa20c512ccb9d1003a6fa9b44f83895b5c1c516ed2e9ca2c5f422a386fbefa16ac290062b307525931cc2f0b6aa59d066490bd3fb0a92314722ea0fd1b88c9558a4ebe1fadff8e395ff0571035edd425f9c5b34915cf33ca3e625a2486237f057a097693bed33916bb5466e6597a864d4e2e4ff6", "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"}, [0x6, 0x3, 0xb0, 0x7, 0xfffffffc00000000, 0xfffffffffffffffc, 0x1, 0x7fff, 0x8000000000000000, 0x0, 0x78f, 0xff, 0x3, 0x3, 0x80000000, 0x7f, 0x4, 0x50ba, 0x8, 0xffffffffffffffff, 0xffffffff, 0x3, 0x9, 0x9, 0x4, 0xffffffffffffffc6, 0x1, 0x3, 0x129, 0xdbe, 0x4ab, 0x7fff, 0x7, 0x40, 0x9, 0x0, 0x9, 0x4, 0x5, 0x16e, 0xd, 0x5, 0x401, 0x4, 0x9, 0x4, 0x100000000, 0x7f, 0x8, 0x8, 0xaca7, 0x1000, 0x9, 0x4, 0x200, 0x7, 0x950, 0x2, 0x8001, 0x6, 0x5, 0x4, 0x40, 0xf05]}) r3 = socket$netlink(0x10, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000f00)=0xd0, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0/file0\x00'}) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000001080)=@buf={0xee, &(0x7f0000000f80)="721f621145aecbd8e1fd25b616ec0e2dd04f132ba458e3b123a151646aa35a795d09edf11cef4af4ad8c95ba68b842fce2e30b675ed0c5b01fd7f0a6e5b9c0d0c0199d5b6d94ff4ea4dc7bc0cc648c9eebc0fcde8654de0db0228ae50042ccbde6868cfd72ad7ba8e22957b8542307161ab8f1fea66bc90c9f3796a01823d6fb1537e837a291807b671c26c04767f5bdfe8c02b0ee2ca8b1d1c35ece8834a7dfd3fe6c739344d2d17188655a9c5b3abb8363b0038ded5a0b64d94cb9048f5531bf293c949a35e08aa1e7f9e0e880673265ef596f70eb9d7db4fa9b9f03d85bec5c7a94ba388d6b72347ca719985b"}) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f00000010c0)={{0x9, 0x2}, 0x59}, 0x10) connect$phonet_pipe(r4, &(0x7f0000001100)={0x23, 0x5, 0x43, 0x3c}, 0x10) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000001140)) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x40, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x48851) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000001500)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000014c0)={&(0x7f0000001380)={0x130, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f51f33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdb80bda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfa57d05}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73758c15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xe4, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c8b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51ed1ba0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6199}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10542635}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbe93a3e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x203c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13c332de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd87}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ff444a4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x595a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f82610}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1431}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79bcb99f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfce7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e65}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cf06193}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3577}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x813f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e97190f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x275d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d87d882}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xac54aa6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d975cda}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae9b}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) fcntl$getownex(r4, 0x10, &(0x7f0000001540)={0x0, 0x0}) r8 = syz_pidfd_open(r7, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000001640)={'syztnl0\x00', &(0x7f0000001580)={'syztnl2\x00', 0x0, 0x8000, 0x8, 0x4a83, 0x7, {{0x1b, 0x4, 0x0, 0x9, 0x6c, 0x64, 0x0, 0xfc, 0x29, 0x0, @remote, @multicast1, {[@noop, @timestamp={0x44, 0x18, 0x48, 0x0, 0x1, [0x101, 0x9, 0x1000, 0x5, 0x1]}, @timestamp={0x44, 0x28, 0xec, 0x0, 0x3, [0x3, 0x401, 0x5, 0x80, 0x10, 0x1, 0x5, 0x2, 0x1]}, @lsrr={0x83, 0x7, 0xb9, [@dev={0xac, 0x14, 0x14, 0x1e}]}, @cipso={0x86, 0xf, 0xffffffffffffffff, [{0x6, 0x9, "5105df41dc2926"}]}]}}}}}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001680)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0xd, 0x2, 0xa, 0x1ff, 0x2, r4, 0x1, '\x00', r9, r10, 0x4, 0x4, 0x1}, 0x50) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000001740)={0x0, @in6={{0xa, 0x4e20, 0x8001, @local, 0x88}}}, 0x84) sync() ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000001800)) ioctl$RNDZAPENTCNT(r10, 0x5204, &(0x7f0000001840)=0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000001880)={{{@in6=@ipv4, @in=@initdev}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f0000001980)=0xe8) sync() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r8, 0x4002f516, &(0x7f00000019c0)={0x2, 0xf1}) 294.21886ms ago: executing program 2 (id=637): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, 0x0, 0x40) 269.296895ms ago: executing program 3 (id=638): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000180)='2', 0x1, 0xe7c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x40}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e24, 0x81, @mcast2, 0x6}, @in6={0xa, 0x4e22, 0xb64b, @private1, 0x5}, @in6={0xa, 0x4e23, 0x7, @local, 0x3}]}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @tail_call]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x8, &(0x7f0000000040)=""/8, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94) 152.060664ms ago: executing program 1 (id=639): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21008, &(0x7f0000000280)={[{@init_itable_val}, {@errors_remount}]}, 0x1, 0x53a, &(0x7f0000002400)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xd8, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0xff, 'pim6reg1\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x4, 0x3, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x1, 0x8001, '\x00', 'syz1\x00', {0x288}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x5, 0x0, 0x0, 0x0, 0x5, 0x44510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x4, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) writev(0xffffffffffffffff, &(0x7f0000003540)=[{&(0x7f0000000280)="0911f769c057a9676a90860e", 0xc}, {&(0x7f0000000340)="9b9f181365644581f9727c10dbe26860477a89fa7725abc5c962d65eb752b383661a96fe8489fc43cf2bef0fdf8ae8cb", 0x30}, {&(0x7f0000000380)="04eb85f27ae40db14df9f83524bea47312648360e5ab66fe41", 0x19}, {&(0x7f0000001400)="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", 0xfab}], 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x3, 0x242, &(0x7f0000000300)="$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") socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000440), 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x607b, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 151.641044ms ago: executing program 3 (id=640): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0xff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[], 0x0) futex(0x0, 0x5, 0xf2, 0x0, &(0x7f0000000000)=0x3, 0x4ffffff) sendmsg$kcm(r0, 0x0, 0x4040800) clock_gettime(0x0, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r1 = getpgid(0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x48084) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r6 = getpid() ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x48800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x48, r9, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x10) 113.23325ms ago: executing program 2 (id=641): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x47b, &(0x7f0000000280)="$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") bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$kcm(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a0000008500000006"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) setreuid(0x0, 0xee00) keyctl$clear(0x5, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 65.957158ms ago: executing program 4 (id=642): unshare(0x24020400) socket$inet_udp(0x2, 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000380), 0x240000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x7) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket(0x9, 0x6, 0xfffffffe) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200)=0xfffffffffffffff9, 0x8) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040)) sendmsg$inet6(r8, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e23, 0x1, @local, 0x38a}, 0x5e, &(0x7f0000000b00)=[{&(0x7f0000000400)="80004b77efe55463", 0x8}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000000000000029000000", @ANYRES8=r8], 0x30}, 0x4) 39.738523ms ago: executing program 4 (id=643): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x11feb0, 0x8, 0x20da, 0x6, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0x10) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e", 0x27}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f3"], 0xfe1b) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001480)={'ip6gre0\x00', &(0x7f0000001400)={'syztnl1\x00', 0x0, 0x2d, 0xfe, 0xaa, 0x3, 0x30, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x20, 0x7, 0xbc07, 0x9}}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x83c}}, './file1\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24058041) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0xfc00, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 0s ago: executing program 3 (id=644): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x200441, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) (async) ioctl$RTC_AIE_ON(r0, 0x7001) socket$netlink(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x800) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) shmdt(0x0) (async) shmdt(0x0) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10, 0x40800) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000180)={@multicast1, @broadcast}, 0x8) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000001c0)=0x4909, 0x4) io_uring_setup(0x4d3b, &(0x7f0000000200)={0x0, 0xe674, 0x8, 0x0, 0xa5}) (async) r4 = io_uring_setup(0x4d3b, &(0x7f0000000200)={0x0, 0xe674, 0x8, 0x0, 0xa5}) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000280)={0xc30, 0x10}, 0x1) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f00000002c0)) (async) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000340)=[@ioring_restriction_sqe_flags_required={0x3, 0x10}, @ioring_restriction_sqe_flags_required={0x3, 0x14}, @ioring_restriction_sqe_flags_required={0x3, 0x1a}, @ioring_restriction_sqe_flags_allowed={0x2, 0xd}, @ioring_restriction_sqe_op={0x1, 0x8}, @ioring_restriction_sqe_flags_allowed={0x2, 0xd}, @ioring_restriction_sqe_op, @ioring_restriction_register_op={0x0, 0xd}, @ioring_restriction_sqe_flags_required], 0x9) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000340)=[@ioring_restriction_sqe_flags_required={0x3, 0x10}, @ioring_restriction_sqe_flags_required={0x3, 0x14}, @ioring_restriction_sqe_flags_required={0x3, 0x1a}, @ioring_restriction_sqe_flags_allowed={0x2, 0xd}, @ioring_restriction_sqe_op={0x1, 0x8}, @ioring_restriction_sqe_flags_allowed={0x2, 0xd}, @ioring_restriction_sqe_op, @ioring_restriction_register_op={0x0, 0xd}, @ioring_restriction_sqe_flags_required], 0x9) bpf$ENABLE_STATS(0x20, &(0x7f0000000400), 0x4) modify_ldt$write2(0x11, &(0x7f0000000440)={0xff, 0xffffffffffffffff, 0x400, 0x0, 0x1, 0x0, 0x1}, 0x10) (async) modify_ldt$write2(0x11, &(0x7f0000000440)={0xff, 0xffffffffffffffff, 0x400, 0x0, 0x1, 0x0, 0x1}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x5, 0xab04, {{0x6, 0x4, 0x3, 0x7, 0x18, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast2, @remote, {[@noop]}}}}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r1) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000540)={@remote, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x23}}, 0xc) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000580)={'TPROXY\x00'}, &(0x7f00000005c0)=0x1e) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000600)) (async) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000600)) r6 = mq_open(&(0x7f0000000640)='\x00', 0x40, 0x102, &(0x7f0000000680)={0x2, 0x3da0, 0x7, 0x1}) mq_notify(r6, &(0x7f00000007c0)={0x0, 0x13, 0x818c9766d6375e11, @thr={&(0x7f00000006c0)="f90ad5c8c5fbfb0b88c2dd074ee4a981248a603fb0757343083adffa1a1921c62c375f57f4753f5a852d9794739ad61fea2856e87544c1f0e874f1beca8040059930c33f43bfd0fd4928b4d21cc869319d41920264de9b3d3d2f74ebb2ad6a78a6e55417244a91b47aac1337302e88f60941000a9696d877788a2e62b6d2bd48149de6334dfddf1dd300241b5f65d0d63dda702497c6abad37ac77cc048d7935e26767", &(0x7f0000000780)="f683090ae75e3d68824c020c595d1fd7e335782dd49099bfcf476d305a0a5715dc75f9800c9736dc3ba7b0cbe29267293124"}}) (async) mq_notify(r6, &(0x7f00000007c0)={0x0, 0x13, 0x818c9766d6375e11, @thr={&(0x7f00000006c0)="f90ad5c8c5fbfb0b88c2dd074ee4a981248a603fb0757343083adffa1a1921c62c375f57f4753f5a852d9794739ad61fea2856e87544c1f0e874f1beca8040059930c33f43bfd0fd4928b4d21cc869319d41920264de9b3d3d2f74ebb2ad6a78a6e55417244a91b47aac1337302e88f60941000a9696d877788a2e62b6d2bd48149de6334dfddf1dd300241b5f65d0d63dda702497c6abad37ac77cc048d7935e26767", &(0x7f0000000780)="f683090ae75e3d68824c020c595d1fd7e335782dd49099bfcf476d305a0a5715dc75f9800c9736dc3ba7b0cbe29267293124"}}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000800)='veth0\x00', 0x10) io_uring_register$IORING_REGISTER_MEM_REGION(r4, 0x22, &(0x7f0000000980)={&(0x7f0000000940)={&(0x7f0000000840)="c628b8ee25c346a512303a4830108b967807f8f7eb594b0d035b02aa8dfcb29c22da1d8add1b48f78c06b3ac013f7218f52d2a8a82ac259dfd394ce4ce414ab4626fd46497fce14ae7b7b81b4c7fab3c9680f38183c3f485e2bc60c3c0fca1e14f0d0eeda94ec642c8de61b9da8ca93546eadb867e6b917d1ed50173366f6cb821f93716ca03081abda6458f0eccebb980a5aa2d83d81c1ee23b5f82628d89b326bf937ac11032932c8191030a8e30e7b70a6c0d1543efadcb7191bf9541ab4fd13f06d8a0bd178203157642839e4043446ad9f33b39a63bd33271c69dce87f0b25a51c9d5", 0xe5, 0x0, 0x5, 0xa70}}, 0x1) (async) io_uring_register$IORING_REGISTER_MEM_REGION(r4, 0x22, &(0x7f0000000980)={&(0x7f0000000940)={&(0x7f0000000840)="c628b8ee25c346a512303a4830108b967807f8f7eb594b0d035b02aa8dfcb29c22da1d8add1b48f78c06b3ac013f7218f52d2a8a82ac259dfd394ce4ce414ab4626fd46497fce14ae7b7b81b4c7fab3c9680f38183c3f485e2bc60c3c0fca1e14f0d0eeda94ec642c8de61b9da8ca93546eadb867e6b917d1ed50173366f6cb821f93716ca03081abda6458f0eccebb980a5aa2d83d81c1ee23b5f82628d89b326bf937ac11032932c8191030a8e30e7b70a6c0d1543efadcb7191bf9541ab4fd13f06d8a0bd178203157642839e4043446ad9f33b39a63bd33271c69dce87f0b25a51c9d5", 0xe5, 0x0, 0x5, 0xa70}}, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000009c0)={0x0}, &(0x7f0000000a00)=0xc) ptrace$ARCH_GET_FS(0x1e, r7, &(0x7f0000000a40), 0x1003) kernel console output (not intermixed with test programs): -fs: dax option not supported [ 43.463080][ T3882] xt_hashlimit: size too large, truncated to 1048576 [ 43.909994][ T3890] netlink: 'syz.2.128': attribute type 1 has an invalid length. [ 44.079496][ T3892] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.086807][ T3892] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.605279][ T3896] loop1: detected capacity change from 0 to 1764 [ 44.894662][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 44.894714][ T28] audit: type=1400 audit(1776244712.712:7404): avc: denied { read } for pid=3897 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.948202][ T3892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.021401][ T3892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.101138][ T28] audit: type=1400 audit(1776244712.792:7405): avc: denied { write } for pid=3897 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 45.218089][ T3888] syz.3.127 (3888) used greatest stack depth: 8872 bytes left [ 45.307088][ T28] audit: type=1400 audit(1776244712.802:7406): avc: denied { create } for pid=3897 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 45.429109][ T3898] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.544800][ T3898] bridge_slave_0 (unregistering): left allmulticast mode [ 45.641894][ T28] audit: type=1400 audit(1776244712.802:7407): avc: denied { write } for pid=3897 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 45.675447][ T3905] mmap: syz.4.132 (3905) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.768801][ T3898] bridge_slave_0 (unregistering): left promiscuous mode [ 45.776862][ T3898] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.887348][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.910129][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.934498][ T3908] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 45.956990][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.975883][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.985830][ T28] audit: type=1400 audit(1776244713.352:7408): avc: denied { mount } for pid=3893 comm="syz.1.129" name="/" dev="loop1" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 46.008860][ T1030] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 46.016808][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 46.025127][ T28] audit: type=1400 audit(1776244713.382:7409): avc: denied { create } for pid=3893 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 46.047725][ T28] audit: type=1400 audit(1776244713.392:7410): avc: denied { write } for pid=3893 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 46.069260][ T28] audit: type=1400 audit(1776244713.402:7411): avc: denied { accept } for pid=3893 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 46.090174][ T28] audit: type=1400 audit(1776244713.412:7412): avc: denied { kexec_image_load } for pid=3893 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 46.111806][ T28] audit: type=1400 audit(1776244713.622:7413): avc: denied { bpf } for pid=3904 comm="syz.4.132" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.247909][ T3918] loop3: detected capacity change from 0 to 512 [ 46.282261][ T3918] EXT4-fs: dax option not supported [ 46.372737][ T3921] loop1: detected capacity change from 0 to 4096 [ 46.421125][ T3921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.438787][ T3929] can0: slcan on ttyS3. [ 46.446874][ T3923] loop3: detected capacity change from 0 to 512 [ 46.472150][ T3931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'. [ 46.487528][ T3929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'. [ 46.529091][ T3923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.544016][ T3929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.551347][ T3923] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.593685][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.627499][ T3929] can0 (unregistered): slcan off ttyS3. [ 46.637507][ T1030] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 46.655664][ T3952] loop2: detected capacity change from 0 to 512 [ 46.677605][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.704363][ T3952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.728523][ T3952] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.759917][ T3959] capability: warning: `syz.4.146' uses 32-bit capabilities (legacy support in use) [ 46.790511][ T3966] loop1: detected capacity change from 0 to 4096 [ 46.804977][ T3973] loop0: detected capacity change from 0 to 512 [ 46.834886][ T3973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.847772][ T3973] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.874992][ T3966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.925723][ T3987] loop3: detected capacity change from 0 to 512 [ 46.933068][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.956563][ T3973] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #2: comm syz.0.149: corrupted inode contents [ 46.960385][ T3987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.981700][ T3973] EXT4-fs error (device loop0): ext4_dirty_inode:6497: inode #2: comm syz.0.149: mark_inode_dirty error [ 46.981793][ T3987] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.993562][ T3973] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #2: comm syz.0.149: corrupted inode contents [ 47.016563][ T3973] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.149: mark_inode_dirty error [ 47.027949][ T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 47.049543][ T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 47.192831][ T4005] loop2: detected capacity change from 0 to 512 [ 47.209730][ T4005] EXT4-fs (loop2): Invalid log cluster size: 4194304000 [ 47.219031][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.300888][ T4016] syzkaller1: entered promiscuous mode [ 47.306598][ T4016] syzkaller1: entered allmulticast mode [ 47.389424][ T1030] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 47.423265][ T4027] netlink: 68 bytes leftover after parsing attributes in process `syz.4.159'. [ 47.456308][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.518352][ T4033] loop0: detected capacity change from 0 to 4096 [ 47.534365][ T4033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.580708][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.660412][ T4047] netlink: 100 bytes leftover after parsing attributes in process `syz.1.166'. [ 47.669826][ T4047] tc_dump_action: action bad kind [ 47.912168][ T4057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.925142][ T4057] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.955174][ T4057] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #2: comm syz.0.170: corrupted inode contents [ 47.967630][ T4057] EXT4-fs error (device loop0): ext4_dirty_inode:6497: inode #2: comm syz.0.170: mark_inode_dirty error [ 47.986356][ T4057] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #2: comm syz.0.170: corrupted inode contents [ 47.999108][ T4057] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.170: mark_inode_dirty error [ 48.099931][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.219258][ T4067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.247379][ T4067] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.326558][ T4074] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.334633][ T4076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.175'. [ 48.355845][ T4074] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.397597][ T4074] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.410811][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.422158][ T4076] bridge1: port 1(veth0_to_bond) entered blocking state [ 48.442376][ T4076] bridge1: port 1(veth0_to_bond) entered disabled state [ 48.450215][ T4076] veth0_to_bond: entered allmulticast mode [ 48.456806][ T4074] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.174: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 48.493574][ T4076] veth0_to_bond: entered promiscuous mode [ 48.500218][ T4074] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 48.502974][ T4074] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.174: couldn't read orphan inode 11 (err -117) [ 48.505072][ T4077] vlan2: entered allmulticast mode [ 48.512259][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 48.512277][ C0] EXT4-fs (loop2): initial error at time 2000000001: ext4_ext_check_inode:521: inode 11 [ 48.545781][ C0] EXT4-fs (loop2): last error at time 2000000001: ext4_ext_check_inode:521: inode 11 [ 48.545956][ T4077] ip6gretap0: entered allmulticast mode [ 48.561560][ T4077] bridge1: port 2(vlan2) entered blocking state [ 48.568439][ T4077] bridge1: port 2(vlan2) entered disabled state [ 48.575596][ T4077] vlan2: entered promiscuous mode [ 48.580964][ T4077] ip6gretap0: entered promiscuous mode [ 48.588300][ T4074] loop2: lost filesystem error report for type 5 error -117 [ 48.621342][ T4074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.652640][ T4080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.176'. [ 48.667696][ T4080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4080 comm=syz.0.176 [ 48.752013][ T4074] EXT4-fs (loop2): shut down requested (1) [ 48.767083][ T4074] random: crng reseeded on system resumption [ 48.837722][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.870640][ T4090] syz_tun: entered allmulticast mode [ 49.161010][ T4095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.334468][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.669938][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.724280][ T4100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.182'. [ 49.776483][ T4100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4100 comm=syz.2.182 [ 49.921579][ T4109] set_capacity_and_notify: 5 callbacks suppressed [ 49.921600][ T4109] loop0: detected capacity change from 0 to 512 [ 49.942103][ T4111] loop2: detected capacity change from 0 to 512 [ 49.976773][ T4111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.989841][ T4111] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.018054][ T4111] EXT4-fs error (device loop2): ext4_do_update_inode:5604: inode #2: comm syz.2.186: corrupted inode contents [ 50.030769][ T4111] EXT4-fs error (device loop2): ext4_dirty_inode:6497: inode #2: comm syz.2.186: mark_inode_dirty error [ 50.042519][ T4111] EXT4-fs error (device loop2): ext4_do_update_inode:5604: inode #2: comm syz.2.186: corrupted inode contents [ 50.054862][ T4111] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.186: mark_inode_dirty error [ 50.099003][ T4118] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 50.299994][ T4109] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 50.375140][ T4109] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.184: bg 0: block 104: invalid block bitmap [ 50.416438][ T4109] loop0: lost filesystem error report for type 5 error -117 [ 50.417353][ T4109] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 50.434061][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 50.434093][ C1] EXT4-fs (loop0): initial error at time 2000000002: ext4_validate_block_bitmap:432 [ 50.434120][ C1] EXT4-fs (loop0): last error at time 2000000002: ext4_validate_block_bitmap:432 [ 50.484772][ T4109] loop0: lost filesystem error report for type 5 error -117 [ 50.484958][ T4109] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.184: invalid indirect mapped block 1 (level 1) [ 50.507232][ T4109] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.507556][ T4109] EXT4-fs (loop0): 1 truncate cleaned up [ 50.537940][ T4109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.579651][ T4109] Illegal XDP return value 77 on prog (id 36) dev N/A, expect packet loss! [ 50.589417][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.599187][ T4126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.189'. [ 50.625422][ T4126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4126 comm=syz.4.189 [ 50.730223][ T28] kauditd_printk_skb: 537 callbacks suppressed [ 50.730240][ T28] audit: type=1400 audit(2000000003.300:7951): avc: denied { getopt } for pid=4131 comm="syz.2.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.818659][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.830831][ T4132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.190'. [ 50.883632][ T4144] loop0: detected capacity change from 0 to 512 [ 50.938103][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 50.978785][ T4144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.984171][ T4147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.196'. [ 50.991678][ T4144] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.018000][ T4147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4147 comm=syz.2.196 [ 51.061252][ T4155] loop2: detected capacity change from 0 to 512 [ 51.069177][ T4155] EXT4-fs: Ignoring removed bh option [ 51.080011][ T4155] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.089972][ T4155] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 51.101372][ T4155] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 51.112735][ T4155] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 51.121601][ T4155] System zones: 0-2, 18-18, 34-35 [ 51.127480][ T4155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.142954][ T28] audit: type=1400 audit(2000000003.720:7952): avc: denied { bind } for pid=4154 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.155266][ T4155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.199'. [ 51.234416][ T4158] EXT4-fs error (device loop2): ext4_generic_delete_entry:2666: inode #2: block 3: comm syz.2.199: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 51.258309][ T4158] EXT4-fs error (device loop2) in ext4_delete_entry:2737: Corrupt filesystem [ 51.268580][ T4158] EXT4-fs warning (device loop2): ext4_rename_delete:3729: inode #2: comm syz.2.199: Deleting old file: nlink 4, error=-117 [ 51.433345][ T4162] hub 8-0:1.0: USB hub found [ 51.438571][ T4162] hub 8-0:1.0: 8 ports detected [ 51.647378][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.705438][ T4164] loop2: detected capacity change from 0 to 512 [ 51.735822][ T4164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.748901][ T4164] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.785357][ T4164] EXT4-fs error (device loop2): ext4_do_update_inode:5604: inode #2: comm syz.2.201: corrupted inode contents [ 51.798954][ T4164] EXT4-fs error (device loop2): ext4_dirty_inode:6497: inode #2: comm syz.2.201: mark_inode_dirty error [ 51.811272][ T4164] EXT4-fs error (device loop2): ext4_do_update_inode:5604: inode #2: comm syz.2.201: corrupted inode contents [ 51.824718][ T4164] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.201: mark_inode_dirty error [ 51.858265][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.996727][ T4169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.203'. [ 52.019511][ T4169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4169 comm=syz.4.203 [ 52.134756][ T28] audit: type=1400 audit(2000000004.700:7953): avc: denied { connect } for pid=4173 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.179004][ T4175] loop0: detected capacity change from 0 to 4096 [ 52.209201][ T4175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.288629][ T28] audit: type=1400 audit(2000000004.850:7954): avc: denied { add_name } for pid=4172 comm="syz.0.202" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.339551][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.383511][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.425099][ T28] audit: type=1400 audit(2000000004.990:7955): avc: denied { bind } for pid=4189 comm="syz.0.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.493451][ T4197] loop3: detected capacity change from 0 to 512 [ 52.500558][ T28] audit: type=1400 audit(2000000005.010:7956): avc: denied { write } for pid=4189 comm="syz.0.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.508296][ T4199] netlink: 136 bytes leftover after parsing attributes in process `syz.4.213'. [ 52.580473][ T28] audit: type=1400 audit(2000000005.040:7957): avc: denied { ioctl } for pid=4190 comm="syz.2.208" path="socket:[7328]" dev="sockfs" ino=7328 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.607867][ T4199] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 52.664425][ T4197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.679215][ T4197] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.693982][ T4183] loop1: detected capacity change from 0 to 512 [ 52.703463][ T28] audit: type=1400 audit(2000000005.280:7958): avc: denied { mounton } for pid=4182 comm="syz.1.207" path="/bus" dev="ramfs" ino=6815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 52.863047][ T4214] loop0: detected capacity change from 0 to 512 [ 52.911309][ T28] audit: type=1400 audit(2000000005.360:7959): avc: denied { setopt } for pid=4210 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.945143][ T4214] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.961135][ T4183] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.986456][ T4215] netlink: 'syz.4.216': attribute type 4 has an invalid length. [ 53.016952][ T4214] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c028, mo2=0002] [ 53.027046][ T4214] System zones: 1-12 [ 53.040364][ T4214] EXT4-fs (loop0): 1 truncate cleaned up [ 53.052811][ T4214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.109219][ T28] audit: type=1400 audit(2000000005.670:7960): avc: denied { ioctl } for pid=4202 comm="syz.0.214" path="/43/file1/file1" dev="loop0" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.145257][ T4215] netlink: 152 bytes leftover after parsing attributes in process `syz.4.216'. [ 53.169152][ T4183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.176640][ T4215] .`: renamed from bond0 (while UP) [ 53.190980][ T4183] ext4 filesystem being mounted at /bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.202804][ T4183] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.443157][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.468319][ T4229] loop2: detected capacity change from 0 to 4096 [ 53.511475][ T4232] program syz.0.220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.552577][ T4229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.600675][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.687976][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.856901][ T4244] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 53.877423][ T4244] infiniband sy1: RDMA CMA: cma_listen_on_dev, error -98 [ 54.240690][ T4259] syz.3.225 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 54.501186][ T4259] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.225: inode has both inline data and extents flags [ 54.520940][ T4259] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.522597][ T4259] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.225: couldn't read orphan inode 15 (err -117) [ 54.533155][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 54.533296][ C0] EXT4-fs (loop3): initial error at time 2000000007: ext4_orphan_get:1397: inode 15 [ 54.533466][ C0] EXT4-fs (loop3): last error at time 2000000007: ext4_orphan_get:1397: inode 15 [ 54.580592][ T4259] loop3: lost filesystem error report for type 5 error -117 [ 54.599205][ T4259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.707820][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.779146][ T4282] syzkaller0: entered promiscuous mode [ 54.785369][ T4282] syzkaller0: entered allmulticast mode [ 54.867218][ T4290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'. [ 54.880039][ T4290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'. [ 54.910958][ T4286] hub 8-0:1.0: USB hub found [ 54.937708][ T4286] hub 8-0:1.0: 8 ports detected [ 55.094519][ T4303] netlink: 348 bytes leftover after parsing attributes in process `syz.3.245'. [ 55.104012][ T4303] netlink: 348 bytes leftover after parsing attributes in process `syz.3.245'. [ 55.117559][ T4296] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 55.155417][ T4296] netlink: 'syz.0.243': attribute type 1 has an invalid length. [ 55.185676][ T4296] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 55.198067][ T4296] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 55.234160][ T4307] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 55.269095][ T4308] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.291868][ T4308] xt_connbytes: Forcing CT accounting to be enabled [ 55.308259][ T4308] set_capacity_and_notify: 1 callbacks suppressed [ 55.308442][ T4308] loop3: detected capacity change from 0 to 2048 [ 55.321979][ T4308] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.347542][ T4308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.965134][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 55.965151][ T28] audit: type=1400 audit(2000000008.490:7971): avc: denied { getopt } for pid=4315 comm="syz.0.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 56.321851][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.509465][ T4327] macvtap1: entered promiscuous mode [ 56.520736][ T4327] macvtap1: entered allmulticast mode [ 56.759586][ T4329] team0: Device gtp0 is of different type [ 56.807166][ T4333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 56.820345][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.838594][ T28] audit: type=1400 audit(2000000009.320:7972): avc: denied { ioctl } for pid=4330 comm="syz.3.253" path="socket:[6997]" dev="sockfs" ino=6997 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.924312][ T4325] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.477455][ T4335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'. [ 57.577881][ T4343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.259'. [ 57.613489][ T4343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4343 comm=syz.3.259 [ 57.647427][ T4347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4347 comm=syz.4.258 [ 57.692225][ T4346] hub 8-0:1.0: USB hub found [ 57.705310][ T4346] hub 8-0:1.0: 8 ports detected [ 58.174777][ T28] audit: type=1400 audit(2000000010.740:7973): avc: denied { connect } for pid=4361 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.242692][ T28] audit: type=1400 audit(2000000010.760:7974): avc: denied { setopt } for pid=4361 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.270898][ T4358] netlink: 48 bytes leftover after parsing attributes in process `syz.4.265'. [ 58.398117][ T28] audit: type=1400 audit(2000000010.940:7975): avc: denied { read } for pid=4361 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.495092][ T28] audit: type=1400 audit(2000000010.970:7976): avc: denied { ioctl } for pid=4361 comm="syz.3.267" path="socket:[7055]" dev="sockfs" ino=7055 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.617340][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 58.729307][ T4368] loop1: detected capacity change from 0 to 512 [ 58.765667][ T4368] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 58.804009][ T4362] loop3: detected capacity change from 0 to 128 [ 58.852357][ T4368] EXT4-fs (loop1): 1 truncate cleaned up [ 58.864620][ T4368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.205570][ T28] audit: type=1400 audit(2000000011.540:7977): avc: denied { read write } for pid=4371 comm="syz.0.269" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 59.230650][ T28] audit: type=1400 audit(2000000011.540:7978): avc: denied { open } for pid=4371 comm="syz.0.269" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 60.428816][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.440960][ T4380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4380 comm=syz.3.272 [ 60.498754][ T28] audit: type=1400 audit(2000000013.060:7979): avc: denied { write } for pid=4388 comm="syz.2.274" name="ipv6_route" dev="proc" ino=4026532946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 60.605222][ T4398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 60.638191][ T4391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.273'. [ 60.678940][ T4391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4391 comm=syz.1.273 [ 60.781502][ T28] audit: type=1400 audit(2000000013.350:7980): avc: denied { map } for pid=4410 comm="syz.1.280" path="socket:[7867]" dev="sockfs" ino=7867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.474502][ T4418] loop1: detected capacity change from 0 to 128 [ 61.489473][ T4418] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.509728][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 61.509750][ T28] audit: type=1400 audit(2000000014.070:7982): avc: denied { lock } for pid=4410 comm="syz.1.280" path="socket:[7868]" dev="sockfs" ino=7868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 61.971982][ T4424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.283'. [ 62.013209][ T4433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.287'. [ 62.016688][ T4424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4424 comm=syz.0.283 [ 62.043694][ T4433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.287'. [ 62.069194][ T28] audit: type=1400 audit(2000000014.640:7983): avc: denied { read } for pid=4434 comm="syz.1.288" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 62.105515][ T28] audit: type=1400 audit(2000000014.640:7984): avc: denied { open } for pid=4434 comm="syz.1.288" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 62.106892][ T2086] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.144101][ T28] audit: type=1400 audit(2000000014.640:7985): avc: denied { ioctl } for pid=4434 comm="syz.1.288" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 62.182163][ T2086] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.194643][ T28] audit: type=1400 audit(2000000014.760:7986): avc: denied { checkpoint_restore } for pid=4414 comm="syz.3.281" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.237169][ T4437] netlink: 340 bytes leftover after parsing attributes in process `syz.2.289'. [ 62.255585][ T4440] syzkaller0: entered promiscuous mode [ 62.278734][ T4440] syzkaller0: entered allmulticast mode [ 62.301061][ T2086] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.328836][ T2086] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.339999][ T28] audit: type=1400 audit(2000000014.800:7987): avc: denied { write } for pid=4436 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 62.360179][ T28] audit: type=1400 audit(2000000014.860:7988): avc: denied { read } for pid=4441 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.391400][ T4439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.290'. [ 62.406938][ T4439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4439 comm=syz.0.290 [ 62.599555][ T4456] loop0: detected capacity change from 0 to 256 [ 62.629958][ T4455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.294'. [ 62.933126][ T4459] loop3: detected capacity change from 0 to 512 [ 62.981247][ T4459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.995165][ T4459] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.174249][ T4459] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #2: comm syz.3.295: corrupted inode contents [ 63.186966][ T4459] EXT4-fs error (device loop3): ext4_dirty_inode:6497: inode #2: comm syz.3.295: mark_inode_dirty error [ 63.200019][ T4459] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #2: comm syz.3.295: corrupted inode contents [ 63.212890][ T4459] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.295: mark_inode_dirty error [ 63.490420][ T4455] loop2: detected capacity change from 0 to 1024 [ 63.510733][ T4455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.525792][ T4470] netlink: 'syz.4.297': attribute type 62 has an invalid length. [ 63.582136][ T4455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.620281][ T28] audit: type=1400 audit(2000000016.190:7989): avc: denied { name_bind } for pid=4475 comm="syz.4.299" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 63.987632][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.090526][ T4485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.300'. [ 64.107147][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.118089][ T4485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4485 comm=syz.1.300 [ 64.139114][ T4480] FAULT_INJECTION: forcing a failure. [ 64.139114][ T4480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.152605][ T4480] CPU: 0 UID: 0 PID: 4480 Comm: syz.2.298 Not tainted syzkaller #0 PREEMPT(full) [ 64.152686][ T4480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 64.152699][ T4480] Call Trace: [ 64.152707][ T4480] [ 64.152715][ T4480] __dump_stack+0x1d/0x30 [ 64.152761][ T4480] dump_stack_lvl+0x95/0xd0 [ 64.152783][ T4480] dump_stack+0x15/0x1b [ 64.152799][ T4480] should_fail_ex+0x263/0x280 [ 64.152818][ T4480] should_fail+0xb/0x20 [ 64.152835][ T4480] should_fail_usercopy+0x1a/0x20 [ 64.152906][ T4480] _copy_from_user+0x1c/0xb0 [ 64.152928][ T4480] ___sys_sendmsg+0xc1/0x1e0 [ 64.152976][ T4480] __x64_sys_sendmsg+0xd4/0x160 [ 64.153005][ T4480] x64_sys_call+0x194c/0x3020 [ 64.153028][ T4480] do_syscall_64+0x12c/0x3b0 [ 64.153092][ T4480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.153189][ T4480] RIP: 0033:0x7ff02de0c819 [ 64.153203][ T4480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.153216][ T4480] RSP: 002b:00007ff02c867028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.153232][ T4480] RAX: ffffffffffffffda RBX: 00007ff02e085fa0 RCX: 00007ff02de0c819 [ 64.153321][ T4480] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000004 [ 64.153333][ T4480] RBP: 00007ff02c867090 R08: 0000000000000000 R09: 0000000000000000 [ 64.153346][ T4480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.153358][ T4480] R13: 00007ff02e086038 R14: 00007ff02e085fa0 R15: 00007fffda5f1a58 [ 64.153446][ T4480] [ 64.496782][ T4491] netlink: 16 bytes leftover after parsing attributes in process `syz.4.305'. [ 64.529011][ T28] audit: type=1400 audit(2000000016.970:7990): avc: denied { create } for pid=4490 comm="syz.4.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 65.399650][ T4500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4500 comm=syz.3.304 [ 65.800868][ T4513] loop3: detected capacity change from 0 to 128 [ 65.823402][ T4513] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.876042][ T4513] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.902134][ T4513] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 65.913651][ T4513] FAT-fs (loop3): Filesystem has been set read-only [ 66.257480][ T28] audit: type=1400 audit(2000000018.820:7991): avc: denied { bind } for pid=4519 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.356949][ T4524] loop3: detected capacity change from 0 to 512 [ 66.390139][ T4524] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.314: invalid indirect mapped block 256 (level 2) [ 66.418742][ T4524] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 66.419182][ T4524] EXT4-fs (loop3): 2 truncates cleaned up [ 66.428402][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 66.428442][ C0] EXT4-fs (loop3): initial error at time 2000000018: ext4_free_branches:1023: inode 11 [ 66.428473][ C0] EXT4-fs (loop3): last error at time 2000000018: ext4_free_branches:1023: inode 11 [ 66.507955][ T4527] __nla_validate_parse: 1 callbacks suppressed [ 66.507977][ T4527] netlink: 14 bytes leftover after parsing attributes in process `syz.0.315'. [ 66.524390][ T4524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.551665][ T28] audit: type=1400 audit(2000000019.120:7992): avc: denied { bind } for pid=4523 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.573390][ T4527] syz_tun (unregistering): left allmulticast mode [ 66.582986][ T28] audit: type=1400 audit(2000000019.120:7993): avc: denied { node_bind } for pid=4523 comm="syz.3.314" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 66.646383][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.667983][ T4529] netlink: 44 bytes leftover after parsing attributes in process `syz.4.316'. [ 66.710665][ T4529] netlink: 43 bytes leftover after parsing attributes in process `syz.4.316'. [ 66.908390][ T4537] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=60248 sclass=netlink_xfrm_socket pid=4537 comm=syz.1.308 [ 66.945213][ T28] audit: type=1400 audit(2000000019.490:7994): avc: denied { create } for pid=4506 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 67.005563][ T4529] netlink: 'syz.4.316': attribute type 6 has an invalid length. [ 67.126454][ T28] audit: type=1400 audit(2000000019.500:7995): avc: denied { write } for pid=4506 comm="syz.1.308" path="socket:[8253]" dev="sockfs" ino=8253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 67.156760][ T4529] netlink: 'syz.4.316': attribute type 5 has an invalid length. [ 67.187924][ T4529] netlink: 43 bytes leftover after parsing attributes in process `syz.4.316'. [ 67.398396][ T4541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.320'. [ 67.438848][ T4541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4541 comm=syz.1.320 [ 67.622399][ T4570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4570 comm=syz.0.323 [ 68.234465][ T4552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 68.318970][ T28] audit: type=1400 audit(2000000020.890:7996): avc: denied { mount } for pid=4572 comm="syz.0.329" name="/" dev="configfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 68.354277][ T4573] loop0: detected capacity change from 0 to 2048 [ 68.386250][ T28] audit: type=1400 audit(2000000020.920:7997): avc: denied { search } for pid=4572 comm="syz.0.329" name="/" dev="configfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.449584][ T4576] loop3: detected capacity change from 0 to 512 [ 68.471887][ T4576] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 68.492477][ T28] audit: type=1400 audit(2000000020.920:7998): avc: denied { search } for pid=4572 comm="syz.0.329" name="/" dev="configfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.537738][ T28] audit: type=1400 audit(2000000020.920:7999): avc: denied { read open } for pid=4572 comm="syz.0.329" path="/" dev="configfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.544612][ T4576] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 68.562293][ T28] audit: type=1400 audit(2000000020.950:8000): avc: denied { map } for pid=4571 comm="syz.1.328" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 68.587271][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 68.600665][ T28] audit: type=1400 audit(2000000020.990:8001): avc: denied { add_name } for pid=4572 comm="syz.0.329" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.607506][ C0] EXT4-fs (loop3): initial error at time 2000000021: mb_free_blocks:2049: inode 11: block 64 [ 68.642692][ C0] EXT4-fs (loop3): last error at time 2000000021: mb_free_blocks:2049: inode 11: block 64 [ 68.647344][ T4576] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #11: comm syz.3.330: corrupted inode contents [ 68.665647][ T4590] loop1: detected capacity change from 0 to 512 [ 68.673382][ T4576] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.673531][ T4576] EXT4-fs error (device loop3): ext4_dirty_inode:6497: inode #11: comm syz.3.330: mark_inode_dirty error [ 68.720516][ T4590] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.725916][ T4576] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.736526][ T4576] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.330: invalid indirect mapped block 1 (level 1) [ 68.760798][ T4576] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.760992][ T4576] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #11: comm syz.3.330: corrupted inode contents [ 68.783138][ T4576] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.783321][ T4576] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 68.801696][ T4576] loop3: lost filesystem error report for type 5 error -117 [ 68.801890][ T4576] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #11: comm syz.3.330: corrupted inode contents [ 68.832915][ T4590] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.333: corrupted xattr entries [ 68.885112][ T4590] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.885459][ T4590] EXT4-fs (loop1): 1 truncate cleaned up [ 68.895052][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 68.895069][ C0] EXT4-fs (loop1): initial error at time 2000000021: xattr_find_entry:337: inode 15 [ 68.895092][ C0] EXT4-fs (loop1): last error at time 2000000021: xattr_find_entry:337: inode 15 [ 68.927294][ T4576] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.933731][ T4576] EXT4-fs error (device loop3): ext4_truncate:4604: inode #11: comm syz.3.330: mark_inode_dirty error [ 68.977433][ T4576] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.977771][ T4576] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 69.017327][ T4576] loop3: lost filesystem error report for type 5 error -117 [ 69.017598][ T4576] EXT4-fs (loop3): 1 truncate cleaned up [ 69.057496][ T4576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.092283][ T4590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.169976][ T4590] EXT4-fs error (device loop1): ext4_iget_extra_inode:5042: inode #15: comm syz.1.333: corrupted in-inode xattr: e_name out of bounds [ 69.222227][ T4576] EXT4-fs (loop3): shut down requested (0) [ 69.243402][ T4576] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 69.262629][ T4576] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 69.290947][ T4576] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 69.319780][ T4576] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 69.346486][ T4576] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 69.375862][ T4576] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 69.444587][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.997641][ T3423] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 70.177619][ T4605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4605 comm=syz.3.339 [ 70.318656][ T4609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 70.498196][ T4617] loop3: detected capacity change from 0 to 512 [ 70.530455][ T4617] EXT4-fs: dax option not supported [ 70.777446][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.835494][ T4620] loop0: detected capacity change from 0 to 1024 [ 70.857849][ T4620] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.874657][ T4620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.981686][ T4624] EXT4-fs error (device loop0): ext4_iget_extra_inode:5042: inode #15: comm syz.0.345: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 71.097363][ T3423] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 71.121035][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.235617][ T4630] 9pnet_fd: Insufficient options for proto=fd [ 71.302508][ T4630] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 71.564772][ T4642] Cannot find add_set index 0 as target [ 71.732554][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 71.732603][ T28] audit: type=1400 audit(2000000024.300:8014): avc: denied { write } for pid=4637 comm="syz.2.350" name="file0" dev="tmpfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 71.846210][ T4646] loop2: detected capacity change from 0 to 256 [ 71.867948][ T28] audit: type=1400 audit(2000000024.330:8015): avc: denied { open } for pid=4637 comm="syz.2.350" path="/54/file0" dev="tmpfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 71.896910][ T4646] vfat: Unknown parameter '' [ 72.249561][ T28] audit: type=1400 audit(2000000024.340:8016): avc: denied { ioctl } for pid=4637 comm="syz.2.350" path="/54/file0" dev="tmpfs" ino=307 ioctlcmd=0x1262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 72.307342][ T28] audit: type=1400 audit(2000000024.580:8017): avc: denied { unlink } for pid=3317 comm="syz-executor" name="cpuset.effective_cpus" dev="tmpfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 72.344049][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.540009][ T28] audit: type=1400 audit(2000000025.060:8018): avc: denied { accept } for pid=4653 comm="syz.3.354" lport=53994 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.627213][ T28] audit: type=1400 audit(2000000025.060:8019): avc: denied { setopt } for pid=4653 comm="syz.3.354" lport=53994 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 72.742737][ T4660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4660 comm=syz.2.357 [ 72.768240][ T4662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4662 comm=syz.3.358 [ 72.952321][ T4672] loop3: detected capacity change from 0 to 512 [ 72.973633][ T4672] EXT4-fs: dax option not supported [ 73.045226][ T4673] hub 8-0:1.0: USB hub found [ 73.102326][ T28] audit: type=1400 audit(2000000025.670:8020): avc: denied { mounton } for pid=4674 comm="syz.1.353" path="/file0" dev="ramfs" ino=8651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 73.133263][ T4673] hub 8-0:1.0: 8 ports detected [ 73.154649][ T28] audit: type=1400 audit(2000000025.720:8021): avc: denied { getattr } for pid=4674 comm="syz.1.353" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=8653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 73.218379][ T4682] x_tables: duplicate underflow at hook 2 [ 73.273882][ T4687] netlink: 136 bytes leftover after parsing attributes in process `syz.4.364'. [ 73.303712][ T28] audit: type=1400 audit(2000000025.860:8022): avc: denied { create } for pid=4679 comm="syz.4.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 73.601556][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'. [ 73.726792][ T4708] loop0: detected capacity change from 0 to 512 [ 73.751357][ T4708] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.775297][ T4708] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.818016][ T4708] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.865291][ T4708] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.370: Allocating blocks 41-42 which overlap fs metadata [ 73.953781][ T4708] loop0: lost filesystem error report for type 5 error -117 [ 73.955466][ T4708] EXT4-fs (loop0): Remounting filesystem read-only [ 73.964236][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 73.964260][ C0] EXT4-fs (loop0): initial error at time 2000000026: ext4_mb_mark_diskspace_used:4222 [ 73.964298][ C0] EXT4-fs (loop0): last error at time 2000000026: ext4_mb_mark_diskspace_used:4222 [ 74.009476][ T4717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 74.033771][ T4709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4709 comm=syz.4.369 [ 74.047698][ T4708] Quota error (device loop0): write_blk: dquota write failed [ 74.074795][ T4718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 74.083121][ T4708] EXT4-fs (loop0): 1 truncate cleaned up [ 74.092372][ T4708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.150146][ T4717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 74.178724][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.193701][ T4718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 74.245827][ T4717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 74.289907][ T4733] loop2: detected capacity change from 0 to 1024 [ 74.308534][ T4718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 74.326896][ T4733] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.360233][ T4733] EXT4-fs: test_dummy_encryption option not supported [ 74.365994][ T4736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4736 comm=syz.0.376 [ 74.414032][ T4733] loop2: detected capacity change from 0 to 512 [ 74.439729][ T4733] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.475340][ T4733] EXT4-fs (loop2): 1 truncate cleaned up [ 74.487792][ T4733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.528667][ T4753] loop0: detected capacity change from 0 to 512 [ 74.550504][ T4753] EXT4-fs: dax option not supported [ 74.617353][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 74.667699][ T4760] can0: slcan on ttyS3. [ 74.686700][ T4759] ipip0: entered promiscuous mode [ 74.732647][ T4759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.383'. [ 74.787403][ T4759] can0 (unregistered): slcan off ttyS3. [ 74.807212][ T4759] can0: slcan on ttyS3. [ 74.826485][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.867395][ T4760] can0 (unregistered): slcan off ttyS3. [ 74.886406][ T4777] loop2: detected capacity change from 0 to 512 [ 74.898935][ T4777] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 74.918972][ T4777] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 74.935282][ T4777] EXT4-fs error (device loop2): ext4_do_update_inode:5604: inode #11: comm syz.2.384: corrupted inode contents [ 74.947710][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 74.947775][ C1] EXT4-fs (loop2): initial error at time 2000000027: mb_free_blocks:2049: inode 11: block 64 [ 74.947834][ C1] EXT4-fs (loop2): last error at time 2000000027: mb_free_blocks:2049: inode 11: block 64 [ 74.953926][ T4783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.385'. [ 74.958777][ T4777] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 74.987478][ T4777] EXT4-fs error (device loop2): ext4_dirty_inode:6497: inode #11: comm syz.2.384: mark_inode_dirty error [ 75.009693][ T4777] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 75.009889][ T4777] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.384: invalid indirect mapped block 1 (level 1) [ 75.032903][ T4777] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 75.033273][ T4777] EXT4-fs error (device loop2): ext4_do_update_inode:5604: inode #11: comm syz.2.384: corrupted inode contents [ 75.055841][ T4777] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 75.056034][ T4777] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 75.074637][ T4777] loop2: lost filesystem error report for type 5 error -117 [ 75.074866][ T4777] EXT4-fs error (device loop2): ext4_do_update_inode:5604: inode #11: comm syz.2.384: corrupted inode contents [ 75.102014][ T4777] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 75.102629][ T4777] EXT4-fs error (device loop2): ext4_truncate:4604: inode #11: comm syz.2.384: mark_inode_dirty error [ 75.123655][ T4777] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 75.123863][ T4777] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 75.144344][ T4777] loop2: lost filesystem error report for type 5 error -117 [ 75.144699][ T4777] EXT4-fs (loop2): 1 truncate cleaned up [ 75.168394][ T4777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.215869][ T4777] EXT4-fs (loop2): shut down requested (0) [ 75.265364][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.317776][ T4803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4803 comm=syz.3.387 [ 75.378656][ T4812] tipc: Started in network mode [ 75.409674][ T4812] tipc: Node identity , cluster identity 4711 [ 75.416370][ T4812] tipc: Failed to set node id, please configure manually [ 75.424484][ T4812] tipc: Enabling of bearer rejected, failed to enable media [ 75.459858][ T4820] loop0: detected capacity change from 0 to 512 [ 75.490350][ T4820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.504546][ T4820] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.557321][ T4820] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #2: comm syz.0.395: corrupted inode contents [ 75.570217][ T4820] EXT4-fs error (device loop0): ext4_dirty_inode:6497: inode #2: comm syz.0.395: mark_inode_dirty error [ 75.582493][ T4820] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #2: comm syz.0.395: corrupted inode contents [ 75.599168][ T4820] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.395: mark_inode_dirty error [ 75.830066][ T4835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4835 comm=syz.1.398 [ 75.915583][ T4840] loop1: detected capacity change from 0 to 512 [ 75.947802][ T4840] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 75.968648][ T4840] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 75.987533][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 75.994015][ C0] EXT4-fs (loop1): initial error at time 2000000028: mb_free_blocks:2049: inode 11: block 64 [ 76.004356][ C0] EXT4-fs (loop1): last error at time 2000000028: mb_free_blocks:2049: inode 11: block 64 [ 76.007329][ T4840] EXT4-fs error (device loop1): ext4_do_update_inode:5604: inode #11: comm syz.1.400: corrupted inode contents [ 76.026997][ T4840] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.027712][ T4840] EXT4-fs error (device loop1): ext4_dirty_inode:6497: inode #11: comm syz.1.400: mark_inode_dirty error [ 76.050064][ T4840] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.050611][ T4840] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.400: invalid indirect mapped block 1 (level 1) [ 76.073939][ T4840] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.074157][ T4840] EXT4-fs error (device loop1): ext4_do_update_inode:5604: inode #11: comm syz.1.400: corrupted inode contents [ 76.095390][ T4840] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.095603][ T4840] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 76.113704][ T4840] loop1: lost filesystem error report for type 5 error -117 [ 76.113961][ T4840] EXT4-fs error (device loop1): ext4_do_update_inode:5604: inode #11: comm syz.1.400: corrupted inode contents [ 76.134343][ T4840] EXT4-fs error (device loop1): ext4_truncate:4604: inode #11: comm syz.1.400: mark_inode_dirty error [ 76.146468][ T4840] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 76.155380][ T4840] loop1: lost filesystem error report for type 5 error -117 [ 76.155675][ T4840] EXT4-fs (loop1): 1 truncate cleaned up [ 76.169341][ T4840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.198373][ T4840] EXT4-fs (loop1): shut down requested (0) [ 76.227468][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.251027][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.302504][ T4847] loop1: detected capacity change from 0 to 512 [ 76.327862][ T4847] EXT4-fs: dax option not supported [ 76.395061][ T4855] xt_hashlimit: size too large, truncated to 1048576 [ 76.423195][ T4858] loop2: detected capacity change from 0 to 4096 [ 76.444097][ T4858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.470464][ T4851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4851 comm=syz.0.403 [ 76.531282][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.651974][ T4876] loop0: detected capacity change from 0 to 512 [ 76.667321][ T4871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4871 comm=syz.2.410 [ 76.670576][ T4876] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 76.695741][ T4876] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 76.710958][ T4876] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #11: comm syz.0.412: corrupted inode contents [ 76.722817][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 76.722841][ C1] EXT4-fs (loop0): initial error at time 2000000029: mb_free_blocks:2049: inode 11: block 64 [ 76.722878][ C1] EXT4-fs (loop0): last error at time 2000000029: mb_free_blocks:2049: inode 11: block 64 [ 76.760444][ T4876] EXT4-fs error (device loop0): ext4_dirty_inode:6497: inode #11: comm syz.0.412: mark_inode_dirty error [ 76.772130][ T4876] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.412: invalid indirect mapped block 1 (level 1) [ 76.785642][ T4876] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #11: comm syz.0.412: corrupted inode contents [ 76.798050][ T4876] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 76.806653][ T4876] loop0: lost filesystem error report for type 5 error -117 [ 76.809540][ T4876] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #11: comm syz.0.412: corrupted inode contents [ 76.829623][ T4876] EXT4-fs error (device loop0): ext4_truncate:4604: inode #11: comm syz.0.412: mark_inode_dirty error [ 76.842470][ T4876] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 76.851993][ T4876] loop0: lost filesystem error report for type 5 error -117 [ 76.858406][ T4876] EXT4-fs (loop0): 1 truncate cleaned up [ 76.872776][ T4876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.898275][ T4876] EXT4-fs (loop0): shut down requested (0) [ 76.915724][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.932974][ T28] kauditd_printk_skb: 110 callbacks suppressed [ 76.932987][ T28] audit: type=1400 audit(2000000029.500:8130): avc: denied { connect } for pid=4892 comm="syz.0.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.951502][ T4893] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 76.970916][ T4893] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 76.983820][ T28] audit: type=1400 audit(2000000029.560:8131): avc: denied { getopt } for pid=4892 comm="syz.0.418" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.022555][ T4894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4894 comm=syz.4.419 [ 77.069785][ T28] audit: type=1400 audit(2000000029.640:8132): avc: denied { execute } for pid=4895 comm="syz.4.420" path="/98/file1" dev="tmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.340157][ T4915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4915 comm=syz.3.425 [ 77.420251][ T4920] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 77.447214][ T4920] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 77.465303][ T3539] IPVS: starting estimator thread 0... [ 77.467328][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 77.476258][ T4920] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #11: comm syz.0.429: corrupted inode contents [ 77.478519][ C0] EXT4-fs (loop0): initial error at time 2000000030: mb_free_blocks:2049: inode 11: block 64 [ 77.503027][ C0] EXT4-fs (loop0): last error at time 2000000030: mb_free_blocks:2049: inode 11: block 64 [ 77.523381][ T4920] EXT4-fs error (device loop0): ext4_dirty_inode:6497: inode #11: comm syz.0.429: mark_inode_dirty error [ 77.558905][ T4928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.574372][ T4919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4919 comm=syz.2.428 [ 77.592365][ T4920] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.429: invalid indirect mapped block 1 (level 1) [ 77.607752][ T4926] IPVS: using max 2448 ests per chain, 122400 per kthread [ 77.639420][ T4920] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #11: comm syz.0.429: corrupted inode contents [ 77.655917][ T4928] infiniband syz!: RDMA CMA: cma_listen_on_dev, error -98 [ 77.713290][ T4920] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 77.723050][ T4933] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.741105][ T4920] loop0: lost filesystem error report for type 5 error -117 [ 77.742698][ T4920] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #11: comm syz.0.429: corrupted inode contents [ 77.756055][ T28] audit: type=1400 audit(2000000030.320:8133): avc: denied { mounton } for pid=4927 comm="syz.1.431" path="/80/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.792858][ T4933] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.792952][ T4920] EXT4-fs error (device loop0): ext4_truncate:4604: inode #11: comm syz.0.429: mark_inode_dirty error [ 77.822887][ T28] audit: type=1400 audit(2000000030.380:8134): avc: denied { create } for pid=4932 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 77.850592][ T4920] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 77.886068][ T28] audit: type=1400 audit(2000000030.380:8135): avc: denied { ioctl } for pid=4932 comm="syz.3.432" path="socket:[9763]" dev="sockfs" ino=9763 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 77.887397][ T4920] loop0: lost filesystem error report for type 5 error -117 [ 77.942047][ T28] audit: type=1400 audit(2000000030.510:8136): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 77.974313][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.989604][ T4920] EXT4-fs (loop0): 1 truncate cleaned up [ 78.022460][ T4920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.062277][ T4946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.074983][ T4946] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.104580][ T4946] EXT4-fs error (device loop1): ext4_do_update_inode:5604: inode #2: comm syz.1.436: corrupted inode contents [ 78.117214][ T4946] EXT4-fs error (device loop1): ext4_dirty_inode:6497: inode #2: comm syz.1.436: mark_inode_dirty error [ 78.128903][ T4946] EXT4-fs error (device loop1): ext4_do_update_inode:5604: inode #2: comm syz.1.436: corrupted inode contents [ 78.139798][ T4920] EXT4-fs (loop0): shut down requested (0) [ 78.146970][ T4946] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.436: mark_inode_dirty error [ 78.190757][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.402434][ T4959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 78.415953][ T4959] EXT4-fs (loop0): shut down requested (2) [ 78.440727][ T28] audit: type=1400 audit(2000000031.010:8137): avc: denied { ioctl } for pid=4958 comm="syz.0.439" path="socket:[9787]" dev="sockfs" ino=9787 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.484539][ T4959] capability: warning: `syz.0.439' uses deprecated v2 capabilities in a way that may be insecure [ 78.515552][ T4959] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 78.551914][ T4959] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 78.569588][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.588436][ T4959] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 78.597892][ T28] audit: type=1400 audit(2000000031.160:8138): avc: denied { read write } for pid=4958 comm="syz.0.439" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.647587][ T28] audit: type=1400 audit(2000000031.200:8139): avc: denied { open } for pid=4958 comm="syz.0.439" path="/97/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.679056][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 78.740805][ T4968] FAULT_INJECTION: forcing a failure. [ 78.740805][ T4968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.770001][ T4968] CPU: 1 UID: 0 PID: 4968 Comm: syz.0.441 Not tainted syzkaller #0 PREEMPT(full) [ 78.770029][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 78.770041][ T4968] Call Trace: [ 78.770047][ T4968] [ 78.770056][ T4968] __dump_stack+0x1d/0x30 [ 78.770081][ T4968] dump_stack_lvl+0x95/0xd0 [ 78.770164][ T4968] dump_stack+0x15/0x1b [ 78.770183][ T4968] should_fail_ex+0x263/0x280 [ 78.770202][ T4968] ? __pfx_blkdev_ioctl+0x10/0x10 [ 78.770229][ T4968] should_fail+0xb/0x20 [ 78.770296][ T4968] should_fail_usercopy+0x1a/0x20 [ 78.770317][ T4968] _copy_from_user+0x1c/0xb0 [ 78.770339][ T4968] blkpg_do_ioctl+0x6c/0x320 [ 78.770367][ T4968] ? __pfx_blkdev_ioctl+0x10/0x10 [ 78.770465][ T4968] blkdev_ioctl+0x453/0x460 [ 78.770487][ T4968] ? __pfx_blkdev_ioctl+0x10/0x10 [ 78.770540][ T4968] __se_sys_ioctl+0xce/0x140 [ 78.770562][ T4968] __x64_sys_ioctl+0x43/0x50 [ 78.770581][ T4968] x64_sys_call+0x1563/0x3020 [ 78.770600][ T4968] do_syscall_64+0x12c/0x3b0 [ 78.770639][ T4968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.770660][ T4968] RIP: 0033:0x7f66f7bec819 [ 78.770676][ T4968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.770689][ T4968] RSP: 002b:00007f66f663f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.770798][ T4968] RAX: ffffffffffffffda RBX: 00007f66f7e65fa0 RCX: 00007f66f7bec819 [ 78.770813][ T4968] RDX: 0000200000000280 RSI: 0000000000001269 RDI: 0000000000000003 [ 78.770824][ T4968] RBP: 00007f66f663f090 R08: 0000000000000000 R09: 0000000000000000 [ 78.770834][ T4968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.770844][ T4968] R13: 00007f66f7e66038 R14: 00007f66f7e65fa0 R15: 00007ffcb47e1bd8 [ 78.770960][ T4968] [ 78.961954][ T4966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4966 comm=syz.1.440 [ 79.043594][ T4977] set_capacity_and_notify: 5 callbacks suppressed [ 79.044775][ T4977] loop2: detected capacity change from 0 to 512 [ 79.082672][ T4977] ext4: Unknown parameter 'noacl' [ 79.537536][ T5004] loop0: detected capacity change from 0 to 1024 [ 79.544422][ T5004] EXT4-fs: Ignoring removed bh option [ 79.602237][ T5004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 79.623319][ T5004] EXT4-fs (loop0): shut down requested (2) [ 79.692767][ T5004] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 79.739452][ T5004] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 79.771726][ T5004] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 79.798810][ T5004] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 79.812199][ T5014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5014 comm=syz.4.456 [ 79.817532][ T5024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5024 comm=syz.1.459 [ 79.851131][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 79.885719][ T5023] __nla_validate_parse: 12 callbacks suppressed [ 79.885765][ T5023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.460'. [ 79.956562][ T5031] loop0: detected capacity change from 0 to 256 [ 80.137457][ T5041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.467'. [ 80.341437][ T5033] loop2: detected capacity change from 0 to 512 [ 80.403069][ T5033] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.439296][ T5033] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 80.457324][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 80.463788][ C1] EXT4-fs (loop2): initial error at time 2000000033: ext4_mb_generate_buddy:1317 [ 80.473069][ C1] EXT4-fs (loop2): last error at time 2000000033: ext4_mb_generate_buddy:1317 [ 80.496832][ T5033] EXT4-fs error (device loop2): ext4_acquire_dquot:7028: comm syz.2.464: Failed to acquire dquot type 1 [ 80.544892][ T5033] loop2: lost filesystem error report for type 5 error -28 [ 80.548341][ T5033] EXT4-fs (loop2): 1 truncate cleaned up [ 80.569642][ T5033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.693351][ T5058] loop0: detected capacity change from 0 to 512 [ 80.758732][ T5058] EXT4-fs (loop0): 1 truncate cleaned up [ 80.772141][ T5058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.822829][ T5058] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.471: bg 0: block 465: padding at end of block bitmap is not set [ 80.842159][ T5058] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 80.855670][ T5058] EXT4-fs (loop0): This should not happen!! Data will be lost [ 80.855670][ T5058] [ 81.053501][ T5052] selinux_netlink_send: 1 callbacks suppressed [ 81.053745][ T5052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5052 comm=syz.4.472 [ 81.373558][ T5058] syz.0.471 (5058) used greatest stack depth: 7808 bytes left [ 81.571868][ T5064] netlink: 24 bytes leftover after parsing attributes in process `syz.4.474'. [ 81.634041][ T5064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5064 comm=syz.4.474 [ 81.822507][ T5069] netlink: 'syz.1.476': attribute type 1 has an invalid length. [ 81.941694][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.019448][ T5079] netlink: 88 bytes leftover after parsing attributes in process `syz.2.480'. [ 82.034456][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 82.034469][ T28] audit: type=1400 audit(2000000034.600:8147): avc: denied { write } for pid=5075 comm="syz.4.479" path="socket:[10023]" dev="sockfs" ino=10023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.133458][ T2086] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 82.186866][ T2086] EXT4-fs (loop0): This should not happen!! Data will be lost [ 82.186866][ T2086] [ 82.226334][ T2086] EXT4-fs (loop0): Total free blocks count 0 [ 82.246735][ T2086] EXT4-fs (loop0): Free/Dirty block details [ 82.261973][ T2086] EXT4-fs (loop0): free_blocks=0 [ 82.276235][ T2086] EXT4-fs (loop0): dirty_blocks=64 [ 82.291395][ T2086] EXT4-fs (loop0): Block reservation details [ 82.315171][ T3317] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 82.408932][ T5086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5086 comm=syz.2.484 [ 82.459474][ T28] audit: type=1400 audit(2000000035.030:8148): avc: denied { ioctl } for pid=5093 comm="syz.4.487" path="socket:[10269]" dev="sockfs" ino=10269 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.574712][ T5096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5096 comm=syz.3.488 [ 82.603846][ T28] audit: type=1400 audit(2000000035.170:8149): avc: denied { getopt } for pid=5103 comm="syz.2.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.654915][ T28] audit: type=1400 audit(2000000035.220:8150): avc: denied { write } for pid=5111 comm="syz.4.492" lport=54117 faddr=::ffff:100.1.0.253 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 82.694376][ T5114] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 82.696093][ T28] audit: type=1400 audit(2000000035.230:8151): avc: denied { getopt } for pid=5111 comm="syz.4.492" lport=54117 faddr=::ffff:100.1.0.253 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 82.736795][ T5110] loop0: detected capacity change from 0 to 512 [ 82.747025][ T5110] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 82.791022][ T5110] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 82.815496][ T5110] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #11: comm syz.0.491: corrupted inode contents [ 82.827654][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 82.827672][ C0] EXT4-fs (loop0): initial error at time 2000000035: mb_free_blocks:2049: inode 11: block 64 [ 82.827701][ C0] EXT4-fs (loop0): last error at time 2000000035: mb_free_blocks:2049: inode 11: block 64 [ 82.854783][ T5110] fserror_report: 14 callbacks suppressed [ 82.854829][ T5110] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 82.863191][ T5110] EXT4-fs error (device loop0): ext4_dirty_inode:6497: inode #11: comm syz.0.491: mark_inode_dirty error [ 82.893490][ T5110] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 82.893730][ T5110] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.491: invalid indirect mapped block 1 (level 1) [ 82.928045][ T5110] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 82.929814][ T5110] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #11: comm syz.0.491: corrupted inode contents [ 82.955662][ T5135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.501'. [ 82.975846][ T5110] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 83.014126][ T5110] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 83.052583][ T28] audit: type=1400 audit(2000000035.610:8152): avc: denied { bind } for pid=5129 comm="syz.2.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.076381][ T5110] loop0: lost filesystem error report for type 5 error -117 [ 83.077533][ T5139] netlink: 28 bytes leftover after parsing attributes in process `syz.4.501'. [ 83.111763][ T5110] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #11: comm syz.0.491: corrupted inode contents [ 83.147102][ T28] audit: type=1326 audit(2000000035.710:8153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5140 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e99ac819 code=0x7ffc0000 [ 83.150751][ T5110] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 83.195895][ T28] audit: type=1326 audit(2000000035.710:8154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5140 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e99ac819 code=0x7ffc0000 [ 83.206295][ T5110] EXT4-fs error (device loop0): ext4_truncate:4604: inode #11: comm syz.0.491: mark_inode_dirty error [ 83.254756][ T5147] loop2: detected capacity change from 0 to 1024 [ 83.275125][ T5147] EXT4-fs: Ignoring removed orlov option [ 83.280264][ T5149] loop3: detected capacity change from 0 to 256 [ 83.285987][ T5141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 83.295338][ T5147] EXT4-fs: Ignoring removed nobh option [ 83.298417][ T28] audit: type=1326 audit(2000000035.710:8155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5140 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e99ac819 code=0x7ffc0000 [ 83.301533][ T5110] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 83.328390][ T5149] vfat: Deprecated parameter 'posix' [ 83.370147][ T5147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.395991][ T5153] batadv1: entered promiscuous mode [ 83.402158][ T5149] FAT-fs: "posix" option is obsolete, not supported now [ 83.410035][ T5110] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 83.428904][ T5149] FAT-fs (loop3): codepage cp775 not found [ 83.454729][ T5149] loop3: detected capacity change from 0 to 128 [ 83.473190][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.487324][ T5110] loop0: lost filesystem error report for type 5 error -117 [ 83.487685][ T5110] EXT4-fs (loop0): 1 truncate cleaned up [ 83.503737][ T5110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.507851][ T5149] gre0 speed is unknown, defaulting to 1000 [ 83.527911][ T5153] batadv1: entered promiscuous mode [ 83.538533][ T5110] EXT4-fs (loop0): shut down requested (0) [ 83.577111][ T5159] loop1: detected capacity change from 0 to 512 [ 83.593412][ T5149] gre0 speed is unknown, defaulting to 1000 [ 83.615662][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.629456][ T5149] gre0 speed is unknown, defaulting to 1000 [ 83.645433][ T5159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.507'. [ 83.671190][ T5153] batadv1: entered promiscuous mode [ 83.737389][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 83.743309][ T5168] vhci_hcd vhci_hcd.0: default hub control req: 0131 v0004 i0000 l0 [ 83.755625][ T5170] netlink: 'syz.2.509': attribute type 2 has an invalid length. [ 83.768836][ T5149] infiniband syz1: set down [ 83.773919][ T5149] infiniband syz1: added gre0 [ 83.779928][ T5170] netlink: 'syz.2.509': attribute type 1 has an invalid length. [ 83.781709][ T5168] usb usb1: usbfs: process 5168 (syz.0.510) did not claim interface 0 before use [ 83.788544][ T5170] netlink: 'syz.2.509': attribute type 1 has an invalid length. [ 83.807151][ T5166] netlink: 136 bytes leftover after parsing attributes in process `syz.1.507'. [ 83.823128][ T5149] RDS/IB: syz1: added [ 83.827583][ T5166] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 83.828179][ T5149] smc: adding ib device syz1 with port count 1 [ 83.849601][ T5149] smc: ib device syz1 port 1 has no pnetid [ 83.855997][ T3380] gre0 speed is unknown, defaulting to 1000 [ 83.864926][ T5153] batadv1: entered promiscuous mode [ 83.876090][ T3539] gre0 speed is unknown, defaulting to 1000 [ 83.882403][ T5149] gre0 speed is unknown, defaulting to 1000 [ 83.939267][ T5177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.512'. [ 83.956500][ T5153] batadv1: entered promiscuous mode [ 83.966465][ T5177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.512'. [ 83.989438][ T5179] netlink: 'syz.1.514': attribute type 2 has an invalid length. [ 83.997303][ T5179] netlink: 'syz.1.514': attribute type 1 has an invalid length. [ 84.012103][ T5149] gre0 speed is unknown, defaulting to 1000 [ 84.014911][ T5179] netlink: 'syz.1.514': attribute type 1 has an invalid length. [ 84.043722][ T5179] FAULT_INJECTION: forcing a failure. [ 84.043722][ T5179] name failslab, interval 1, probability 0, space 0, times 0 [ 84.057496][ T5179] CPU: 1 UID: 0 PID: 5179 Comm: syz.1.514 Not tainted syzkaller #0 PREEMPT(full) [ 84.057530][ T5179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 84.057543][ T5179] Call Trace: [ 84.057550][ T5179] [ 84.057626][ T5179] __dump_stack+0x1d/0x30 [ 84.057648][ T5179] dump_stack_lvl+0x95/0xd0 [ 84.057667][ T5179] dump_stack+0x15/0x1b [ 84.057687][ T5179] should_fail_ex+0x263/0x280 [ 84.057744][ T5179] should_failslab+0x8c/0xb0 [ 84.057764][ T5179] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 84.057788][ T5179] ? __alloc_skb+0x2d6/0x690 [ 84.057810][ T5179] __alloc_skb+0x2d6/0x690 [ 84.057840][ T5179] ? __alloc_skb+0x200/0x690 [ 84.057859][ T5179] netlink_ack+0xfd/0x500 [ 84.057891][ T5179] netlink_rcv_skb+0x192/0x220 [ 84.057942][ T5179] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 84.057967][ T5179] nfnetlink_rcv+0x167/0x1720 [ 84.057990][ T5179] ? __kfree_skb+0x109/0x150 [ 84.058012][ T5179] ? nlmon_xmit+0x4f/0x60 [ 84.058056][ T5179] ? consume_skb+0x4b/0x130 [ 84.058151][ T5179] ? nlmon_xmit+0x4f/0x60 [ 84.058174][ T5179] ? dev_hard_start_xmit+0x36c/0x3a0 [ 84.058201][ T5179] ? __dev_queue_xmit+0x134a/0x1eb0 [ 84.058241][ T5179] ? __dev_queue_xmit+0x148/0x1eb0 [ 84.058265][ T5179] ? ref_tracker_free+0x37d/0x3e0 [ 84.058284][ T5179] ? __netlink_deliver_tap+0x4dc/0x500 [ 84.058308][ T5179] netlink_unicast+0x5c0/0x690 [ 84.058351][ T5179] netlink_sendmsg+0x5c8/0x6f0 [ 84.058378][ T5179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.058402][ T5179] ____sys_sendmsg+0x563/0x5b0 [ 84.058438][ T5179] ___sys_sendmsg+0x195/0x1e0 [ 84.058471][ T5179] __x64_sys_sendmsg+0xd4/0x160 [ 84.058537][ T5179] x64_sys_call+0x194c/0x3020 [ 84.058598][ T5179] do_syscall_64+0x12c/0x3b0 [ 84.058620][ T5179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.058716][ T5179] RIP: 0033:0x7f35e99ac819 [ 84.058748][ T5179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.058763][ T5179] RSP: 002b:00007f35e83ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.058807][ T5179] RAX: ffffffffffffffda RBX: 00007f35e9c25fa0 RCX: 00007f35e99ac819 [ 84.058819][ T5179] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 84.058832][ T5179] RBP: 00007f35e83ff090 R08: 0000000000000000 R09: 0000000000000000 [ 84.058842][ T5179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.058916][ T5179] R13: 00007f35e9c26038 R14: 00007f35e9c25fa0 R15: 00007ffd9c229bf8 [ 84.058935][ T5179] [ 84.350947][ T5187] set_capacity_and_notify: 1 callbacks suppressed [ 84.350963][ T5187] loop0: detected capacity change from 0 to 1024 [ 84.380442][ T5191] loop1: detected capacity change from 0 to 512 [ 84.386791][ T5187] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.398535][ T5191] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 84.423144][ T5191] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 84.436779][ T5187] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.516: Invalid block bitmap block 0 in block_group 0 [ 84.438378][ T5191] EXT4-fs error (device loop1): ext4_do_update_inode:5604: inode #11: comm syz.1.518: corrupted inode contents [ 84.451312][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 84.451338][ C0] EXT4-fs (loop1): initial error at time 2000000037: mb_free_blocks:2049: inode 11: block 64 [ 84.451367][ C0] EXT4-fs (loop1): last error at time 2000000037: mb_free_blocks:2049: inode 11: block 64 [ 84.490669][ T5191] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 84.490713][ T5187] loop0: lost filesystem error report for type 5 error -117 [ 84.497295][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 84.497316][ C0] EXT4-fs (loop0): initial error at time 2000000037: ext4_read_block_bitmap_nowait:483 [ 84.497342][ C0] EXT4-fs (loop0): last error at time 2000000037: ext4_read_block_bitmap_nowait:483 [ 84.499390][ T5187] EXT4-fs error (device loop0): ext4_acquire_dquot:7028: comm syz.0.516: Failed to acquire dquot type 0 [ 84.499412][ T5187] loop0: lost filesystem error report for type 5 error -117 [ 84.499574][ T5187] EXT4-fs error (device loop0): ext4_free_blocks:6724: comm syz.0.516: Freeing blocks not in datazone - block = 0, count = 4096 [ 84.499598][ T5187] loop0: lost filesystem error report for type 5 error -117 [ 84.501190][ T5187] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.516: Invalid inode bitmap blk 0 in block_group 0 [ 84.501218][ T5187] loop0: lost filesystem error report for type 5 error -117 [ 84.501411][ T5187] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 84.501461][ T5187] loop0: lost filesystem error report for type 5 error -117 [ 84.501513][ T5187] EXT4-fs (loop0): 1 orphan inode deleted [ 84.502087][ T5187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.502320][ T5191] EXT4-fs error (device loop1): ext4_dirty_inode:6497: inode #11: comm syz.1.518: mark_inode_dirty error [ 84.502401][ T5191] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 84.502573][ T5191] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.518: invalid indirect mapped block 1 (level 1) [ 84.502607][ T5191] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 84.502814][ T5191] EXT4-fs error (device loop1): ext4_do_update_inode:5604: inode #11: comm syz.1.518: corrupted inode contents [ 84.502885][ T5191] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 84.502969][ T5191] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 84.502986][ T5191] loop1: lost filesystem error report for type 5 error -117 [ 84.503172][ T5191] EXT4-fs error (device loop1): ext4_do_update_inode:5604: inode #11: comm syz.1.518: corrupted inode contents [ 84.503281][ T5191] EXT4-fs error (device loop1): ext4_truncate:4604: inode #11: comm syz.1.518: mark_inode_dirty error [ 84.505132][ T5191] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 84.505148][ T5191] loop1: lost filesystem error report for type 5 error -117 [ 84.506851][ T5191] EXT4-fs (loop1): 1 truncate cleaned up [ 84.508502][ T5191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.527118][ T39] EXT4-fs error (device loop0): ext4_release_dquot:7064: comm kworker/u8:2: Failed to release dquot type 0 [ 84.533202][ T5149] gre0 speed is unknown, defaulting to 1000 [ 84.553873][ T5203] loop2: detected capacity change from 0 to 164 [ 84.554072][ T5203] iso9660: Unknown parameter './file0' [ 84.596645][ T5191] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.518: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 84.620904][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.717581][ T5149] gre0 speed is unknown, defaulting to 1000 [ 84.770714][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.777332][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 84.853905][ T5149] gre0 speed is unknown, defaulting to 1000 [ 85.070855][ T5209] loop3: detected capacity change from 0 to 1024 [ 85.191554][ T5209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.199299][ T5209] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 85.199373][ T5209] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 85.227003][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.198903][ T5233] loop1: detected capacity change from 0 to 512 [ 86.206670][ T5233] EXT4-fs: Ignoring removed nobh option [ 86.213257][ T5233] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4675: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 86.225846][ T3306] udevd[3306]: incorrect ext4 checksum on /dev/loop1 [ 86.227030][ T5233] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 86.314328][ T5243] loop2: detected capacity change from 0 to 128 [ 86.330506][ T5243] rdma_rxe: rxe_newlink: failed to add gre0 [ 86.369219][ T5241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5241 comm=syz.4.534 [ 86.641101][ T5262] loop1: detected capacity change from 0 to 764 [ 86.994783][ T5262] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 87.083739][ T5265] loop3: detected capacity change from 0 to 128 [ 87.168979][ T5267] loop0: detected capacity change from 0 to 1764 [ 87.187034][ T5267] ISOFS: Bad logical zone size 4096 [ 87.268582][ T28] kauditd_printk_skb: 194 callbacks suppressed [ 87.268597][ T28] audit: type=1400 audit(2000000039.840:8345): avc: denied { connect } for pid=5266 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 87.296693][ T5267] __nla_validate_parse: 1 callbacks suppressed [ 87.296706][ T5267] netlink: 252 bytes leftover after parsing attributes in process `syz.0.544'. [ 87.448522][ T28] audit: type=1400 audit(2000000039.870:8346): avc: denied { ioctl } for pid=5266 comm="syz.0.544" path="socket:[11390]" dev="sockfs" ino=11390 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 87.795072][ T5286] loop2: detected capacity change from 0 to 2048 [ 87.834600][ T5286] loop2: p1 < > p4 < > [ 88.047972][ T5286] EXT4-fs: Ignoring removed nobh option [ 88.063830][ T28] audit: type=1400 audit(2000000040.630:8347): avc: denied { bind } for pid=5303 comm="syz.0.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.076364][ T5286] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.111575][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 88.123704][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 88.153912][ T5286] EXT4-fs (loop2): 1 truncate cleaned up [ 88.170555][ T5286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.181220][ T5298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5298 comm=syz.4.551 [ 88.249390][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.328232][ T5321] FAULT_INJECTION: forcing a failure. [ 88.328232][ T5321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.351275][ T5316] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 88.365373][ T5316] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 88.381525][ T5316] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #11: comm syz.0.556: corrupted inode contents [ 88.393691][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 88.393713][ C1] EXT4-fs (loop0): initial error at time 2000000040: mb_free_blocks:2049: inode 11: block 64 [ 88.393781][ C1] EXT4-fs (loop0): last error at time 2000000040: mb_free_blocks:2049: inode 11: block 64 [ 88.420700][ T5316] fserror_report: 2 callbacks suppressed [ 88.420714][ T5316] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 88.426584][ T5316] EXT4-fs error (device loop0): ext4_dirty_inode:6497: inode #11: comm syz.0.556: mark_inode_dirty error [ 88.441998][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.3.559 Not tainted syzkaller #0 PREEMPT(full) [ 88.442026][ T5321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 88.442037][ T5321] Call Trace: [ 88.442043][ T5321] [ 88.442050][ T5321] __dump_stack+0x1d/0x30 [ 88.442097][ T5321] dump_stack_lvl+0x95/0xd0 [ 88.442117][ T5321] dump_stack+0x15/0x1b [ 88.442203][ T5321] should_fail_ex+0x263/0x280 [ 88.442224][ T5321] should_fail+0xb/0x20 [ 88.442288][ T5321] should_fail_usercopy+0x1a/0x20 [ 88.442385][ T5321] _copy_to_user+0x20/0xa0 [ 88.442407][ T5321] simple_read_from_buffer+0xb5/0x130 [ 88.442492][ T5321] proc_fail_nth_read+0x10e/0x150 [ 88.442512][ T5321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.442530][ T5321] vfs_read+0x1ab/0x7f0 [ 88.442550][ T5321] ? __rcu_read_unlock+0x4e/0x70 [ 88.442628][ T5321] ? __fget_files+0x184/0x1c0 [ 88.442651][ T5321] ? mutex_lock+0x57/0x90 [ 88.442678][ T5321] ksys_read+0xdc/0x1a0 [ 88.442737][ T5321] __x64_sys_read+0x40/0x50 [ 88.442755][ T5321] x64_sys_call+0x2886/0x3020 [ 88.442779][ T5321] do_syscall_64+0x12c/0x3b0 [ 88.442868][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.442888][ T5321] RIP: 0033:0x7f2c687cd04e [ 88.442902][ T5321] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.442918][ T5321] RSP: 002b:00007f2c6725efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.442938][ T5321] RAX: ffffffffffffffda RBX: 00007f2c6725f6c0 RCX: 00007f2c687cd04e [ 88.443020][ T5321] RDX: 000000000000000f RSI: 00007f2c6725f0a0 RDI: 0000000000000005 [ 88.443032][ T5321] RBP: 00007f2c6725f090 R08: 0000000000000000 R09: 0000000000000000 [ 88.443044][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.443123][ T5321] R13: 00007f2c68a86038 R14: 00007f2c68a85fa0 R15: 00007ffe24c961f8 [ 88.443147][ T5321] [ 88.653566][ T5316] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 88.654984][ T5316] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.556: invalid indirect mapped block 1 (level 1) [ 88.697954][ T5316] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 88.890970][ T5330] ext4: Unknown parameter 'fsuuid' [ 88.999594][ T5331] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 89.010642][ T5331] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 89.020678][ T5331] EXT4-fs error (device loop2): ext4_get_journal_inode:5890: comm syz.2.557: inode #1: comm syz.2.557: iget: illegal inode # [ 89.033765][ T5331] loop2: lost filesystem error report for type 5 error -117 [ 89.037278][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 89.051063][ C0] EXT4-fs (loop2): initial error at time 2000000041: ext4_get_journal_inode:5890 [ 89.060606][ C0] EXT4-fs (loop2): last error at time 2000000041: ext4_get_journal_inode:5890 [ 89.085118][ T5331] EXT4-fs (loop2): no journal found [ 89.090606][ T5331] EXT4-fs (loop2): can't get journal size [ 89.097363][ T5316] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #11: comm syz.0.556: corrupted inode contents [ 89.130521][ T5331] EXT4-fs (loop2): failed to initialize system zone (-22) [ 89.137980][ T5331] EXT4-fs (loop2): mount failed [ 89.255168][ T5316] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 89.255592][ T5316] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 89.366244][ T5334] set_capacity_and_notify: 4 callbacks suppressed [ 89.366263][ T5334] loop3: detected capacity change from 0 to 512 [ 89.392697][ T5316] loop0: lost filesystem error report for type 5 error -117 [ 89.394644][ T5316] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #11: comm syz.0.556: corrupted inode contents [ 89.480621][ T5334] netlink: 156 bytes leftover after parsing attributes in process `syz.3.562'. [ 89.489909][ T5316] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 89.490101][ T5316] EXT4-fs error (device loop0): ext4_truncate:4604: inode #11: comm syz.0.556: mark_inode_dirty error [ 89.560523][ T5316] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 89.560761][ T5316] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 89.751482][ T5341] loop3: detected capacity change from 0 to 512 [ 89.764843][ T5316] loop0: lost filesystem error report for type 5 error -117 [ 89.765084][ T5316] EXT4-fs (loop0): 1 truncate cleaned up [ 89.978574][ T5341] EXT4-fs: Ignoring removed nobh option [ 89.999079][ T5341] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #3: comm syz.3.565: corrupted inode contents [ 90.011630][ T5316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.254344][ T5343] /dev/loop4: Can't lookup blockdev [ 90.284474][ T5341] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 90.284672][ T5341] EXT4-fs error (device loop3): ext4_dirty_inode:6497: inode #3: comm syz.3.565: mark_inode_dirty error [ 90.293966][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 90.293995][ C1] EXT4-fs (loop3): initial error at time 2000000042: ext4_do_update_inode:5604: inode 3 [ 90.294053][ C1] EXT4-fs (loop3): last error at time 2000000042: ext4_do_update_inode:5604: inode 3 [ 90.335878][ T5349] loop2: detected capacity change from 0 to 512 [ 90.347691][ T5349] EXT4-fs: Ignoring removed nobh option [ 90.364343][ T5316] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.556: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 90.397990][ T5349] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 90.412315][ T5349] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #13: comm syz.2.567: inode has both inline data and extents flags [ 90.465243][ T5341] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 90.465882][ T5341] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #3: comm syz.3.565: corrupted inode contents [ 90.500311][ T5349] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 90.500671][ T5349] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.567: couldn't read orphan inode 13 (err -117) [ 90.510642][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 90.510670][ C1] EXT4-fs (loop2): initial error at time 2000000043: ext4_orphan_get:1397: inode 13 [ 90.510698][ C1] EXT4-fs (loop2): last error at time 2000000043: ext4_orphan_get:1397: inode 13 [ 90.567354][ T5341] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 90.573340][ T5341] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.565: mark_inode_dirty error [ 90.614813][ T5341] Quota error (device loop3): write_blk: dquota write failed [ 90.631453][ T5349] loop2: lost filesystem error report for type 5 error -117 [ 90.632143][ T5349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.653505][ T5341] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 90.674402][ T5341] EXT4-fs error (device loop3): ext4_acquire_dquot:7028: comm syz.3.565: Failed to acquire dquot type 0 [ 90.698094][ T5341] loop3: lost filesystem error report for type 5 error -117 [ 90.698895][ T5341] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #16: comm syz.3.565: corrupted inode contents [ 90.764215][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.781633][ T5341] EXT4-fs error (device loop3): ext4_dirty_inode:6497: inode #16: comm syz.3.565: mark_inode_dirty error [ 90.807941][ T5341] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #16: comm syz.3.565: corrupted inode contents [ 90.822030][ T5349] process 'syz.2.567' launched '/dev/fd/20' with NULL argv: empty string added [ 90.838300][ T5349] EXT4-fs warning (device loop2): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 90.849142][ T28] audit: type=1400 audit(2000000043.410:8348): avc: denied { execute_no_trans } for pid=5348 comm="syz.2.567" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.879130][ T5341] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.565: mark_inode_dirty error [ 90.904317][ T5341] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #16: comm syz.3.565: corrupted inode contents [ 90.928826][ T5341] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 90.952833][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.966986][ T5341] loop3: lost filesystem error report for type 5 error -117 [ 90.967299][ T5341] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #16: comm syz.3.565: corrupted inode contents [ 90.995934][ T5341] EXT4-fs error (device loop3): ext4_truncate:4604: inode #16: comm syz.3.565: mark_inode_dirty error [ 91.010347][ T5341] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 91.020213][ T5341] loop3: lost filesystem error report for type 5 error -117 [ 91.020747][ T5341] EXT4-fs (loop3): 1 truncate cleaned up [ 91.058451][ T5341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.071810][ T5341] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.108520][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.196879][ T5359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5359 comm=syz.0.568 [ 91.215867][ T28] audit: type=1400 audit(2000000043.780:8349): avc: denied { connect } for pid=5361 comm="syz.3.570" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.220519][ T5362] loop3: detected capacity change from 0 to 512 [ 91.262426][ T5362] EXT4-fs: Ignoring removed nobh option [ 91.278252][ T5362] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 91.298787][ T5362] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 91.325016][ T28] audit: type=1400 audit(2000000043.780:8350): avc: denied { getopt } for pid=5361 comm="syz.3.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.409330][ T28] audit: type=1326 audit(2000000043.970:8351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5376 comm="syz.4.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd629acc819 code=0x7ffc0000 [ 91.431264][ T5383] netlink: 'syz.2.578': attribute type 32 has an invalid length. [ 91.452333][ T28] audit: type=1326 audit(2000000043.970:8352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5376 comm="syz.4.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd629acc819 code=0x7ffc0000 [ 91.469131][ T5383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 91.506811][ T5383] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 91.532208][ T5388] netlink: 'syz.4.579': attribute type 1 has an invalid length. [ 91.550276][ T5368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5368 comm=syz.0.573 [ 91.565863][ T5384] gre0 speed is unknown, defaulting to 1000 [ 91.628387][ T5392] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 91.678912][ T5392] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 91.706795][ T5388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.722400][ T5398] bond0: (slave gretap1): making interface the new active one [ 91.730850][ T5398] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 91.744739][ T5399] netlink: 40 bytes leftover after parsing attributes in process `syz.0.582'. [ 91.789863][ T5390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5390 comm=syz.1.580 [ 91.792928][ T5388] macvlan2: entered promiscuous mode [ 91.813091][ T5388] macvlan2: entered allmulticast mode [ 91.819224][ T5388] bond0: entered promiscuous mode [ 91.824377][ T5388] gretap1: entered promiscuous mode [ 91.830377][ T5388] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 91.841251][ T5388] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 91.854754][ T5388] bond0: left promiscuous mode [ 91.864171][ T5388] gretap1: left promiscuous mode [ 91.953432][ T5403] loop1: detected capacity change from 0 to 1024 [ 91.962307][ T5403] EXT4-fs: Ignoring removed bh option [ 91.979639][ T5403] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.993383][ T5403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.584'. [ 92.025160][ T5407] syz.4.585: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 92.043022][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.044090][ T5407] CPU: 0 UID: 0 PID: 5407 Comm: syz.4.585 Not tainted syzkaller #0 PREEMPT(full) [ 92.044188][ T5407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 92.044200][ T5407] Call Trace: [ 92.044206][ T5407] [ 92.044214][ T5407] __dump_stack+0x1d/0x30 [ 92.044240][ T5407] dump_stack_lvl+0x95/0xd0 [ 92.044285][ T5407] dump_stack+0x15/0x1b [ 92.044305][ T5407] warn_alloc+0x145/0x1c0 [ 92.044422][ T5407] ? hrtimer_active+0xe4/0x110 [ 92.044443][ T5407] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 92.044519][ T5407] ? preempt_schedule_common+0x11/0x30 [ 92.044545][ T5407] ? __rcu_read_unlock+0x4e/0x70 [ 92.044772][ T5407] ? avc_has_perm_noaudit+0xab/0x130 [ 92.044801][ T5407] ? should_fail_ex+0x30/0x280 [ 92.044822][ T5407] ? xskq_create+0x36/0xe0 [ 92.044919][ T5407] vmalloc_user_noprof+0x7d/0xb0 [ 92.044947][ T5407] ? xskq_create+0x80/0xe0 [ 92.045028][ T5407] xskq_create+0x80/0xe0 [ 92.045048][ T5407] xsk_init_queue+0x70/0xb0 [ 92.045087][ T5407] xsk_setsockopt+0x3f5/0x640 [ 92.045124][ T5407] ? __pfx_xsk_setsockopt+0x10/0x10 [ 92.045207][ T5407] __sys_setsockopt+0x184/0x200 [ 92.045234][ T5407] __x64_sys_setsockopt+0x64/0x80 [ 92.045272][ T5407] x64_sys_call+0x2327/0x3020 [ 92.045370][ T5407] do_syscall_64+0x12c/0x3b0 [ 92.045392][ T5407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.045413][ T5407] RIP: 0033:0x7fd629acc819 [ 92.045429][ T5407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.045445][ T5407] RSP: 002b:00007fd62851f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 92.045521][ T5407] RAX: ffffffffffffffda RBX: 00007fd629d45fa0 RCX: 00007fd629acc819 [ 92.045534][ T5407] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 92.045546][ T5407] RBP: 00007fd629b62c91 R08: 0000000000000004 R09: 0000000000000000 [ 92.045558][ T5407] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.045571][ T5407] R13: 00007fd629d46038 R14: 00007fd629d45fa0 R15: 00007ffefe499de8 [ 92.045590][ T5407] [ 92.045627][ T5407] Mem-Info: [ 92.071724][ T5409] loop3: detected capacity change from 0 to 128 [ 92.075625][ T5407] active_anon:7383 inactive_anon:3 isolated_anon:0 [ 92.075625][ T5407] active_file:10134 inactive_file:12605 isolated_file:0 [ 92.075625][ T5407] unevictable:0 dirty:319 writeback:0 [ 92.075625][ T5407] slab_reclaimable:3247 slab_unreclaimable:18430 [ 92.075625][ T5407] mapped:29836 shmem:294 pagetables:3172 [ 92.075625][ T5407] sec_pagetables:0 bounce:0 [ 92.075625][ T5407] kernel_misc_reclaimable:0 [ 92.075625][ T5407] free:1876471 free_pcp:12460 free_cma:0 [ 92.328057][ T5407] Node 0 active_anon:29416kB inactive_anon:12kB active_file:40536kB inactive_file:50420kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119228kB dirty:1392kB writeback:0kB shmem:1176kB kernel_stack:3584kB pagetables:12688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 92.357370][ T5407] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 92.400145][ T5418] loop1: detected capacity change from 0 to 512 [ 92.408252][ T5407] lowmem_reserve[]: 0 2879 7858 7858 [ 92.414513][ T5407] Node 0 DMA32 free:2944836kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948360kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 92.447099][ T5417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.589'. [ 92.447862][ T5407] lowmem_reserve[]: 0 0 4978 4978 [ 92.461682][ T5407] Node 0 Normal free:4541784kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29184kB inactive_anon:12kB active_file:40536kB inactive_file:50420kB unevictable:0kB writepending:1392kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:46936kB local_pcp:11972kB free_cma:0kB [ 92.495909][ T5407] lowmem_reserve[]: 0 0 0 0 [ 92.499337][ T5417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.589'. [ 92.511090][ T5407] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 92.524915][ T5407] Node 0 DMA32: 5*4kB (M) 0*8kB 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944836kB [ 92.542260][ T5407] Node 0 Normal: 838*4kB (UM) 954*8kB (UME) 717*16kB (UME) 583*32kB (UME) 417*64kB (UME) 187*128kB (UME) 141*256kB (UM) 119*512kB (UM) 99*1024kB (UM) 60*2048kB (UME) 1008*4096kB (UM) = 4541784kB [ 92.561987][ T5407] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 92.572063][ T5407] 22974 total pagecache pages [ 92.577646][ T5418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.590384][ T5418] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.617433][ T5407] 4 pages in swap cache [ 92.623898][ T5418] EXT4-fs error (device loop1): ext4_do_update_inode:5604: inode #2: comm syz.1.587: corrupted inode contents [ 92.628372][ T5407] Free swap = 124980kB [ 92.637498][ T5418] EXT4-fs error (device loop1): ext4_dirty_inode:6497: inode #2: comm syz.1.587: mark_inode_dirty error [ 92.648123][ T5424] netlink: 44 bytes leftover after parsing attributes in process `syz.0.591'. [ 92.654785][ T5407] Total swap = 124996kB [ 92.668909][ T5418] EXT4-fs error (device loop1): ext4_do_update_inode:5604: inode #2: comm syz.1.587: corrupted inode contents [ 92.682141][ T5407] 2097051 pages RAM [ 92.686085][ T5418] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.587: mark_inode_dirty error [ 92.707393][ T5407] 0 pages HighMem/MovableOnly [ 92.713013][ T5407] 81561 pages reserved [ 92.718966][ T5424] netlink: 59 bytes leftover after parsing attributes in process `syz.0.591'. [ 92.753698][ T5424] netlink: 59 bytes leftover after parsing attributes in process `syz.0.591'. [ 93.012199][ T5441] can0: slcan on ttyS3. [ 93.067482][ T5441] can0 (unregistered): slcan off ttyS3. [ 93.329281][ T5458] pim6reg: entered allmulticast mode [ 93.606143][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.990369][ T5501] netlink: 'syz.0.606': attribute type 10 has an invalid length. [ 94.010652][ T5501] team0: Device vxcan1 is of different type [ 94.039579][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 94.039593][ T28] audit: type=1400 audit(2000000046.610:8435): avc: denied { setopt } for pid=5467 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.138616][ T28] audit: type=1400 audit(2000000046.710:8436): avc: denied { write } for pid=5504 comm="syz.4.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.201146][ T5512] gre0 speed is unknown, defaulting to 1000 [ 94.306959][ T5520] batman_adv: batadv0: Adding interface: gretap1 [ 94.313519][ T5520] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.340339][ T5520] batman_adv: batadv0: Interface activated: gretap1 [ 94.375055][ T5524] batman_adv: batadv0: Interface deactivated: gretap1 [ 94.431322][ T5532] netlink: 'syz.2.626': attribute type 1 has an invalid length. [ 94.460321][ T5532] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 94.471736][ T5532] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 94.510119][ T5537] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.527555][ T5532] bond1: (slave gretap2): making interface the new active one [ 94.536404][ T5532] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 94.552830][ T5532] macvlan2: entered promiscuous mode [ 94.556315][ T5480] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.559263][ T5532] macvlan2: entered allmulticast mode [ 94.580638][ T5532] bond1: entered promiscuous mode [ 94.586028][ T5532] gretap2: entered promiscuous mode [ 94.592077][ T5532] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 94.602403][ T5532] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 94.614491][ T5532] bond1: left promiscuous mode [ 94.619805][ T5532] gretap2: left promiscuous mode [ 94.696695][ T28] audit: type=1400 audit(2000000047.260:8437): avc: denied { bind } for pid=5546 comm="syz.3.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 94.805652][ T5551] netlink: 44 bytes leftover after parsing attributes in process `syz.0.631'. [ 95.106081][ T5557] tipc: Started in network mode [ 95.163261][ T5557] tipc: Node identity ac14140f, cluster identity 4711 [ 95.244252][ T5557] tipc: New replicast peer: 255.255.255.255 [ 95.290497][ T5557] tipc: Enabled bearer , priority 10 [ 95.341976][ T5567] loop1: detected capacity change from 0 to 512 [ 95.364721][ T5567] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.404163][ T5572] loop2: detected capacity change from 0 to 512 [ 95.422518][ T5572] EXT4-fs: Ignoring removed nobh option [ 95.439102][ T5572] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 95.471723][ T5567] loop1: detected capacity change from 0 to 512 [ 95.475243][ T28] audit: type=1400 audit(2000000048.040:8438): avc: denied { mount } for pid=5577 comm="syz.4.643" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 95.501049][ T5572] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #13: comm syz.2.641: inode has both inline data and extents flags [ 95.516365][ T3306] ================================================================== [ 95.524575][ T3306] BUG: KCSAN: data-race in _copy_to_iter / fat_set_state [ 95.531799][ T3306] [ 95.534208][ T3306] write to 0xffff88814558e041 of 1 bytes by task 5567 on cpu 1: [ 95.541929][ T3306] fat_set_state+0x16c/0x1e0 [ 95.546613][ T3306] fat_fill_super+0x179b/0x1c10 [ 95.551469][ T3306] msdos_fill_super+0x24/0x30 [ 95.556191][ T3306] get_tree_bdev_flags+0x291/0x300 [ 95.561313][ T3306] get_tree_bdev+0x1f/0x30 [ 95.565805][ T3306] msdos_get_tree+0x1c/0x30 [ 95.570305][ T3306] vfs_get_tree+0x57/0x1d0 [ 95.574716][ T3306] do_new_mount+0x288/0x8d0 [ 95.579223][ T3306] path_mount+0x4d0/0xbc0 [ 95.583557][ T3306] __se_sys_mount+0x28c/0x2e0 [ 95.588360][ T3306] __x64_sys_mount+0x67/0x80 [ 95.592969][ T3306] x64_sys_call+0x2d61/0x3020 [ 95.597653][ T3306] do_syscall_64+0x12c/0x3b0 [ 95.602244][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.608215][ T3306] [ 95.610524][ T3306] read to 0xffff88814558e000 of 1536 bytes by task 3306 on cpu 0: [ 95.618409][ T3306] _copy_to_iter+0x130/0xea0 [ 95.623097][ T3306] copy_page_to_iter+0x18f/0x2d0 [ 95.628119][ T3306] filemap_read+0x407/0xa10 [ 95.632789][ T3306] blkdev_read_iter+0x22d/0x2e0 [ 95.637858][ T3306] vfs_read+0x6c0/0x7f0 [ 95.642039][ T3306] ksys_read+0xdc/0x1a0 [ 95.646530][ T3306] __x64_sys_read+0x40/0x50 [ 95.651045][ T3306] x64_sys_call+0x2886/0x3020 [ 95.655737][ T3306] do_syscall_64+0x12c/0x3b0 [ 95.660318][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.666298][ T3306] [ 95.668612][ T3306] Reported by Kernel Concurrency Sanitizer on: [ 95.674843][ T3306] CPU: 0 UID: 0 PID: 3306 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 95.683679][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 95.694014][ T3306] ================================================================== [ 95.708915][ T5572] fserror_report: 8 callbacks suppressed [ 95.708932][ T5572] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 95.715181][ T5572] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.641: couldn't read orphan inode 13 (err -117) [ 95.724348][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 95.724368][ C0] EXT4-fs (loop2): initial error at time 2000000048: ext4_orphan_get:1397: inode 13 [ 95.724399][ C0] EXT4-fs (loop2): last error at time 2000000048: ext4_orphan_get:1397: inode 13 [ 95.763209][ T28] audit: type=1400 audit(2000000048.340:8439): avc: denied { getopt } for pid=5579 comm="syz.3.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.797315][ T5572] loop2: lost filesystem error report for type 5 error -117 [ 95.797814][ T5572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.855608][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.327303][ T35] tipc: Node number set to 2886997007