last executing test programs: 51.175741053s ago: executing program 3 (id=330): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48) (async) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r2, 0xcf}, 0x8) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x66, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="00748bd097a83c3707b00a852b9af6cafab296df9cf3dc100f02f01bf024d5720c6abbf9fa338c6a51bfe10b349d70112f73766cd1767ad362d611e9c76b2b327bd9b27e01109bb46995bfe3d7cb37690dbd949e5ca88383f7d08b8a78a8f7d3a73d0a2c46a3", 0x0, 0x7, 0x0, 0xffffffff, 0x0}) (async) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES64=r1], 0xa2) (async) readv(r1, &(0x7f0000000540)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1) 51.118428066s ago: executing program 3 (id=331): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) execve(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x50}}, 0xc880) 51.053292439s ago: executing program 3 (id=332): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000ac0), 0x1, 0x3ce, &(0x7f00000004c0)="$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") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = inotify_init() r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dd49) inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[], 0x69) close(r2) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x86001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x100010, 0x10001, 0x1, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r4, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f170000000c00000000000000ff030000006100615f2e0037755c90412ec1f7bbedd540c27e1c983262223d6d088ad7411c8401582d4063227d5dc39376c552ee5c6788a0056e34ab18f7fa6e2fa74ea33956f047316b9e7817efac7adf035f4407bfea6e9a152c1335ae2f5e94c8b7d6f540ddc7d8d6ee06"], &(0x7f0000005bc0)=""/255, 0x37, 0xff, 0x9, 0x1000}, 0x28) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7, 0x2}, 0x90) sendmmsg(r5, &(0x7f0000002840)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x100, @local, 0x8}, 0x80, &(0x7f0000001700)=[{&(0x7f00000004c0)='^', 0x1}], 0x1}}], 0x1, 0x40058) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x29, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02060500001467701540a0008e000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000001000078002000000000000007f0000010500050002000000050001000600000000000000"], 0x5c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000300"], 0x40}}, 0x20000000) 50.809518564s ago: executing program 3 (id=340): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file0\x00', 0x4040, &(0x7f0000000080)=ANY=[], 0x81, 0x11e2, &(0x7f0000003640)="$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") sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="5cb8", 0x2, 0x4040054, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="9d", 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x7, r0, 0x80000000000000, 0x0) 50.683051141s ago: executing program 3 (id=344): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x8100, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000400)) lstat(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f00000000c0)={[{@resuid={'resuid', 0x3d, r1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@min_batch_time={'min_batch_time', 0x3d, 0xef4}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}]}, 0x3, 0x467, &(0x7f0000000980)="$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") r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000040)={@multicast2, @remote, @multicast1}, 0xc) stat(&(0x7f00000004c0)='./bus\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) write$ppp(0xffffffffffffffff, 0x0, 0x0) r4 = io_uring_setup(0x6858, &(0x7f0000000100)={0x0, 0xf0ce, 0x3480, 0x0, 0x14}) unshare(0x60060200) io_uring_enter(r4, 0x0, 0xcb, 0xf, &(0x7f0000000000)={[0x20]}, 0x18) mount$9p_virtio(&(0x7f0000000380), &(0x7f0000000440)='./bus\x00', &(0x7f0000000480), 0x100d, &(0x7f00000005c0)={'trans=virtio,', {[{@cachetag={'cachetag', 0x3d, '/\xfa^:%):'}}, {@cache_mmap}], [{@dont_appraise}, {@permit_directio}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@obj_role={'obj_role', 0x3d, '(@.'}}, {@seclabel}, {@uid_eq={'uid', 0x3d, r3}}, {@obj_role={'obj_role', 0x3d, 'min_batch_time'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fowner_gt={'fowner>', r1}}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}]}}) rmdir(&(0x7f0000000180)='./bus\x00') 50.376616039s ago: executing program 3 (id=348): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) (async) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r1, 0x4) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="6a0ac4ff0000ecd73d1f73c334a3e64647c9940000711071000000000095"], &(0x7f0000000900)='GPL\x00'}, 0x94) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') r5 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r5) (async) r6 = socket$caif_stream(0x25, 0x1, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x12e, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x6c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_TUPLE={0x14, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x15) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) (async) getresuid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) (async) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r8, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f00000000c0)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) (async) recvmsg(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES16=r10, @ANYRES8=r10], 0x24}, 0x1, 0x0, 0x0, 0x60008801}, 0x8a4) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000140)='./file0\x00', r2}, 0x18) (async) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 50.311794493s ago: executing program 32 (id=348): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) (async) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r1, 0x4) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="6a0ac4ff0000ecd73d1f73c334a3e64647c9940000711071000000000095"], &(0x7f0000000900)='GPL\x00'}, 0x94) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') r5 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r5) (async) r6 = socket$caif_stream(0x25, 0x1, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x12e, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x6c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_TUPLE={0x14, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x15) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) (async) getresuid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) (async) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r8, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f00000000c0)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) (async) recvmsg(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES16=r10, @ANYRES8=r10], 0x24}, 0x1, 0x0, 0x0, 0x60008801}, 0x8a4) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000140)='./file0\x00', r2}, 0x18) (async) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 2.572808449s ago: executing program 4 (id=774): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = dup(r3) accept$unix(r4, 0x0, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c861}, 0x98) (async) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000080)=0x7d94) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x9}) (async, rerun: 32) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) (rerun: 32) ioctl$SG_IO(r8, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)='R\x00\x00\x00\x00E', 0x0, 0x3, 0x10032, 0x5, 0x0}) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r7}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x48}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000020000000f100000000000007a0000000000000095f305e49b243c69"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x3, 0x3, 0x6, 0x5, 0x0, 0x1, 0x1, '\x00', r7, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) (async) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=ANY=[@ANYBLOB="020b0902030000002abd7000fcdbdb250100010000"], 0x18}}, 0x2000e014) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc3, 0xc3, 0x4, [@fwd={0x4}, @float={0x6, 0x0, 0x0, 0x10, 0x8}, @typedef={0x10, 0x0, 0x0, 0x8, 0x4}, @enum64={0x7, 0x5, 0x0, 0x13, 0x0, 0x8, [{0x4, 0x3, 0x1}, {0x3, 0xffff8001}, {0x10, 0xff, 0x9}, {0x3, 0x3, 0x9}, {0x8, 0xff, 0x9}]}, @float={0x3, 0x0, 0x0, 0x10, 0x4}, @datasec={0x1, 0x3, 0x0, 0xf, 0x3, [{0x1, 0x1, 0x9199}, {0x2, 0xced43894, 0x5}, {0x2, 0x10001, 0x2}], "281490"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x3ff}}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000580)=""/206, 0xe0, 0xce, 0x0, 0x7fffffff, 0x10000, @value=r4}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x2, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="85000000ae000000620a00ff000000002e0000000000000095000000000000001810000075ad", @ANYRES32, @ANYBLOB="1000000000000025050000000000000000000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa5, &(0x7f0000000240)=""/165, 0x0, 0x8f, '\x00', 0x0, @fallback=0x2}, 0x1c) (async) syz_emit_ethernet(0x26, &(0x7f0000000000)={@multicast, @broadcast, @val={@val={0x88a8, 0x7, 0x1, 0x2}, {0x8100, 0x2, 0x1}}, {@can={0xc, {{0x4, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "3ae05ef3bf10d836"}}}}, &(0x7f0000000040)={0x0, 0x2, [0xa3f, 0x466, 0xbae, 0xeff]}) 2.324662113s ago: executing program 0 (id=776): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") creat(&(0x7f0000000080)='./file1\x00', 0x0) munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 2.321540554s ago: executing program 4 (id=778): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000180)=r1}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000c00100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x10000a0) dup(r3) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x28, 0x1, 0xfe, 0xb, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x6025, 0x4005, 0x4b, 0x9, 0x1, 0x1, 0x9c13, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$inet6_udp(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x101, 0x2, 0x0, 0x8}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r8, 0x0, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) 2.112786086s ago: executing program 4 (id=781): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x0, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$EVIOCGLED(r3, 0x80404519, 0x0) syz_clone(0xac201300, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 1.897267048s ago: executing program 4 (id=785): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0xa000, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[], 0xe01, 0x1) llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) 1.579573067s ago: executing program 0 (id=788): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fadvise64(r0, 0xfb, 0x2, 0x5) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x80, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x2) 1.53182484s ago: executing program 0 (id=789): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x0) munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipmr_getroute={0x1c, 0x1a, 0x4, 0x70bd28, 0x25dfdbfb, {0x80, 0x20, 0x94, 0x40, 0xfd, 0x4, 0x0, 0x5, 0x700}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x8800) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 1.427576136s ago: executing program 5 (id=791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 1.291435754s ago: executing program 5 (id=792): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) ioctl$SIOCGETSGCNT(r7, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r6, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x2, 0x9}, {0x5, 0x1}, {0x6}}}, 0x24}}, 0x400c810) 1.250719176s ago: executing program 2 (id=793): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d372c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c71756965742c756e695f786c6174653d312c756e695f786c6174653d3100000000000000026d653d6d697865642c72736469722c756e695f786c6174653d302c757466383d302c00"], 0x1, 0x379, &(0x7f0000000880)="$eJzs3U1oI1UcAPB/OmnSLmh7EwUhehO0bPemF1ukC4u9qAQ/DmJwuypJFVostodN60HxKHjUkzcFPXgQjyII4s2DV1cQP/Cge1vZxSfJ5GOapN2u2ErZ3w+avL73/u//JjMk02Hy+sJSNC9Ox6WrV3+OmZlSlJceW4prpZiPLPp2Y1xlQh0AcDpcSyn+TLnRtpnJIaUTmBYAcIy6n/8vRUQt5vOaN78+rH/y6Q8Ap17v7//Zw/occB0g4rVjmRIAcMzGrv/fv6+50v0p938tF+4KAABOq6eefe7x5dWIJ2u1mYj1t7fqW/V4ZNi+fCleiVasxdmYixsR+YlC56HUfTx/YXXlbK1Wa8cv81GPiKleYD0/U1jOuvHVWIy5mO/F9842UkrZ+c9WVxZrXRGx2+7mj/XSVn06zvTy/3Am1oYnHv1Buk8RF1ZXztV6A9TX+/HtiL3hjQqd+S/EXHz34mCYlPp3MK6uXF7sT3oYv1WvxsXBqzB+BeTQCyYAAAAAAAAAAAAAAAAAAAAAAHATC7WB+cH6OanznK+Us7Awob27Pk4e31sfaC9fHyhVU6T0xxsP1d/JYt/6QKPr82xZSBAAAAAAAAAAAAAAAAAAAAAGNrcr0Wi11jY2t3eaxUJ7Y3N7KiI6Na9+88lXszHe5yaFcp6iGjFIUeul3Wk2UtbvnLKI8fCsk7xf89HngxkX+1QHWzFxGtWDm1qtO+776f1hzb1Zf+S/h32ymLyBWWEaj46MvH5nPqVbeaEGhXPFmup49isppULNW8Xwy8+PDxiliPKt77id5lQc3Cd1CtfTy3f3X/3Glyn3wINzT19578Pfmo1WJ3N092BlY/NGajZK/c5HyN4bLnV3wfDYKEVeKBWPhPJhA+7tr2lk3//+zD3vfntw9igPa1Kx6fXO8TzSOcs359PRcSp5oTPNkabZYfh0byNaa9MjB/+E/T5W+Bf79K4Pvvg4pR9/PWpU4U1iauxto/TfvPsAAAAAAAAAAAAAAAAAAABFhe+K97503c4bpg+LeviJE5oeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJyI4f//LxT2dmOk5iiF6+0JUdW1jc2IyoTMf/0PWwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO3qnwAAAP//7gFmJg==") (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x57) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d000f000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) (async) listen(r0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async, rerun: 32) epoll_create1(0xf1628dce379125d) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004824}, 0x4000) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600)}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) recvfrom(r3, &(0x7f0000000000)=""/44, 0x2c, 0x0, 0x0, 0x0) 1.203630019s ago: executing program 2 (id=794): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100000e000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000090000020013"], 0x70}}, 0x0) 1.132778613s ago: executing program 0 (id=795): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1000003, &(0x7f0000000380)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@delalloc}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x30012}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x38}, 0x1, 0x2000000}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) getdents64(r2, &(0x7f0000000300)=""/175, 0xaf) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x20) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000140)=0x3) sendfile(r0, r5, 0x0, 0x200) 1.132491173s ago: executing program 2 (id=796): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x0, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$EVIOCGLED(r3, 0x80404519, 0x0) syz_clone(0xac201300, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 1.132020283s ago: executing program 4 (id=797): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") creat(&(0x7f0000000080)='./file1\x00', 0x0) munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) (fail_nth: 5) 1.085346796s ago: executing program 5 (id=798): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x3, 0x100000, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000040)=[{0x10, 0x84, 0x8}], 0x10}, 0x41) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)={0x4bc, 0x1, 0x5, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x1}, 0x4, 0x8, 0x9, 0x7965, 0xf, 'syz0\x00', "dc9446f9640955fe7b2d1ed5c5f34fa6e42e3293dd4c81786ab6e7b9456411f4", "ed550ac5197ae294deef00eaa36b7c7c7407c790b925d65140bff1dfe7c7e408", [{0x8, 0x3, {0x0, 0x2}}, {0x3, 0x2, {0x3, 0x887}}, {0x215e, 0xa, {0x1, 0x2}}, {0x7f, 0x164, {0x1, 0x6}}, {0x0, 0x1000, {0x1, 0x4}}, {0x9, 0x1ff, {0x0, 0x3}}, {0xf, 0x9, {0x2, 0x3540000}}, {0x6, 0x7, {0x2, 0x9}}, {0x4eb, 0x8, {0x0, 0xfffffff7}}, {0x3, 0x2, {0x3, 0x6}}, {0x81, 0x6, {0x0, 0x3}}, {0x3, 0xe98d, {0x0, 0x5}}, {0x9, 0x6, {0x3, 0x2}}, {0xffff, 0x4, {0x1, 0xda5}}, {0x9, 0x6, {0x3, 0x4281}}, {0x6, 0x163, {0x1, 0x6}}, {0xb0c, 0x7fff, {0x0, 0xe}}, {0x0, 0x1e, {0x0, 0xfff}}, {0x3, 0xf395, {0x3, 0x400}}, {0x1ff, 0xa625, {0x1, 0x7}}, {0x1000, 0x9, {0x0, 0x848}}, {0x10, 0x4, {0x0, 0x4}}, {0x3, 0x6, {0x3, 0x7}}, {0xe7dc, 0x9, {0x2, 0xb}}, {0x1, 0x6, {0x0, 0x5}}, {0x1d12, 0x10, {0x1, 0x81}}, {0x3, 0x0, {0x3, 0x6}}, {0x8, 0x961, {0x2, 0x6e90}}, {0x0, 0x95c0, {0x2, 0x10000000}}, {0x1, 0xca25, {0x0, 0x6}}, {0x10, 0x1000, {0x2, 0x80000000}}, {0x7, 0x3, {0x0, 0x101}}, {0xa9, 0x9, {0x3, 0x5}}, {0x4, 0x0, {0x0, 0xfffffffb}}, {0x1, 0x0, {0x3, 0x3}}, {0x2, 0x1, {0x0, 0xf}}, {0x5, 0x1, {0x3, 0x10000}}, {0x8c95, 0x7, {0x0, 0x7}}, {0xafef, 0x6, {0x2, 0xd}}, {0x7, 0xd, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x10001}, 0xf7, 0xf, 0x8, 0x0, 0xf, 'syz0\x00', "5098a65a975fd4133a63c7f0e941b9c57603c3f2f20f810f532c3f9c500849f9", "b82fef45560ec21c3b48ecbd4728b1c143d9e3f1b4a42f268ae07c0848ec4ba1", [{0x5, 0x7fff, {0x3, 0x7}}, {0x8, 0x5, {0x2, 0x3e}}, {0xf, 0xfff0, {0x2, 0x1}}, {0xb, 0x80, {0x3, 0x2}}, {0x6d2, 0xb8, {0x3, 0x8}}, {0x2, 0xc12, {0x2, 0x4}}, {0xc, 0xffff, {0x2, 0x7}}, {0x7fff, 0x10, {0x0, 0xffff7fff}}, {0x0, 0x6, {0x1, 0x1}}, {0xfff8, 0x5, {0x2, 0x4}}, {0x8, 0xd1, {0x0, 0x6}}, {0x400, 0x4, {0x1, 0xfffffffb}}, {0xb33, 0x2, {0x1, 0x7fffffff}}, {0x40, 0x349a, {0x2, 0x9}}, {0xac01, 0x5, {0x3, 0xc6e}}, {0x1, 0x3, {0x3, 0x80000001}}, {0x39, 0x5, {0x2, 0x63}}, {0x8, 0xfff7, {0x0, 0x9}}, {0x4, 0xd, {0x0, 0x73}}, {0x5, 0xe56, {0x3, 0x5}}, {0x4, 0x6, {0x0, 0x496c128d}}, {0x8b7, 0x1f7, {0x1, 0x1}}, {0x7, 0x6, {0xff9afaa6e292170e, 0x9}}, {0x8, 0x7, {0x0, 0x8}}, {0x4, 0x3, {0x1, 0x7f058e4b}}, {0x6, 0x8, {0x5, 0x8}}, {0x7, 0xfffd, {0x0, 0x3}}, {0x4, 0x5, {0x2, 0x1}}, {0xe3, 0x6, {0x0, 0x7f}}, {0xb65e, 0x0, {0x3, 0x8}}, {0x0, 0x4, {0x2, 0x5}}, {0x5, 0xf323, {0x2, 0xf}}, {0x9, 0x40, {0x1, 0x9}}, {0x1000, 0x3, {0x1, 0xd0}}, {0x7, 0xfffd, {0x2, 0x8}}, {0x5, 0x29, {0x2, 0x9}}, {0x401, 0x6, {0x3, 0x1}}, {0x3, 0x7ff, {0x1, 0x9}}, {0x8, 0x1, {0x2, 0x52}}, {0x2, 0x8, {0x1, 0xffff}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000300)={0x0, 0x114, 0x8, 0x4, 0x114, 0x1}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r5 = getpid() r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) kcmp(r5, r6, 0x1, r0, r0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x3, 0x25e, [0x0, 0x200000000400, 0x200000000714, 0x20000000118a], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, 0x2d6) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x20010, 0xffffffffffffffff, 0x8000000) setsockopt(r0, 0x0, 0xfffffff9, &(0x7f0000000280)="d0ac9dff99d97d399941e426ba54bd2f44f4aa", 0x13) r10 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents64(r10, &(0x7f0000000300)=""/123, 0x7b) syz_io_uring_setup(0x16c4, &(0x7f0000000380)={0x0, 0x5121, 0x80, 0x3, 0x258, 0x0, r10}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) syz_open_dev$MSR(&(0x7f00000001c0), 0x8001, 0x0) syz_io_uring_complete(r11) 954.981004ms ago: executing program 2 (id=799): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fadvise64(r0, 0xfb, 0x2, 0x5) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x80, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x2) 879.008028ms ago: executing program 2 (id=800): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") creat(&(0x7f0000000080)='./file1\x00', 0x0) munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x1e00}], 0x1) 827.235631ms ago: executing program 1 (id=801): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4054}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x7ffffffe, 0x5}}]}}}]}, 0x40}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x48800) 777.107444ms ago: executing program 5 (id=802): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup3(r1, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',\x00']) timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r4, 0x7) close_range(r3, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)={0x18d040, 0x98, 0x23}, 0x18) mkdirat(r5, &(0x7f0000000140)='./file1\x00', 0x40) creat(&(0x7f0000000200)='./file1\x00', 0x12e) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) dup3(r1, r0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',\x00']) (async) timer_create(0xfffffff9, 0x0, &(0x7f0000000040)) (async) timer_settime(r2, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) (async) gettid() (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) (async) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) tkill(r4, 0x7) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) setitimer(0x1, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)={0x18d040, 0x98, 0x23}, 0x18) (async) mkdirat(r5, &(0x7f0000000140)='./file1\x00', 0x40) (async) 776.771504ms ago: executing program 1 (id=803): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2ac}, {&(0x7f0000000bc0)="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", 0x1cb}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d39ff6d5cca97", 0x47}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5435e3b81aaba048fa4264d4c15513c91e9230a8e4b7635b58dc631604c311225f21db11c7101278ef4c7", 0xe2}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r0, 0x409, 0xb) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x2f, 0xe, 0xf3, 0x4, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x20, 0x4, 0x4}}) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@ipv4_newaddr={0x0, 0x14, 0x100, 0x70bd2a, 0x25dfdbfd, {0x2, 0x10, 0x80, 0xfe, r3}, [@IFA_FLAGS={0x0, 0x8, 0x310}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_RT_PRIORITY={0x0, 0x9, 0x1}, @IFA_LABEL={0x0, 0x3, 'lo\x00'}, @IFA_LOCAL={0x0, 0x2, @loopback}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x2}, @IFA_ADDRESS={0x0, 0x1, @dev={0xac, 0x14, 0x14, 0x28}}, @IFA_CACHEINFO={0x0, 0x6, {0x0, 0x4, 0x7, 0xa}}]}, 0x40}}, 0x869c89efddc0c6e2) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 776.145134ms ago: executing program 0 (id=804): r0 = gettid() timer_create(0x1, &(0x7f0000000080)={0x0, 0x25, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='syzkaller\x00', 0x40, 0x0, 0x0, 0x0, 0x2c, '\x00', r3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r5, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x78, 0x2, {{0x8, 0x1, 0x7fff, 0x2, 0xf, 0xfff}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xa, 0xffff7fff, 0x8ff4, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x58, 0x2}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x6, 0x0, 0x1, 0x6, 0x8ef}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0xa8}}, 0x4000010) r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff91, 0xfffffffffffffff8}, 0x126a0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x7ff, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000500)='\t!=&\x00\xaeH\xfc\xf7\xf7\xd4\x1c\x94\xcb\r^\xd6<\xda9\xdc\xac(\x8cj\x13hk\xfc\xa8\v#)\xddk\x93\x12\xbfh\x95\xb9\xb7-:\xebr\xf2%\xaf\x8fH\x89MO\xf7\xbe\x1b\xd7\xd7S\b\x00\x00\x00\x00\x00\x00') fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000280)=0x9, 0x4) sendto(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x4000, 0x0, 0x0) 662.31727ms ago: executing program 5 (id=805): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0xe}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x4008000) 397.451586ms ago: executing program 4 (id=806): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @broadcast, @multicast2}, "0e70a4b52dd6ac08"}}}}}, 0x0) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed721", 0xa) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 394.782266ms ago: executing program 5 (id=816): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0xa000, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[], 0xe01, 0x1) llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) 269.366423ms ago: executing program 1 (id=807): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cf) write$binfmt_elf32(r0, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000003d80)=0x6, 0x4) listen(r2, 0x81) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cf) (async) write$binfmt_elf32(r0, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) (async) close(r0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000003d80)=0x6, 0x4) (async) listen(r2, 0x81) (async) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async) 261.987354ms ago: executing program 2 (id=808): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$P9_RREAD(r2, &(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYRESOCT=r2], 0x100b) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000080}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x10c, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff5e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1989}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3cf}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xdd8f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c044) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xcec5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x40080) 245.604965ms ago: executing program 1 (id=809): open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x125802, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000000c0)={0x29}) r4 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}], 0x10) r5 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6000030800783a00fc010000000000000000000000000000fe8000000000000000000000000000aa0200907800000000605b52ab00002b00fc000000000000000000000000000000fc0000000000000000000000000000000004040201000000fc020000000000000000000000000000fe88000000003fa100000000000000018802000000000000c910fe8000000000000000000000000000bb000000000000"], 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x0, 0x7ff}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001000000", 0x24) 153.25375ms ago: executing program 0 (id=810): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r1, &(0x7f00000004c0)="01", 0x1) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYRESHEX=r3, @ANYBLOB="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", @ANYRESDEC=r0], 0x7e0}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x200, 0x9, 0x16edaf716eb73634}, 0x18) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000000)=0xb, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0xb0, "f8b4986729abb28bfa40dda4d350fe23af2734ec4f95d6de0305369b4e5dc3a58f6d3ff4fa589eddc067e8c5c2061ad9a76062dc334dae4c713267e1c2df1959eaddfb39156efb7fcba21fefef3fea204461b4f165bf0bae1a4fb5ebb728baa3c0e7ac14a7e62c1fd58a64976c26261ceefa12171a7896bc3c6e354abd1b72885bcc97a3d5662303ef534846d86a1847d562d121fb78f48b325a352cd0bde0b2fbd5bf0c7ae50da9e6758114b0bd3f9a"}, &(0x7f0000000240)=0xb8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={r6, @in={{0x2, 0x4e23, @local}}, 0x7, 0xfffc, 0x10000, 0x0, 0x14, 0x8, 0x9}, 0x9c) fchmodat(r4, &(0x7f0000000140)='./file0\x00', 0x80) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840) write$nci(r7, &(0x7f0000000640)=ANY=[@ANYBLOB="61050208030480"], 0x61) 86.726534ms ago: executing program 1 (id=811): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x10, 0x6, 0x0, 0xffffffffffffffff, 0x3}, 0x48) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x564, &(0x7f0000000b40)="$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") 0s ago: executing program 1 (id=812): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0xd, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x5f]}}, &(0x7f0000000000)=""/37, 0x2a, 0x25, 0x1, 0x4}, 0x28) kernel console output (not intermixed with test programs): 7.549143][ T4195] reg_set_min_max+0x1c8/0x260 [ 47.553990][ T4195] check_cond_jmp_op+0x13bd/0x1a80 [ 47.559160][ T4195] do_check+0x440c/0x9060 [ 47.563601][ T4195] do_check_common+0xd0f/0x1630 [ 47.568475][ T4195] bpf_check+0x2f6d/0xc7e0 [ 47.572902][ T4195] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 47.578983][ T4195] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 47.584641][ T4195] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 47.590576][ T4195] ? try_charge_memcg+0x215/0xa10 [ 47.595602][ T4195] ? _find_next_zero_bit+0x64/0xa0 [ 47.600740][ T4195] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 47.606949][ T4195] ? _find_next_zero_bit+0x29/0xa0 [ 47.612114][ T4195] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 47.618263][ T4195] ? css_rstat_updated+0xbb/0x280 [ 47.623298][ T4195] ? mod_memcg_state+0x182/0x260 [ 47.628386][ T4195] ? __rcu_read_unlock+0x4e/0x70 [ 47.633404][ T4195] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 47.639244][ T4195] ? pcpu_alloc_noprof+0xb08/0x1010 [ 47.644455][ T4195] ? should_fail_ex+0x30/0x280 [ 47.649315][ T4195] ? __kmalloc_noprof+0x2a3/0x580 [ 47.654361][ T4195] ? security_bpf_prog_load+0x60/0x140 [ 47.659884][ T4195] ? selinux_bpf_prog_load+0xac/0xd0 [ 47.665184][ T4195] ? security_bpf_prog_load+0x9e/0x140 [ 47.670715][ T4195] bpf_prog_load+0xf76/0x1140 [ 47.675468][ T4195] ? security_bpf+0x2b/0x90 [ 47.680019][ T4195] __sys_bpf+0x469/0x7b0 [ 47.684351][ T4195] __x64_sys_bpf+0x41/0x50 [ 47.688872][ T4195] x64_sys_call+0x28e1/0x3000 [ 47.693607][ T4195] do_syscall_64+0xc0/0x2a0 [ 47.698188][ T4195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.704113][ T4195] RIP: 0033:0x7f57026caeb9 [ 47.708567][ T4195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.728242][ T4195] RSP: 002b:00007f5701127028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.731628][ T4191] loop0: detected capacity change from 0 to 1024 [ 47.736664][ T4195] RAX: ffffffffffffffda RBX: 00007f5702945fa0 RCX: 00007f57026caeb9 [ 47.736715][ T4195] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 47.759071][ T4195] RBP: 00007f5702738c1f R08: 0000000000000000 R09: 0000000000000000 [ 47.767049][ T4195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.775086][ T4195] R13: 00007f5702946038 R14: 00007f5702945fa0 R15: 00007ffc3a4045d8 [ 47.783080][ T4195] [ 47.786091][ T4195] ---[ end trace 0000000000000000 ]--- [ 47.793839][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 47.804082][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.817575][ T4191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.868768][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.023270][ T4218] IPv6: Can't replace route, no match found [ 48.041240][ T4216] netlink: 44 bytes leftover after parsing attributes in process `syz.1.212'. [ 48.062500][ T4216] loop1: detected capacity change from 0 to 256 [ 48.093286][ T4234] loop0: detected capacity change from 0 to 512 [ 48.112158][ T4234] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.129982][ T4234] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.216: bad orphan inode 16 [ 48.140182][ T4234] ext4_test_bit(bit=15, block=4) = 0 [ 48.145496][ T4234] EXT4-fs (loop0): 1 orphan inode deleted [ 48.152866][ T4234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.169720][ T4234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.216'. [ 48.178643][ T4234] netlink: 36 bytes leftover after parsing attributes in process `syz.0.216'. [ 48.201035][ T4234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.212913][ T4237] 9pnet_fd: Insufficient options for proto=fd [ 48.250752][ T4240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.218'. [ 48.330768][ T4246] loop0: detected capacity change from 0 to 2048 [ 48.453892][ T4259] vxcan2: entered allmulticast mode [ 48.565333][ T4242] loop1: detected capacity change from 0 to 1024 [ 48.595457][ T4242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.752889][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.992191][ T4292] net_ratelimit: 36 callbacks suppressed [ 48.992232][ T4292] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 49.068258][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 49.137284][ T4315] No such timeout policy "syz0" [ 49.144339][ T4313] syzkaller0: entered promiscuous mode [ 49.149909][ T4313] syzkaller0: entered allmulticast mode [ 49.178229][ T3845] bond1: (slave bond0): failed to get link speed/duplex [ 49.278392][ T4331] loop0: detected capacity change from 0 to 512 [ 49.288296][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 49.305805][ T4331] EXT4-fs: inline encryption not supported [ 49.311852][ T4331] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.363312][ T4338] loop1: detected capacity change from 0 to 1024 [ 49.388305][ T4331] EXT4-fs error (device loop0): ext4_orphan_get:1391: comm syz.0.250: inode #13: comm syz.0.250: iget: illegal inode # [ 49.410297][ T3845] bond1: (slave bond0): failed to get link speed/duplex [ 49.483655][ T4338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.526274][ T3325] bond1: (slave bond0): failed to get link speed/duplex [ 49.557508][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.574713][ T4349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.574855][ T4331] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.250: couldn't read orphan inode 13 (err -117) [ 49.596216][ T4331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.638239][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 49.646483][ T4360] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 49.653073][ T4360] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 49.660785][ T4360] vhci_hcd vhci_hcd.0: Device attached [ 49.669363][ T4359] netlink: 'syz.2.257': attribute type 1 has an invalid length. [ 49.684277][ T4359] bond1: entered promiscuous mode [ 49.689748][ T4359] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.715039][ T4359] bond2 (unregistering): Released all slaves [ 49.748251][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 49.767148][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.798535][ T4362] vhci_hcd: connection closed [ 49.798880][ T3325] vhci_hcd vhci_hcd.4: stop threads [ 49.808803][ T3325] vhci_hcd vhci_hcd.4: release socket [ 49.814184][ T3325] vhci_hcd vhci_hcd.4: disconnect device [ 49.846144][ T4391] lo: entered allmulticast mode [ 49.852781][ T4390] lo: left allmulticast mode [ 49.871232][ T3388] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 49.877706][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 49.887771][ T4394] loop1: detected capacity change from 0 to 512 [ 49.894692][ T4394] EXT4-fs: Ignoring removed oldalloc option [ 49.908320][ T4397] iso9660: Unknown parameter '.' [ 49.925430][ T4394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.943830][ T4394] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.961495][ T4394] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.267: iget: bad i_size value: 2533274857506816 [ 49.982337][ T4395] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.267: iget: bad i_size value: 2533274857506816 [ 49.995084][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 50.005241][ T4394] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.267: iget: bad i_size value: 2533274857506816 [ 50.017907][ T4395] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.267: iget: bad i_size value: 2533274857506816 [ 50.081870][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.108111][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 50.108126][ T29] audit: type=1400 audit(1769679142.134:410): avc: denied { create } for pid=4417 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.141290][ T4416] __nla_validate_parse: 7 callbacks suppressed [ 50.141334][ T4416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 50.144105][ T29] audit: type=1326 audit(1769679142.164:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9216c5aeb9 code=0x7ffc0000 [ 50.168963][ T4416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.271'. [ 50.179507][ T29] audit: type=1326 audit(1769679142.164:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9216c5aeb9 code=0x7ffc0000 [ 50.211995][ T29] audit: type=1326 audit(1769679142.224:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9216c5aeb9 code=0x7ffc0000 [ 50.235317][ T29] audit: type=1326 audit(1769679142.224:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9216c5aeb9 code=0x7ffc0000 [ 50.245818][ T3325] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 50.258554][ T29] audit: type=1326 audit(1769679142.224:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9216c5ac22 code=0x7ffc0000 [ 50.266037][ T3325] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 50.288976][ T29] audit: type=1326 audit(1769679142.224:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9216c5acb7 code=0x7ffc0000 [ 50.296913][ T3415] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 50.319487][ T29] audit: type=1326 audit(1769679142.224:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9216c17c51 code=0x7ffc0000 [ 50.350041][ T29] audit: type=1326 audit(1769679142.224:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f9216c5bcc9 code=0x7ffc0000 [ 50.350097][ T29] audit: type=1326 audit(1769679142.224:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9216c17cbb code=0x7ffc0000 [ 50.552023][ T4431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.570676][ T4440] nfs: Unknown parameter '' [ 50.618440][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.632186][ T4443] netlink: 'syz.0.280': attribute type 2 has an invalid length. [ 50.640576][ T4443] netlink: 'syz.0.280': attribute type 8 has an invalid length. [ 50.648785][ T4443] netlink: 132 bytes leftover after parsing attributes in process `syz.0.280'. [ 50.795744][ T4447] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 50.806031][ T4447] SELinux: failed to load policy [ 50.888388][ T3415] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 50.922314][ T4457] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 50.930701][ T4457] bond2: option packets_per_slave: allowed values 0 - 65535 [ 50.945303][ T4457] bond2 (unregistering): Released all slaves [ 50.962679][ T4453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.976864][ T4453] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.028749][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.078367][ T3380] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.091429][ T4481] batman_adv: batadv0: Adding interface: dummy0 [ 51.097703][ T4481] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.125568][ T4481] batman_adv: batadv0: Interface activated: dummy0 [ 51.134844][ T4480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 51.161930][ T4485] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.0.292: corrupted xattr block 95: invalid header [ 51.237228][ T4485] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.292: bg 0: block 7: invalid block bitmap [ 51.305589][ T4485] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 51.337772][ T4485] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #11: comm syz.0.292: corrupted xattr block 95: invalid header [ 51.359586][ T4485] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 51.369207][ T4485] EXT4-fs (loop0): 1 orphan inode deleted [ 51.384580][ T4502] netlink: 'syz.4.298': attribute type 16 has an invalid length. [ 51.387555][ T4485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.392373][ T4502] netlink: 'syz.4.298': attribute type 17 has an invalid length. [ 51.410281][ T4485] 9p: Bad value for 'rfdno' [ 51.482320][ T4502] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.489544][ T4502] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.503290][ T4502] batman_adv: batadv0: Interface deactivated: dummy0 [ 51.507900][ T4472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.531371][ T4523] netlink: 40 bytes leftover after parsing attributes in process `syz.3.304'. [ 51.566975][ T4502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.567489][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.577237][ T4502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.617460][ T4527] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.630077][ T4527] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 51.661920][ T2688] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.671010][ T2688] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.730609][ T4537] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1002 sclass=netlink_tcpdiag_socket pid=4537 comm=syz.1.310 [ 51.734043][ T2688] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.743428][ T4537] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1001 sclass=netlink_tcpdiag_socket pid=4537 comm=syz.1.310 [ 51.752286][ T2688] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.843043][ T4535] EXT4-fs error (device loop0): ext4_find_extent:903: inode #2: comm syz.0.308: inode has invalid extent depth: 9 [ 51.855211][ T2688] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.864207][ T2688] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.865538][ T4535] EXT4-fs (loop0): Remounting filesystem read-only [ 51.873496][ T2688] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.888446][ T2688] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.964886][ T4558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'. [ 51.991308][ T4560] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.998442][ T4557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.316'. [ 52.005526][ T4560] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 52.005634][ T4560] System zones: 0-1, 3-36 [ 52.094686][ T4560] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.317: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 52.148463][ T4581] process 'syz.4.322' launched '/dev/fd/5' with NULL argv: empty string added [ 52.159125][ T4588] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 52.175290][ T4578] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4578 comm=syz.0.321 [ 52.175881][ T4581] geneve2: entered promiscuous mode [ 52.215550][ T2688] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 52.255343][ T2688] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 52.266689][ T2688] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 52.290484][ T4592] set_capacity_and_notify: 11 callbacks suppressed [ 52.290500][ T4592] loop1: detected capacity change from 0 to 512 [ 52.303689][ T2688] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 52.378603][ T4592] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c018, mo2=0002] [ 52.389851][ T4592] System zones: 1-12 [ 52.394527][ T4592] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.323: bg 0: block 288: padding at end of block bitmap is not set [ 52.409315][ T4592] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 52.428304][ T4592] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.323: attempt to clear invalid blocks 1024 len 1 [ 52.482500][ T4605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.329'. [ 52.499258][ T4592] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.323: invalid indirect mapped block 1819239214 (level 0) [ 52.541037][ T4592] EXT4-fs (loop1): 1 truncate cleaned up [ 52.624226][ T4616] loop3: detected capacity change from 0 to 512 [ 52.674280][ T4616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 52.748489][ T4619] loop0: detected capacity change from 0 to 1024 [ 52.768293][ T4619] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.797878][ T4619] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (36712!=0) [ 52.807235][ T4619] EXT4-fs (loop0): group descriptors corrupted! [ 52.877673][ T4635] Cannot find del_set index 4 as target [ 52.981140][ T4639] loop3: detected capacity change from 0 to 8192 [ 53.025190][ T3311] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 53.032824][ T3311] FAT-fs (loop3): Filesystem has been set read-only [ 53.048494][ T3311] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 53.059919][ T4649] Invalid argument reading file caps for ./file0 [ 53.146306][ T4652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.346'. [ 53.355172][ T2688] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.421866][ T2688] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.451382][ T2688] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.502232][ T2688] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.572664][ T2688] bridge_slave_1: left allmulticast mode [ 53.572733][ T2688] bridge_slave_1: left promiscuous mode [ 53.572965][ T2688] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.575906][ T2688] bridge_slave_0: left allmulticast mode [ 53.575951][ T2688] bridge_slave_0: left promiscuous mode [ 53.576087][ T2688] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.584407][ T4645] loop0: detected capacity change from 0 to 1024 [ 53.743736][ T2688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.765107][ T2688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.770199][ T4679] loop0: detected capacity change from 0 to 512 [ 53.780846][ T2688] bond0 (unregistering): Released all slaves [ 53.790037][ T4679] ext4 filesystem being mounted at /79/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.790534][ T2688] bond1 (unregistering): Released all slaves [ 53.860804][ T2688] hsr_slave_0: left promiscuous mode [ 53.863671][ T4693] loop0: detected capacity change from 0 to 512 [ 53.873662][ T2688] hsr_slave_1: left promiscuous mode [ 53.898633][ T2688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.906042][ T2688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.948530][ T2688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.955959][ T2688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.981993][ T2688] veth1_macvtap: left promiscuous mode [ 53.994089][ T2688] veth0_macvtap: left promiscuous mode [ 53.999944][ T2688] veth1_vlan: left promiscuous mode [ 54.005344][ T2688] veth0_vlan: left promiscuous mode [ 54.084660][ T2688] team0 (unregistering): Port device team_slave_1 removed [ 54.094384][ T2688] team0 (unregistering): Port device team_slave_0 removed [ 54.143176][ T4714] net_ratelimit: 26 callbacks suppressed [ 54.143262][ T4714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.169944][ T4716] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 54.180861][ T4716] bond2 (unregistering): Released all slaves [ 54.200854][ T4718] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.228457][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 54.253559][ T4721] loop2: detected capacity change from 0 to 256 [ 54.319262][ T4663] chnl_net:caif_netlink_parms(): no params data found [ 54.356639][ T4663] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.363757][ T4663] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.374012][ T4663] bridge_slave_0: entered allmulticast mode [ 54.392445][ T4663] bridge_slave_0: entered promiscuous mode [ 54.413283][ T4663] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.420411][ T4663] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.427652][ T4663] bridge_slave_1: entered allmulticast mode [ 54.435605][ T4663] bridge_slave_1: entered promiscuous mode [ 54.445522][ T4743] loop4: detected capacity change from 0 to 512 [ 54.464642][ T4663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.474886][ T4663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.494067][ T4663] team0: Port device team_slave_0 added [ 54.500918][ T4743] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.510980][ T4743] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 54.528205][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 54.546981][ T4663] team0: Port device team_slave_1 added [ 54.598205][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 54.640470][ T4759] loop0: detected capacity change from 0 to 512 [ 54.650561][ T4663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.657508][ T4663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.683424][ T4663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.689362][ T4759] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.714545][ T4663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.721597][ T4663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.747546][ T4663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.776679][ T4759] EXT4-fs (loop0): 1 truncate cleaned up [ 54.818274][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 54.828037][ T4663] hsr_slave_0: entered promiscuous mode [ 54.834296][ T4663] hsr_slave_1: entered promiscuous mode [ 54.840611][ T4663] debugfs: 'hsr0' already exists in 'hsr' [ 54.846343][ T4663] Cannot create hsr debugfs directory [ 54.968410][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 54.997406][ T4663] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 55.017284][ T4663] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 55.024570][ T3296] loop2: p1 p2[DM] p4 [ 55.030836][ T3296] loop2: p1 size 196608 extends beyond EOD, truncated [ 55.040738][ T4663] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 55.049891][ T3296] loop2: p2 start 4292936063 is beyond EOD, truncated [ 55.056748][ T3296] loop2: p4 size 50331648 extends beyond EOD, truncated [ 55.071449][ T4663] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 55.084014][ T4770] loop2: p1 p2[DM] p4 [ 55.089972][ T4770] loop2: p1 size 196608 extends beyond EOD, truncated [ 55.109981][ T4770] loop2: p2 start 4292936063 is beyond EOD, truncated [ 55.115951][ T4663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.116792][ T4770] loop2: p4 size 50331648 extends beyond EOD, truncated [ 55.138392][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 55.150249][ T4663] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.177171][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.184343][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.191553][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 55.195316][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 55.211902][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 55.211914][ T29] audit: type=1326 audit(1769679147.244:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7febeb47aeb9 code=0x7ffc0000 [ 55.213496][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.248347][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.257822][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 55.269309][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 55.279141][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 55.309010][ T4801] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 55.322900][ T4801] System zones: 1-12 [ 55.327862][ T4801] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.373: Directory hole found for htree index block 0 [ 55.341893][ T4801] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 55.350442][ T4801] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.373: Directory hole found for htree index block 0 [ 55.368390][ T4801] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 55.375630][ T4663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.382898][ T4801] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.373: Directory hole found for htree index block 0 [ 55.398576][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 55.405907][ T4801] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.373: Directory hole found for htree index block 0 [ 55.508426][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 55.568828][ T4663] veth0_vlan: entered promiscuous mode [ 55.576847][ T4663] veth1_vlan: entered promiscuous mode [ 55.592492][ T4663] veth0_macvtap: entered promiscuous mode [ 55.600284][ T4663] veth1_macvtap: entered promiscuous mode [ 55.611914][ T4663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.622134][ T4663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.632899][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.642171][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.652631][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.661774][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.684115][ T29] audit: type=1400 audit(1769679147.714:737): avc: denied { mounton } for pid=4663 comm="syz-executor" path="/root/syzkaller.hnG4fA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 55.748546][ T4843] netlink: 'syz.5.349': attribute type 10 has an invalid length. [ 55.757858][ T4843] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.766651][ T4843] bond0: (slave team0): Enslaving as an active interface with an up link [ 55.775612][ T4844] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 55.832565][ T4853] netlink: 'syz.5.378': attribute type 11 has an invalid length. [ 55.848603][ T4853] netlink: 140 bytes leftover after parsing attributes in process `syz.5.378'. [ 55.896676][ T29] audit: type=1400 audit(1769679147.924:738): avc: denied { create } for pid=4859 comm="syz.1.380" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.922537][ T4863] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.936916][ T29] audit: type=1400 audit(1769679147.954:739): avc: denied { mounton } for pid=4859 comm="syz.1.380" path="/68/file0" dev="tmpfs" ino=389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.961430][ T4863] EXT4-fs (loop1): 1 orphan inode deleted [ 55.967179][ T4863] EXT4-fs (loop1): 1 truncate cleaned up [ 55.983358][ T4868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.381'. [ 56.042055][ T29] audit: type=1400 audit(1769679148.074:740): avc: denied { unlink } for pid=3312 comm="syz-executor" name="file0" dev="tmpfs" ino=389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.075521][ T4879] netlink: 188 bytes leftover after parsing attributes in process `syz.0.385'. [ 56.085353][ T4877] netlink: 'syz.2.384': attribute type 29 has an invalid length. [ 56.094791][ T4875] netlink: 'syz.1.386': attribute type 2 has an invalid length. [ 56.105710][ T29] audit: type=1400 audit(1769679148.114:741): avc: denied { create } for pid=4878 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 56.117361][ T4881] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.156837][ T4881] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 56.168079][ T4881] System zones: 0-2, 18-18, 34-34 [ 56.173437][ T4881] EXT4-fs (loop0): orphan cleanup on readonly fs [ 56.180582][ T4881] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.387: bg 0: block 248: padding at end of block bitmap is not set [ 56.196164][ T4881] Quota error (device loop0): write_blk: dquota write failed [ 56.203631][ T4881] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 56.215623][ T4881] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.387: Failed to acquire dquot type 1 [ 56.218049][ T4886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.388'. [ 56.240867][ T4886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.388'. [ 56.250057][ T31] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.261893][ T4881] EXT4-fs (loop0): 1 truncate cleaned up [ 56.270086][ T29] audit: type=1400 audit(1769679148.294:742): avc: denied { shutdown } for pid=4889 comm="syz.5.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.294405][ T31] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.315850][ T31] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.348222][ T31] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.460223][ T4881] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 56.508606][ T3380] usb usb6-port1: attempt power cycle [ 56.544035][ T4904] program syz.2.393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.660324][ T4910] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.676358][ T4908] hub 8-0:1.0: USB hub found [ 56.682667][ T4908] hub 8-0:1.0: 8 ports detected [ 56.686734][ T4912] tipc: Started in network mode [ 56.692615][ T4912] tipc: Node identity 9a802645c055, cluster identity 4711 [ 56.699953][ T4912] tipc: Enabled bearer , priority 10 [ 56.718318][ T4910] EXT4-fs (loop0): 1 truncate cleaned up [ 56.728008][ T4912] syzkaller0: entered promiscuous mode [ 56.733535][ T4912] syzkaller0: entered allmulticast mode [ 56.741395][ T4910] EXT4-fs error (device loop0): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.0.396: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 56.764276][ T29] audit: type=1400 audit(1769679148.774:743): avc: denied { rename } for pid=4909 comm="syz.0.396" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.791497][ T4910] EXT4-fs (loop0): Remounting filesystem read-only [ 56.798082][ T4910] EXT4-fs warning (device loop0): ext4_rename_delete:3729: inode #2: comm syz.0.396: Deleting old file: nlink 5, error=-117 [ 56.813352][ T4912] tipc: Resetting bearer [ 56.820226][ T4910] 9p: Bad value for 'rfdno' [ 56.827376][ T4912] netlink: 'syz.5.397': attribute type 3 has an invalid length. [ 56.858784][ T4911] tipc: Resetting bearer [ 56.866485][ T4911] tipc: Disabling bearer [ 56.890611][ T4924] netlink: 'syz.2.400': attribute type 13 has an invalid length. [ 56.918073][ T4919] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 57.027668][ T4939] netlink: 'syz.5.405': attribute type 8 has an invalid length. [ 57.043043][ T4939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.405'. [ 57.087015][ T4939] bond0: entered promiscuous mode [ 57.092163][ T4939] bond_slave_0: entered promiscuous mode [ 57.097920][ T4939] bond_slave_1: entered promiscuous mode [ 57.103779][ T4939] team0: entered promiscuous mode [ 57.108903][ T4939] team_slave_0: entered promiscuous mode [ 57.114900][ T4939] team_slave_1: entered promiscuous mode [ 57.126232][ T4939] gretap0: entered promiscuous mode [ 57.132458][ T4939] hsr1: entered promiscuous mode [ 57.144036][ T4948] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 57.151836][ T4948] EXT4-fs (loop5): mount failed [ 57.175887][ T4939] netlink: 'syz.5.405': attribute type 1 has an invalid length. [ 57.191497][ T4939] erspan1: entered allmulticast mode [ 57.244836][ T4948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.405'. [ 57.254414][ T4956] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.275655][ T4955] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #12: comm syz.0.409: checksumming directory block 0 [ 57.344711][ T4964] set_capacity_and_notify: 11 callbacks suppressed [ 57.344727][ T4964] loop1: detected capacity change from 0 to 128 [ 57.423754][ T4970] loop1: detected capacity change from 0 to 256 [ 57.447446][ T4972] loop0: detected capacity change from 0 to 512 [ 57.461422][ T4972] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.474672][ T4972] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.411: corrupted inode contents [ 57.486654][ T4972] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.411: mark_inode_dirty error [ 57.498112][ T4972] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.411: corrupted inode contents [ 57.510120][ T4972] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.411: mark_inode_dirty error [ 57.649801][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 57.687202][ T4981] chnl_net:caif_netlink_parms(): no params data found [ 57.774278][ T4983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=4983 comm=syz.1.414 [ 57.788681][ T4983] loop1: detected capacity change from 0 to 256 [ 57.947417][ T4989] delete_channel: no stack [ 57.951937][ T4989] delete_channel: no stack [ 57.973360][ T4992] loop1: detected capacity change from 0 to 512 [ 57.999638][ T4992] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.072283][ T4998] loop1: detected capacity change from 0 to 512 [ 58.089638][ T4998] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.100972][ T4998] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.419: corrupted inode contents [ 58.112965][ T4998] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.419: mark_inode_dirty error [ 58.124530][ T4998] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.419: corrupted inode contents [ 58.136374][ T4998] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.419: mark_inode_dirty error [ 58.181784][ T5002] bridge1: entered promiscuous mode [ 58.187032][ T5002] bridge1: entered allmulticast mode [ 58.215905][ T5006] loop1: detected capacity change from 0 to 256 [ 58.274249][ T5016] netlink: 32 bytes leftover after parsing attributes in process `syz.1.423'. [ 58.286769][ T5016] netlink: 'syz.1.423': attribute type 11 has an invalid length. [ 58.298399][ T5018] loop0: detected capacity change from 0 to 512 [ 58.304949][ T5018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.312818][ T5018] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 58.321239][ T5018] System zones: 0-2, 18-18, 34-34 [ 58.326497][ T5018] EXT4-fs (loop0): orphan cleanup on readonly fs [ 58.333825][ T5018] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.424: bg 0: block 248: padding at end of block bitmap is not set [ 58.348630][ T3380] usb usb6-port1: unable to enumerate USB device [ 58.355366][ T5018] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.424: Failed to acquire dquot type 1 [ 58.382740][ T5021] netlink: 'syz.1.425': attribute type 46 has an invalid length. [ 58.393992][ T5018] EXT4-fs (loop0): 1 truncate cleaned up [ 58.431447][ T5027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.428'. [ 58.446542][ T267] Bluetooth: hci0: Frame reassembly failed (-84) [ 58.550864][ T5037] program syz.1.431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.572142][ T5035] syz.0.430 (5035) used greatest stack depth: 8968 bytes left [ 58.578947][ T5041] loop5: detected capacity change from 0 to 512 [ 58.594249][ T5043] loop0: detected capacity change from 0 to 256 [ 58.596562][ T5041] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.615915][ T5041] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=885ec129, mo2=0006] [ 58.626514][ T5046] macvlan2: entered promiscuous mode [ 58.627496][ T5041] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.432: Invalid inode bitmap blk 4 in block_group 0 [ 58.648491][ T5041] EXT4-fs (loop5): Remounting filesystem read-only [ 58.649137][ T5047] macvlan3: entered promiscuous mode [ 58.696944][ T5053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.710068][ T5053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.726987][ T5055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.749245][ T5055] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 58.757457][ T5055] System zones: 0-2, 18-18, 34-34 [ 58.767654][ T5055] EXT4-fs (loop5): orphan cleanup on readonly fs [ 58.774573][ T5055] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.436: bg 0: block 248: padding at end of block bitmap is not set [ 58.789811][ T5055] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.436: Failed to acquire dquot type 1 [ 58.804813][ T5055] EXT4-fs (loop5): 1 truncate cleaned up [ 58.831988][ T5066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.843424][ T5066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.168183][ T31] net_ratelimit: 30 callbacks suppressed [ 59.168198][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 59.288293][ T3325] bond1: (slave bond0): failed to get link speed/duplex [ 59.398263][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 59.493392][ T5079] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.508219][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 59.527938][ T5079] netlink: 'syz.0.443': attribute type 1 has an invalid length. [ 59.541762][ T5079] 8021q: adding VLAN 0 to HW filter on device bond2 [ 59.618565][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 59.728405][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 59.766831][ T5093] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 59.782193][ T5095] bridge0: entered promiscuous mode [ 59.789317][ T5095] bridge0: port 3(macsec1) entered blocking state [ 59.795843][ T5095] bridge0: port 3(macsec1) entered disabled state [ 59.803639][ T5095] macsec1: entered allmulticast mode [ 59.808957][ T5095] bridge0: entered allmulticast mode [ 59.819322][ T5095] macsec1: left allmulticast mode [ 59.824426][ T5095] bridge0: left allmulticast mode [ 59.832416][ T5095] bridge0: left promiscuous mode [ 59.888453][ T3325] bond1: (slave bond0): failed to get link speed/duplex [ 59.959649][ T5117] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.970990][ T5117] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 59.982172][ T5117] EXT4-fs (loop5): orphan cleanup on readonly fs [ 59.996460][ T5117] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.457: Invalid inode table block 0 in block_group 0 [ 60.010439][ T5117] EXT4-fs (loop5): Remounting filesystem read-only [ 60.017499][ T5117] EXT4-fs (loop5): 1 truncate cleaned up [ 60.018431][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 60.045843][ T5121] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.075650][ T5128] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.110816][ T5128] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.148808][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 60.221073][ T5144] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 60.233058][ T5144] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 60.243653][ T36] usb usb6-port1: attempt power cycle [ 60.258361][ T3325] bond1: (slave bond0): failed to get link speed/duplex [ 60.287300][ T5152] 9p: Bad value for 'rfdno' [ 60.317183][ T5156] bridge0: port 1(syz_tun) entered disabled state [ 60.340544][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 60.340617][ T29] audit: type=1400 audit(1769679152.374:792): avc: denied { write } for pid=5157 comm="syz.0.469" name="file0" dev="tmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 60.356589][ T5158] /dev/loop0: Can't open blockdev [ 60.369191][ T29] audit: type=1400 audit(1769679152.374:793): avc: denied { open } for pid=5157 comm="syz.0.469" path="/127/file0" dev="tmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 60.459598][ T29] audit: type=1400 audit(1769679152.494:794): avc: denied { ioctl } for pid=5157 comm="syz.0.469" path="/127/file0" dev="tmpfs" ino=711 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 60.528209][ T3550] Bluetooth: hci0: command 0x1003 tx timeout [ 60.528283][ T3558] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.638190][ T29] audit: type=1400 audit(1769679152.664:795): avc: denied { unlink } for pid=3313 comm="syz-executor" name="bus" dev="tmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 60.669318][ T5168] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.765026][ T5171] validate_nla: 2 callbacks suppressed [ 60.765083][ T5171] netlink: 'syz.1.473': attribute type 1 has an invalid length. [ 60.772112][ T5173] io-wq is not configured for unbound workers [ 60.783573][ T5173] ext4: Unknown parameter '.' [ 60.887922][ T5179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 60.903319][ T5179] System zones: 1-12 [ 60.907530][ T5179] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.477: Directory hole found for htree index block 0 [ 60.920585][ T5179] EXT4-fs (loop0): Remounting filesystem read-only [ 60.927114][ T5179] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 60.937504][ T5179] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 61.013301][ T5190] __nla_validate_parse: 10 callbacks suppressed [ 61.013320][ T5190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 61.067021][ T5196] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 61.098359][ T5202] program syz.5.485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.107661][ T29] audit: type=1400 audit(1769679153.124:796): avc: denied { mount } for pid=5197 comm="syz.1.484" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 61.110317][ T5196] 8021q: adding VLAN 0 to HW filter on device bond3 [ 61.129203][ T29] audit: type=1400 audit(1769679153.134:797): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 61.143912][ T5196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5196 comm=syz.0.483 [ 61.160966][ T29] audit: type=1400 audit(1769679153.194:798): avc: denied { write } for pid=5193 comm="syz.4.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 61.195279][ T29] audit: type=1400 audit(1769679153.204:799): avc: denied { connect } for pid=5193 comm="syz.4.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 61.199573][ T5196] vlan3: entered allmulticast mode [ 61.219792][ T5196] bond3: entered allmulticast mode [ 61.226476][ T5209] sctp: [Deprecated]: syz.1.486 (pid 5209) Use of int in maxseg socket option. [ 61.226476][ T5209] Use struct sctp_assoc_value instead [ 61.251304][ T29] audit: type=1400 audit(1769679153.284:800): avc: denied { create } for pid=5195 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 61.260785][ T5196] bond3: (slave gretap1): making interface the new active one [ 61.277184][ T29] audit: type=1400 audit(1769679153.284:801): avc: denied { write } for pid=5195 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 61.278955][ T5196] gretap1: entered allmulticast mode [ 61.302403][ T5196] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 61.342856][ T5226] sctp: [Deprecated]: syz.0.490 (pid 5226) Use of int in max_burst socket option deprecated. [ 61.342856][ T5226] Use struct sctp_assoc_value instead [ 61.381580][ T5229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=5229 comm=syz.1.491 [ 61.488607][ T5253] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.520330][ T5253] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 61.521755][ T5251] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.528768][ T5253] System zones: 0-2, 18-18, 34-34 [ 61.544021][ T5253] EXT4-fs (loop1): orphan cleanup on readonly fs [ 61.554650][ T5251] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.496: bg 0: block 217: padding at end of block bitmap is not set [ 61.580988][ T5253] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.497: bg 0: block 248: padding at end of block bitmap is not set [ 61.585467][ T5255] vlan3: left allmulticast mode [ 61.597417][ T5251] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 61.600160][ T5255] bond3: left allmulticast mode [ 61.600177][ T5255] gretap1: left allmulticast mode [ 61.609128][ T3415] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 61.626865][ T5253] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.497: Failed to acquire dquot type 1 [ 61.647766][ T5253] EXT4-fs (loop1): 1 truncate cleaned up [ 61.656152][ T5262] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.664020][ T5262] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.674303][ T5262] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.689039][ T5262] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.499: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 61.707825][ T5262] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.499: couldn't read orphan inode 11 (err -117) [ 61.741036][ T5262] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.499: Invalid block bitmap block 0 in block_group 0 [ 61.755510][ T5262] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.499: Failed to acquire dquot type 0 [ 61.800633][ T5270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 61.947934][ T5285] EXT4-fs: Ignoring removed bh option [ 62.007972][ T5285] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.507: Allocating blocks 497-513 which overlap fs metadata [ 62.028944][ T5285] EXT4-fs (loop5): Remounting filesystem read-only [ 62.075939][ T5293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.508'. [ 62.091852][ T5293] netlink: 16 bytes leftover after parsing attributes in process `syz.0.508'. [ 62.108974][ T5304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.120382][ T5304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.131021][ T5302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.152235][ T5302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.216951][ T36] usb usb6-port1: unable to enumerate USB device [ 62.224945][ T5308] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.270180][ T5315] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.515: inode has both inline data and extents flags [ 62.299056][ T5315] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.515: couldn't read orphan inode 15 (err -117) [ 62.316754][ T5315] SELinux: security_context_str_to_sid (_:;Y-_·¡È §é‡IQÉR³§Ï›¨V§OùѹãoΞ>óäÑãG¦LŸ?./mnt) failed with errno=-22 [ 62.451608][ T5327] set_capacity_and_notify: 27 callbacks suppressed [ 62.451630][ T5327] loop2: detected capacity change from 0 to 256 [ 62.528032][ T5333] loop4: detected capacity change from 0 to 128 [ 62.611672][ T5333] ext4 filesystem being mounted at /95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.675290][ T3415] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 62.701859][ T5333] program syz.4.519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.850037][ T5339] netlink: 188 bytes leftover after parsing attributes in process `syz.2.521'. [ 62.915608][ T5349] mmap: syz.4.524 (5349) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.995939][ T5359] loop4: detected capacity change from 0 to 512 [ 63.002299][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 63.017125][ T5359] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 63.031757][ T5359] EXT4-fs (loop4): invalid journal inode [ 63.037522][ T5359] EXT4-fs (loop4): can't get journal size [ 63.043977][ T5359] EXT4-fs (loop4): 1 truncate cleaned up [ 63.061193][ T5339] bond3: option arp_all_targets: invalid value (262144) [ 63.071499][ T5339] bond3 (unregistering): Released all slaves [ 63.093145][ T5359] gtp0: entered promiscuous mode [ 63.196979][ T5370] loop4: detected capacity change from 0 to 1024 [ 63.267757][ T5373] loop5: detected capacity change from 0 to 512 [ 63.280374][ T5373] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.323857][ T5378] loop5: detected capacity change from 0 to 256 [ 63.516639][ T5383] netlink: 'syz.1.533': attribute type 1 has an invalid length. [ 63.555492][ T5383] bond1: entered promiscuous mode [ 63.570772][ T5383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.645984][ T5390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 63.658879][ T5388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'. [ 63.816458][ T5392] loop0: detected capacity change from 0 to 512 [ 63.821835][ T5397] netlink: 'syz.2.537': attribute type 13 has an invalid length. [ 63.830535][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.537'. [ 63.832136][ T5392] EXT4-fs: Ignoring removed nobh option [ 63.842918][ T5397] loop2: detected capacity change from 0 to 512 [ 63.854691][ T5397] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.936157][ T5392] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.032704][ T5417] netlink: 64 bytes leftover after parsing attributes in process `syz.0.540'. [ 64.089877][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.540'. [ 64.099145][ T5417] chnl_net:caif_netlink_parms(): no params data found [ 64.178199][ T12] net_ratelimit: 30 callbacks suppressed [ 64.178215][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 64.298567][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 64.408259][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 64.518310][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 64.628234][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 64.738210][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 64.848281][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 64.958202][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 65.068272][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 65.178255][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 69.258224][ T31] net_ratelimit: 36 callbacks suppressed [ 69.258237][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 69.378289][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 69.488218][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 69.598322][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 69.708197][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 69.818231][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 69.928242][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 70.038465][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 70.148214][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 70.258214][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 74.338199][ T2688] net_ratelimit: 36 callbacks suppressed [ 74.338213][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 74.458217][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 74.568206][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 74.678207][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 74.788204][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 74.898230][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 75.008200][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 75.118203][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 75.228196][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 75.338208][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 79.408206][ T52] net_ratelimit: 36 callbacks suppressed [ 79.408218][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 79.528284][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 79.638284][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 79.748278][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 79.858187][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 79.968249][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 80.078214][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 80.188266][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 80.278316][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 80.298226][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 80.408243][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 84.478237][ T2688] net_ratelimit: 36 callbacks suppressed [ 84.478265][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 84.598304][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 84.708231][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 84.818297][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 84.928288][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 85.038232][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 85.148246][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 85.258238][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 85.368279][ T2688] bond1: (slave bond0): failed to get link speed/duplex [ 85.478302][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 88.730113][ T5502] loop5: detected capacity change from 0 to 128 [ 88.735860][ T5495] loop1: detected capacity change from 0 to 4096 [ 88.790853][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 88.790869][ T29] audit: type=1400 audit(1769679180.824:898): avc: denied { bind } for pid=5499 comm="syz.2.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.894273][ T5495] EXT4-fs mount: 73 callbacks suppressed [ 88.894289][ T5495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.916658][ T5510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.552'. [ 88.947048][ T5495] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.548: corrupted inode contents [ 88.979724][ T5513] loop0: detected capacity change from 0 to 128 [ 88.986755][ T5513] FAT-fs (loop0): bogus number of FAT sectors [ 88.992886][ T5513] FAT-fs (loop0): Can't find a valid FAT filesystem [ 89.016578][ T5495] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.548: mark_inode_dirty error [ 89.083180][ T5518] loop0: detected capacity change from 0 to 1024 [ 89.090700][ T5495] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.548: corrupted inode contents [ 89.102679][ T5495] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.548: mark_inode_dirty error [ 89.114476][ T5518] ext4: Unknown parameter 'nouser_xattr' [ 89.130867][ T5518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.553'. [ 89.148694][ T5518] syz_tun: left allmulticast mode [ 89.148910][ T5495] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.548: corrupted inode contents [ 89.153892][ T5518] syz_tun: left promiscuous mode [ 89.170686][ T5518] bridge0: port 1(syz_tun) entered disabled state [ 89.177646][ T5495] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.548: mark_inode_dirty error [ 89.196539][ T5495] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.548: corrupted inode contents [ 89.221745][ T5495] EXT4-fs error (device loop1): ext4_truncate:4635: inode #15: comm syz.1.548: mark_inode_dirty error [ 89.237287][ T5495] EXT4-fs error (device loop1) in ext4_setattr:6035: Corrupt filesystem [ 89.246111][ T5518] bond0: (slave bridge0): Releasing backup interface [ 89.248940][ T5515] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.548: corrupted inode contents [ 89.307468][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.395859][ T29] audit: type=1326 audit(1769679181.424:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed33d0aeb9 code=0x7ffc0000 [ 89.419289][ T29] audit: type=1326 audit(1769679181.424:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed33d0aeb9 code=0x7ffc0000 [ 89.448679][ T5535] loop4: detected capacity change from 0 to 736 [ 89.478185][ T29] audit: type=1326 audit(1769679181.434:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fed33d0aeb9 code=0x7ffc0000 [ 89.501427][ T29] audit: type=1326 audit(1769679181.434:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed33d0aeb9 code=0x7ffc0000 [ 89.524774][ T29] audit: type=1326 audit(1769679181.434:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed33d0aeb9 code=0x7ffc0000 [ 89.547997][ T29] audit: type=1326 audit(1769679181.434:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fed33d0aeb9 code=0x7ffc0000 [ 89.571407][ T29] audit: type=1326 audit(1769679181.434:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed33d0aeb9 code=0x7ffc0000 [ 89.594673][ T29] audit: type=1326 audit(1769679181.434:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed33d0aeb9 code=0x7ffc0000 [ 89.618081][ T29] audit: type=1326 audit(1769679181.434:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed33ccb78e code=0x7ffc0000 [ 89.813456][ T5552] loop1: detected capacity change from 0 to 256 [ 89.897660][ T5555] loop1: detected capacity change from 0 to 4096 [ 89.911109][ T5555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.933001][ T5555] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.564: corrupted inode contents [ 89.945316][ T5555] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.564: mark_inode_dirty error [ 89.961669][ T5555] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.564: corrupted inode contents [ 89.973948][ T5555] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.564: mark_inode_dirty error [ 89.986091][ T5555] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.564: corrupted inode contents [ 89.998577][ T5555] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.564: mark_inode_dirty error [ 90.010339][ T5555] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.564: corrupted inode contents [ 90.022538][ T5555] EXT4-fs error (device loop1): ext4_truncate:4635: inode #15: comm syz.1.564: mark_inode_dirty error [ 90.034842][ T5555] EXT4-fs error (device loop1) in ext4_setattr:6035: Corrupt filesystem [ 90.038935][ T5565] loop0: detected capacity change from 0 to 1764 [ 90.066720][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.103570][ T5567] loop0: detected capacity change from 0 to 764 [ 90.141537][ T5571] netlink: 20 bytes leftover after parsing attributes in process `syz.0.570'. [ 90.176327][ T5578] dvmrp6: entered allmulticast mode [ 90.196300][ T5583] loop2: detected capacity change from 0 to 128 [ 90.580002][ T5594] sctp: [Deprecated]: syz.4.575 (pid 5594) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.580002][ T5594] Use struct sctp_sack_info instead [ 90.751702][ T5586] syz.2.573: attempt to access beyond end of device [ 90.751702][ T5586] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 90.755887][ T5596] vhci_hcd vhci_hcd.3: invalid port number 9 [ 90.765418][ T5586] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 90.771460][ T5596] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 90.780214][ T5583] syz.2.573: attempt to access beyond end of device [ 90.780214][ T5583] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 90.802868][ T5583] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 90.812104][ T5586] syz.2.573: attempt to access beyond end of device [ 90.812104][ T5586] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 90.825700][ T5586] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 90.913922][ T5601] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.930470][ T5601] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.578: corrupted inode contents [ 90.942435][ T5601] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.578: mark_inode_dirty error [ 90.953840][ T5601] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.578: corrupted inode contents [ 90.965833][ T5601] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #15: comm syz.5.578: mark_inode_dirty error [ 90.977100][ T5601] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.578: corrupted inode contents [ 90.993531][ T5601] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #15: comm syz.5.578: mark_inode_dirty error [ 91.019510][ T5601] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.578: corrupted inode contents [ 91.056129][ T5601] EXT4-fs error (device loop5): ext4_truncate:4635: inode #15: comm syz.5.578: mark_inode_dirty error [ 91.069963][ T5601] EXT4-fs error (device loop5) in ext4_setattr:6035: Corrupt filesystem [ 91.097895][ T5614] ext4: Bad value for 'resgid' [ 91.102774][ T5614] ext4: Bad value for 'resgid' [ 91.113908][ T4663] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.204370][ T5629] netlink: 172 bytes leftover after parsing attributes in process `syz.1.588'. [ 91.213413][ T5629] net_ratelimit: 32 callbacks suppressed [ 91.213427][ T5629] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 91.257665][ T5629] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 91.285051][ T5629] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.588: invalid indirect mapped block 83886080 (level 1) [ 91.300446][ T5629] EXT4-fs (loop1): Remounting filesystem read-only [ 91.307219][ T5629] EXT4-fs (loop1): 1 orphan inode deleted [ 91.313010][ T5629] EXT4-fs (loop1): 1 truncate cleaned up [ 91.320025][ T5629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.348018][ T5643] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.368673][ T5643] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 91.376686][ T5643] System zones: 0-2, 18-18, 34-34 [ 91.382878][ T5643] EXT4-fs (loop2): orphan cleanup on readonly fs [ 91.395993][ T5643] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.590: bg 0: block 248: padding at end of block bitmap is not set [ 91.414292][ T5643] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.590: Failed to acquire dquot type 1 [ 91.425604][ T5649] xt_hashlimit: size too large, truncated to 1048576 [ 91.434390][ T5643] EXT4-fs (loop2): 1 truncate cleaned up [ 91.467519][ T5652] –: renamed from vxcan1 [ 91.508791][ T5643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.561434][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.609953][ T5643] syz.2.590 (5643) used greatest stack depth: 8672 bytes left [ 91.636725][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.669353][ T5657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.694226][ T5657] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.594: corrupted inode contents [ 91.736539][ T5657] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.594: mark_inode_dirty error [ 91.780351][ T5657] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.594: corrupted inode contents [ 91.792465][ T5657] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.594: mark_inode_dirty error [ 91.804586][ T5657] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.594: corrupted inode contents [ 91.817565][ T5657] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.594: mark_inode_dirty error [ 91.830405][ T5664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'. [ 91.830974][ T5657] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.594: corrupted inode contents [ 91.851328][ T5657] EXT4-fs error (device loop1): ext4_truncate:4635: inode #15: comm syz.1.594: mark_inode_dirty error [ 91.868880][ T5657] EXT4-fs error (device loop1) in ext4_setattr:6035: Corrupt filesystem [ 91.898326][ T5664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5664 comm=syz.2.596 [ 91.914040][ T5664] bridge0: entered promiscuous mode [ 91.920281][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.929683][ T5664] macvlan2: entered promiscuous mode [ 92.064970][ T5679] netlink: 'syz.1.600': attribute type 5 has an invalid length. [ 92.072737][ T5679] netlink: 'syz.1.600': attribute type 11 has an invalid length. [ 92.095903][ T5680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5680 comm=syz.2.601 [ 92.115738][ T5680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'. [ 92.132000][ T5684] sctp: [Deprecated]: syz.5.602 (pid 5684) Use of int in max_burst socket option. [ 92.132000][ T5684] Use struct sctp_assoc_value instead [ 92.150084][ T5671] EXT4-fs (loop4): too many log groups per flexible block group [ 92.170394][ T5671] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 92.179629][ T5671] EXT4-fs (loop4): mount failed [ 92.217603][ T5680] team0: Port device team_slave_0 removed [ 92.267761][ T5694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'. [ 92.294079][ T5694] 8021q: adding VLAN 0 to HW filter on device bond4 [ 92.314806][ T5512] loop5: p2 < > p3 < p5 > p4 [ 92.319631][ T5512] loop5: partition table partially beyond EOD, truncated [ 92.329280][ T5512] loop5: p2 start 4278190080 is beyond EOD, truncated [ 92.336767][ T5512] loop5: p4 size 8192 extends beyond EOD, truncated [ 92.349123][ T5512] loop5: p5 size 8192 extends beyond EOD, truncated [ 92.375410][ T5691] loop5: p2 < > p3 < p5 > p4 [ 92.380138][ T5691] loop5: partition table partially beyond EOD, truncated [ 92.382228][ T5689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'. [ 92.388948][ T5701] netlink: 'syz.2.608': attribute type 8 has an invalid length. [ 92.396146][ T5689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 92.403746][ T5701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'. [ 92.418255][ T5691] loop5: p2 start 4278190080 is beyond EOD, truncated [ 92.425246][ T5689] macsec1: entered promiscuous mode [ 92.433388][ T5689] bond4: entered promiscuous mode [ 92.439006][ T5689] macsec1: entered allmulticast mode [ 92.444395][ T5689] bond4: entered allmulticast mode [ 92.452646][ T5691] loop5: p4 size 8192 extends beyond EOD, truncated [ 92.460393][ T5691] loop5: p5 size 8192 extends beyond EOD, truncated [ 92.461972][ T5701] bond0: entered promiscuous mode [ 92.472127][ T5701] bond_slave_0: entered promiscuous mode [ 92.477815][ T5701] bond_slave_1: entered promiscuous mode [ 92.521749][ T5701] gretap0: entered promiscuous mode [ 92.527665][ T5701] debugfs: 'hsr1' already exists in 'hsr' [ 92.533465][ T5701] Cannot create hsr debugfs directory [ 92.538860][ T5701] hsr1: entered promiscuous mode [ 92.572573][ T3000] loop5: p2 < > p3 < p5 > p4 [ 92.577265][ T3000] loop5: partition table partially beyond EOD, truncated [ 92.584473][ T3000] loop5: p2 start 4278190080 is beyond EOD, truncated [ 92.591713][ T3000] loop5: p4 size 8192 extends beyond EOD, truncated [ 92.598884][ T3000] loop5: p5 size 8192 extends beyond EOD, truncated [ 92.624293][ T5716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.639852][ T5507] udevd[5507]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 92.643911][ T5512] udevd[5512]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 92.650934][ T5503] udevd[5503]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 92.679213][ T5707] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 92.688192][ T5707] EXT4-fs (loop2): mount failed [ 92.721003][ T5716] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.610: corrupted inode contents [ 92.756058][ T5716] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.610: mark_inode_dirty error [ 92.763853][ T5507] udevd[5507]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 92.778488][ T5725] udevd[5725]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 92.789878][ T5503] udevd[5503]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 92.798698][ T5732] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.805128][ T5716] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.610: corrupted inode contents [ 92.823236][ T5732] netlink: 'syz.5.613': attribute type 1 has an invalid length. [ 92.840425][ T5716] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.610: mark_inode_dirty error [ 92.858074][ T5716] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.610: corrupted inode contents [ 92.881607][ T5701] netlink: 'syz.2.608': attribute type 1 has an invalid length. [ 92.881881][ T5732] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.897642][ T5716] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.610: mark_inode_dirty error [ 92.915016][ T5701] erspan1: entered allmulticast mode [ 92.945323][ T5716] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.610: corrupted inode contents [ 92.965293][ T5716] EXT4-fs error (device loop0): ext4_truncate:4635: inode #15: comm syz.0.610: mark_inode_dirty error [ 92.993504][ T5716] EXT4-fs error (device loop0) in ext4_setattr:6035: Corrupt filesystem [ 93.044527][ T5745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=5745 comm=syz.1.617 [ 93.074065][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.109491][ T5755] 9pnet_fd: Insufficient options for proto=fd [ 93.123016][ T5757] 9pnet_fd: Insufficient options for proto=fd [ 93.185826][ T5764] bond2: option primary_reselect: invalid value (4) [ 93.200255][ T5764] bond2 (unregistering): Released all slaves [ 93.255071][ T5778] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 93.264485][ T5778] System zones: 0-1, 3-36 [ 93.297659][ T5778] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.624: bad orphan inode 134217728 [ 93.319778][ T5778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.350895][ T5788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.370047][ T5778] xt_TCPMSS: Only works on TCP SYN packets [ 93.415670][ T5788] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.630: corrupted inode contents [ 93.462021][ T5788] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.630: mark_inode_dirty error [ 93.484426][ T5814] EXT4-fs: dax option not supported [ 93.521662][ T5788] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.630: corrupted inode contents [ 93.533953][ T5788] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.630: mark_inode_dirty error [ 93.546904][ T5788] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.630: corrupted inode contents [ 93.572931][ T5788] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.630: mark_inode_dirty error [ 93.621041][ T4663] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.631952][ T5788] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.630: corrupted inode contents [ 93.692008][ T5788] EXT4-fs error (device loop0): ext4_truncate:4635: inode #15: comm syz.0.630: mark_inode_dirty error [ 93.727427][ T5788] EXT4-fs error (device loop0) in ext4_setattr:6035: Corrupt filesystem [ 93.805463][ T5853] set_capacity_and_notify: 17 callbacks suppressed [ 93.805481][ T5853] loop5: detected capacity change from 0 to 512 [ 93.823408][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.845390][ T5853] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 93.859126][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 93.859140][ T29] audit: type=1400 audit(1769679185.894:1002): avc: denied { bind } for pid=5856 comm="syz.2.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.912482][ T5866] loop2: detected capacity change from 0 to 512 [ 93.919315][ T5853] EXT4-fs (loop5): 1 truncate cleaned up [ 93.925251][ T5853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.925852][ T5865] __nla_validate_parse: 5 callbacks suppressed [ 93.925939][ T5865] netlink: 24 bytes leftover after parsing attributes in process `syz.4.650'. [ 93.973114][ T5853] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.647: invalid indirect mapped block 4294901760 (level 0) [ 93.994416][ T5866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 94.016803][ T29] audit: type=1400 audit(1769679186.004:1003): avc: denied { ioctl } for pid=5852 comm="syz.5.647" path="/56/file0/file0/file0" dev="loop5" ino=13 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.062373][ T5853] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.647: invalid indirect mapped block 4294967295 (level 1) [ 94.070112][ T5866] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.089332][ T5830] loop1: detected capacity change from 0 to 1024 [ 94.096645][ T4663] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.141425][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 94.176247][ T5830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.327772][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.376661][ T29] audit: type=1326 audit(1769679186.404:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.5.657" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09c74eaeb9 code=0x0 [ 94.410999][ T5888] loop1: detected capacity change from 0 to 256 [ 94.456820][ T5893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.659'. [ 94.467080][ T5891] loop4: detected capacity change from 0 to 4096 [ 94.473051][ T5893] bond0: entered promiscuous mode [ 94.478484][ T5893] bond_slave_0: entered promiscuous mode [ 94.484381][ T5893] bond_slave_1: entered promiscuous mode [ 94.486951][ T29] audit: type=1400 audit(1769679186.514:1005): avc: denied { accept } for pid=5885 comm="syz.2.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 94.509703][ T5893] bond0: left promiscuous mode [ 94.514543][ T5893] bond_slave_0: left promiscuous mode [ 94.515960][ T5891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.520078][ T5893] bond_slave_1: left promiscuous mode [ 94.536186][ T5891] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.658: corrupted inode contents [ 94.540412][ T5898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5126 sclass=netlink_route_socket pid=5898 comm=syz.1.659 [ 94.554699][ T5891] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.658: mark_inode_dirty error [ 94.573673][ T5891] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.658: corrupted inode contents [ 94.588476][ T5891] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.658: mark_inode_dirty error [ 94.600404][ T5891] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.658: corrupted inode contents [ 94.612574][ T5891] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.658: mark_inode_dirty error [ 94.627199][ T5891] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.658: corrupted inode contents [ 94.647079][ T5891] EXT4-fs error (device loop4): ext4_truncate:4635: inode #15: comm syz.4.658: mark_inode_dirty error [ 94.660423][ T5891] EXT4-fs error (device loop4) in ext4_setattr:6035: Corrupt filesystem [ 94.673273][ T5904] netlink: 'syz.2.661': attribute type 6 has an invalid length. [ 94.684054][ T5905] netlink: 32 bytes leftover after parsing attributes in process `syz.2.661'. [ 94.712936][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.754647][ T5912] loop4: detected capacity change from 0 to 512 [ 94.795943][ T29] audit: type=1400 audit(1769679186.824:1006): avc: denied { getopt } for pid=5913 comm="syz.1.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.836595][ T5912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 94.940730][ T5912] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.051473][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 95.097699][ T5910] loop2: detected capacity change from 0 to 1024 [ 95.160837][ T5910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.313882][ T5930] loop1: detected capacity change from 0 to 512 [ 95.349856][ T5930] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.1.671: corrupted xattr block 95: invalid header [ 95.381475][ T5930] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.671: bg 0: block 7: invalid block bitmap [ 95.382671][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.402822][ T5941] loop5: detected capacity change from 0 to 256 [ 95.410449][ T5930] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 95.419849][ T5930] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #11: comm syz.1.671: corrupted xattr block 95: invalid header [ 95.433908][ T5930] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 95.443025][ T5930] EXT4-fs (loop1): 1 orphan inode deleted [ 95.449365][ T5930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.450032][ T5941] vfat: Unknown parameter 'ÿÿÿÿ' [ 95.482337][ T5930] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.530319][ T5945] SELinux: failed to load policy [ 95.589647][ T29] audit: type=1400 audit(1769679187.624:1007): avc: denied { read } for pid=5940 comm="syz.5.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.598587][ T5952] loop4: detected capacity change from 0 to 512 [ 95.626647][ T5954] coredump: 407(syz.1.671): Core dump to core aborted: cannot preserve file permissions [ 95.627479][ T5947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.663217][ T5947] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.674: corrupted inode contents [ 95.698009][ T5947] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.674: mark_inode_dirty error [ 95.709657][ T5947] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.674: corrupted inode contents [ 95.721925][ T5947] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.674: mark_inode_dirty error [ 95.734360][ T5947] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.674: corrupted inode contents [ 95.774040][ T5952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.775015][ T5947] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.674: mark_inode_dirty error [ 95.803643][ T5947] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.674: corrupted inode contents [ 95.810129][ T5952] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.832681][ T5947] EXT4-fs error (device loop2): ext4_truncate:4635: inode #15: comm syz.2.674: mark_inode_dirty error [ 95.849530][ T5963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 95.869958][ T5947] EXT4-fs error (device loop2) in ext4_setattr:6035: Corrupt filesystem [ 95.888478][ T5963] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.943560][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.961886][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.974770][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 96.258074][ T29] audit: type=1326 audit(1769679188.284:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5992 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab241aeb9 code=0x7ffc0000 [ 96.281734][ T29] audit: type=1326 audit(1769679188.284:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5992 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab241aeb9 code=0x7ffc0000 [ 96.305091][ T29] audit: type=1326 audit(1769679188.284:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5992 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ab241aeb9 code=0x7ffc0000 [ 96.328385][ T29] audit: type=1326 audit(1769679188.284:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5992 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab241aeb9 code=0x7ffc0000 [ 96.390208][ T9] kernel write not supported for file /snd/seq (pid: 9 comm: kworker/0:0) [ 96.621787][ T6013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.666986][ T6024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 96.680765][ T6013] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.693: corrupted inode contents [ 96.705953][ T5979] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 96.725506][ T6024] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.741451][ T6013] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.693: mark_inode_dirty error [ 96.765523][ T5979] EXT4-fs (loop5): 1 truncate cleaned up [ 96.777988][ T6013] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.693: corrupted inode contents [ 96.778834][ T5979] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.793173][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 96.817964][ T6013] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.693: mark_inode_dirty error [ 96.823672][ T5982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.862844][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.887551][ T6013] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.693: corrupted inode contents [ 96.977524][ T6013] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.693: mark_inode_dirty error [ 97.006540][ T6013] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.693: corrupted inode contents [ 97.010441][ T4663] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.018760][ T6013] EXT4-fs error (device loop2): ext4_truncate:4635: inode #15: comm syz.2.693: mark_inode_dirty error [ 97.038624][ T6013] EXT4-fs error (device loop2) in ext4_setattr:6035: Corrupt filesystem [ 97.075657][ T6042] netlink: 'syz.5.701': attribute type 1 has an invalid length. [ 97.100901][ T6047] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 97.113892][ T6042] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.170354][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.189610][ T6042] bond2: (slave geneve2): making interface the new active one [ 97.197322][ T6051] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.703: bad orphan inode 15 [ 97.199923][ T6042] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 97.236444][ T6051] ext4_test_bit(bit=14, block=5) = 0 [ 97.245945][ T6051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.261585][ T6063] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.284717][ T6051] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.703: reserved inode found cleared - inode=1 [ 97.299745][ T6063] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.341438][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.369246][ T6075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 97.431211][ T6075] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.431498][ T4663] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.476709][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 97.695973][ T6092] dummy0: entered promiscuous mode [ 97.701207][ T6092] macsec1: entered promiscuous mode [ 97.706604][ T6092] macsec1: entered allmulticast mode [ 97.710359][ T6095] 9pnet_fd: Insufficient options for proto=fd [ 97.712084][ T6092] dummy0: entered allmulticast mode [ 97.768806][ T6097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.784491][ T6097] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.717: corrupted inode contents [ 97.797964][ T6097] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.717: mark_inode_dirty error [ 97.809495][ T6097] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.717: corrupted inode contents [ 97.821670][ T6097] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.717: mark_inode_dirty error [ 97.833201][ T6097] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.717: corrupted inode contents [ 97.845777][ T6097] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.717: mark_inode_dirty error [ 97.858449][ T6097] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.717: corrupted inode contents [ 97.870793][ T6097] EXT4-fs error (device loop4): ext4_truncate:4635: inode #15: comm syz.4.717: mark_inode_dirty error [ 97.882460][ T6097] EXT4-fs error (device loop4) in ext4_setattr:6035: Corrupt filesystem [ 97.906437][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.926316][ T6101] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 97.927673][ T6079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.979772][ T6105] netlink: 'syz.4.719': attribute type 1 has an invalid length. [ 97.998162][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.008106][ T6105] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.045231][ T6110] can0: slcan on ttyS3. [ 98.045483][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'. [ 98.074063][ T6112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6112 comm=syz.0.721 [ 98.086813][ T6112] SELinux: failed to load policy [ 98.104407][ T6115] netlink: 'syz.1.722': attribute type 10 has an invalid length. [ 98.112253][ T6115] netlink: 40 bytes leftover after parsing attributes in process `syz.1.722'. [ 98.148219][ T6110] can0 (unregistered): slcan off ttyS3. [ 98.183954][ T6115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.197563][ T6117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 98.231307][ T6126] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.269949][ T6126] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.278980][ T6117] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.289900][ T6115] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.307167][ T6126] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.320809][ T6110] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.722: corrupted xattr block 6: invalid header [ 98.348881][ T6110] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 98.359720][ T6110] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.722: corrupted xattr block 6: invalid header [ 98.368666][ T6126] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.726: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 98.401830][ T6126] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.726: couldn't read orphan inode 11 (err -117) [ 98.418761][ T6115] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.722: corrupted xattr block 6: invalid header [ 98.433720][ T6110] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 98.444665][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 98.454025][ T6126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.467772][ T6115] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 98.474998][ T6136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.476893][ T6110] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.722: corrupted xattr block 6: invalid header [ 98.502620][ T6110] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 98.520903][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 98.541554][ T6136] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.730: corrupted inode contents [ 98.570045][ T6126] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.726: Invalid block bitmap block 0 in block_group 0 [ 98.585183][ T6136] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.730: mark_inode_dirty error [ 98.587358][ T6143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.596714][ T6136] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.730: corrupted inode contents [ 98.620984][ T6126] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.726: Failed to acquire dquot type 0 [ 98.623696][ T6143] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.731: corrupted inode contents [ 98.656517][ T6143] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.731: mark_inode_dirty error [ 98.656994][ T6136] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.730: mark_inode_dirty error [ 98.669121][ T6143] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.731: corrupted inode contents [ 98.693153][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.693897][ T4663] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.708176][ T6136] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.730: corrupted inode contents [ 98.712356][ T6143] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.731: mark_inode_dirty error [ 98.735836][ T6136] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.730: mark_inode_dirty error [ 98.746996][ T6143] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.731: corrupted inode contents [ 98.747436][ T6136] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.730: corrupted inode contents [ 98.771321][ T6136] EXT4-fs error (device loop4): ext4_truncate:4635: inode #15: comm syz.4.730: mark_inode_dirty error [ 98.783007][ T6136] EXT4-fs error (device loop4) in ext4_setattr:6035: Corrupt filesystem [ 98.807918][ T6143] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.731: mark_inode_dirty error [ 98.819171][ T6145] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.730: corrupted inode contents [ 98.831211][ T6143] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.731: corrupted inode contents [ 98.843740][ T6145] forcing mempool usage for bio_alloc_bioset+0x448/0xa50 [ 98.851161][ T6143] EXT4-fs error (device loop0): ext4_truncate:4635: inode #15: comm syz.0.731: mark_inode_dirty error [ 98.862424][ T6143] EXT4-fs error (device loop0) in ext4_setattr:6035: Corrupt filesystem [ 98.870929][ T6147] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.731: corrupted inode contents [ 98.972217][ T6153] set_capacity_and_notify: 23 callbacks suppressed [ 98.972233][ T6153] loop4: detected capacity change from 0 to 8192 [ 99.002333][ T6155] loop0: detected capacity change from 0 to 4096 [ 99.023272][ T6149] loop5: detected capacity change from 0 to 1024 [ 99.042732][ T6155] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.735: corrupted inode contents [ 99.077409][ T6155] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.735: mark_inode_dirty error [ 99.113965][ T6155] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.735: corrupted inode contents [ 99.139333][ T6155] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.735: mark_inode_dirty error [ 99.169458][ T6155] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.735: corrupted inode contents [ 99.193020][ T6155] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.735: mark_inode_dirty error [ 99.209063][ T6161] loop2: detected capacity change from 0 to 256 [ 99.215581][ T6155] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.735: corrupted inode contents [ 99.235847][ T6155] EXT4-fs error (device loop0): ext4_truncate:4635: inode #15: comm syz.0.735: mark_inode_dirty error [ 99.266905][ T6155] EXT4-fs error (device loop0) in ext4_setattr:6035: Corrupt filesystem [ 99.284485][ T6157] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.735: corrupted inode contents [ 99.362104][ T6174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=6174 comm=syz.5.740 [ 99.409861][ T6176] loop5: detected capacity change from 0 to 512 [ 99.434165][ T6179] loop0: detected capacity change from 0 to 512 [ 99.469718][ T6176] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.500234][ T6179] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.519693][ T6176] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.534719][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 99.534733][ T29] audit: type=1400 audit(1769679191.564:1050): avc: denied { setcurrent } for pid=6187 comm="syz.2.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 99.562780][ T6182] loop4: detected capacity change from 0 to 4096 [ 99.587734][ T6182] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.744: corrupted inode contents [ 99.618595][ T6182] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.744: mark_inode_dirty error [ 99.633544][ T6182] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.744: corrupted inode contents [ 99.647789][ T6196] loop0: detected capacity change from 0 to 512 [ 99.656915][ T6182] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.744: mark_inode_dirty error [ 99.687859][ T6182] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.744: corrupted inode contents [ 99.697333][ T6198] loop5: detected capacity change from 0 to 4096 [ 99.715931][ T6198] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.751: corrupted inode contents [ 99.747029][ T6196] ext4 filesystem being mounted at /179/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.782191][ T6198] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.751: mark_inode_dirty error [ 99.806908][ T6182] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.744: mark_inode_dirty error [ 99.819048][ T6182] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.744: corrupted inode contents [ 99.819267][ T6198] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.751: corrupted inode contents [ 99.831059][ T6182] EXT4-fs error (device loop4): ext4_truncate:4635: inode #15: comm syz.4.744: mark_inode_dirty error [ 99.853565][ T6182] EXT4-fs error (device loop4) in ext4_setattr:6035: Corrupt filesystem [ 99.862160][ T6195] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.744: corrupted inode contents [ 99.871059][ T6211] loop2: detected capacity change from 0 to 4096 [ 99.874240][ T6196] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.746: corrupted xattr block 33: invalid ea_ino [ 99.880383][ T6198] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #15: comm syz.5.751: mark_inode_dirty error [ 99.894949][ T6196] EXT4-fs (loop0): Remounting filesystem read-only [ 99.911479][ T6196] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 99.912043][ T6198] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.751: corrupted inode contents [ 99.947493][ T6196] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 99.956706][ T6196] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 99.968334][ T29] audit: type=1400 audit(1769679191.984:1051): avc: denied { read write } for pid=6194 comm="syz.0.746" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.990900][ T29] audit: type=1400 audit(1769679191.994:1052): avc: denied { open } for pid=6194 comm="syz.0.746" path="/179/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.021328][ T6196] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 100.044408][ T6196] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 100.064121][ T6198] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #15: comm syz.5.751: mark_inode_dirty error [ 100.064330][ T29] audit: type=1400 audit(1769679192.074:1053): avc: denied { rename } for pid=6194 comm="syz.0.746" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.097612][ T29] audit: type=1400 audit(1769679192.084:1054): avc: denied { unlink } for pid=6194 comm="syz.0.746" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.103470][ T6198] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.751: corrupted inode contents [ 100.168530][ T6198] EXT4-fs error (device loop5): ext4_truncate:4635: inode #15: comm syz.5.751: mark_inode_dirty error [ 100.224663][ T6225] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.294895][ T6198] EXT4-fs error (device loop5) in ext4_setattr:6035: Corrupt filesystem [ 100.351677][ T6209] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.751: corrupted inode contents [ 100.379872][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.758'. [ 100.503426][ T6244] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.764: corrupted inode contents [ 100.519779][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.5.766'. [ 100.526759][ T6244] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.764: mark_inode_dirty error [ 100.545206][ T6244] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.764: corrupted inode contents [ 100.561011][ T6254] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.765: corrupted inode contents [ 100.563951][ T6244] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.764: mark_inode_dirty error [ 100.595502][ T6254] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.765: mark_inode_dirty error [ 100.605228][ T6244] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.764: corrupted inode contents [ 100.620112][ T6244] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.764: mark_inode_dirty error [ 100.627481][ T6254] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.765: corrupted inode contents [ 100.643544][ T6254] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.765: mark_inode_dirty error [ 100.660790][ T6254] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.765: corrupted inode contents [ 100.679071][ T6244] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.764: corrupted inode contents [ 100.691008][ T6244] EXT4-fs error (device loop2): ext4_truncate:4635: inode #15: comm syz.2.764: mark_inode_dirty error [ 100.692823][ T6254] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.765: mark_inode_dirty error [ 100.714032][ T6254] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.765: corrupted inode contents [ 100.714091][ T6244] EXT4-fs error (device loop2) in ext4_setattr:6035: Corrupt filesystem [ 100.725951][ T6254] EXT4-fs error (device loop0): ext4_truncate:4635: inode #15: comm syz.0.765: mark_inode_dirty error [ 100.747007][ T6254] EXT4-fs error (device loop0) in ext4_setattr:6035: Corrupt filesystem [ 100.755772][ T6256] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.764: corrupted inode contents [ 100.768090][ T6256] forcing mempool usage for bio_alloc_bioset+0x448/0xa50 [ 100.832111][ T6254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.765'. [ 100.841045][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'. [ 101.001834][ T6272] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.085363][ T6272] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.770: corrupted xattr block 33: invalid ea_ino [ 101.130818][ T6272] EXT4-fs (loop5): Remounting filesystem read-only [ 101.137447][ T6272] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 101.172255][ T29] audit: type=1400 audit(1769679193.194:1055): avc: denied { read } for pid=6281 comm="syz.2.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 101.199066][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.774'. [ 101.209956][ T6287] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 101.232155][ T6272] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 101.249789][ T29] audit: type=1400 audit(1769679193.224:1056): avc: denied { append } for pid=6283 comm="syz.4.774" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 101.278741][ T6287] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 101.324737][ T6272] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 101.429226][ T6295] netlink: 64 bytes leftover after parsing attributes in process `syz.5.777'. [ 101.449260][ T6292] tipc: Started in network mode [ 101.454166][ T6292] tipc: Node identity 7f000001, cluster identity 4711 [ 101.461533][ T6292] tipc: Enabled bearer , priority 10 [ 101.470864][ T6296] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.779: corrupted inode contents [ 101.485967][ T6296] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.779: mark_inode_dirty error [ 101.497646][ T6296] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.779: corrupted inode contents [ 101.509727][ T6296] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.779: mark_inode_dirty error [ 101.521468][ T6296] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.779: corrupted inode contents [ 101.533722][ T6296] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.779: mark_inode_dirty error [ 101.549903][ T6296] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.779: corrupted inode contents [ 101.578657][ T6296] EXT4-fs error (device loop1): ext4_truncate:4635: inode #15: comm syz.1.779: mark_inode_dirty error [ 101.601095][ T6299] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.776: corrupted inode contents [ 101.617355][ T6296] EXT4-fs error (device loop1) in ext4_setattr:6035: Corrupt filesystem [ 101.750895][ T6313] EXT4-fs: Ignoring removed orlov option [ 101.770690][ T6299] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.776: mark_inode_dirty error [ 101.782335][ T6302] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.779: corrupted inode contents [ 101.808822][ T6299] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.776: corrupted inode contents [ 101.841617][ T6313] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c118, mo2=0002] [ 101.851425][ T6299] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.776: mark_inode_dirty error [ 101.868730][ T6313] System zones: 0-1, 3-12 [ 101.898334][ T6299] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.776: corrupted inode contents [ 101.930477][ T6299] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.776: mark_inode_dirty error [ 101.960702][ T6299] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.776: corrupted inode contents [ 101.991748][ T6299] EXT4-fs error (device loop0): ext4_truncate:4635: inode #15: comm syz.0.776: mark_inode_dirty error [ 102.041318][ T6299] EXT4-fs error (device loop0) in ext4_setattr:6035: Corrupt filesystem [ 102.060810][ T6318] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.776: corrupted inode contents [ 102.236356][ T29] audit: type=1400 audit(1769679194.264:1057): avc: denied { associate } for pid=6339 comm="syz.5.787" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 102.265963][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.789'. [ 102.298502][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.789'. [ 102.335695][ T6335] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.789: corrupted inode contents [ 102.352466][ T6335] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.789: mark_inode_dirty error [ 102.375243][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.792'. [ 102.387528][ T6335] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.789: corrupted inode contents [ 102.400359][ T6335] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.789: mark_inode_dirty error [ 102.406074][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.792'. [ 102.418291][ T6335] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.789: corrupted inode contents [ 102.441151][ T6335] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.789: mark_inode_dirty error [ 102.452625][ T6335] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.789: corrupted inode contents [ 102.465185][ T6335] EXT4-fs error (device loop0): ext4_truncate:4635: inode #15: comm syz.0.789: mark_inode_dirty error [ 102.490462][ T6335] EXT4-fs error (device loop0) in ext4_setattr:6035: Corrupt filesystem [ 102.499659][ T6346] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.789: corrupted inode contents [ 102.507153][ T29] audit: type=1400 audit(1769679194.534:1058): avc: denied { create } for pid=6354 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 102.530962][ T29] audit: type=1400 audit(1769679194.534:1059): avc: denied { write } for pid=6354 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 102.588159][ T3388] tipc: Node number set to 2130706433 [ 102.687708][ T6365] EXT4-fs (loop0): orphan cleanup on readonly fs [ 102.702451][ T6365] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 102.719166][ T6365] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 1024: comm syz.0.795: invalid block [ 102.756122][ T6359] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.797: corrupted inode contents [ 102.788895][ T6357] netlink: 'syz.5.798': attribute type 3 has an invalid length. [ 102.796577][ T6357] netlink: 'syz.5.798': attribute type 8 has an invalid length. [ 102.801957][ T6365] EXT4-fs (loop0): Remounting filesystem read-only [ 102.811405][ T6365] EXT4-fs (loop0): 1 truncate cleaned up [ 102.834540][ T6359] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.797: mark_inode_dirty error [ 102.880655][ T6359] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.797: corrupted inode contents [ 102.903531][ T6379] 9p: Bad value for 'rfdno' [ 102.914661][ T6359] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.797: mark_inode_dirty error [ 102.926854][ T6359] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.797: corrupted inode contents [ 102.939337][ T6359] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.797: mark_inode_dirty error [ 102.948298][ T6375] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.800: corrupted inode contents [ 102.950816][ T6359] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.797: corrupted inode contents [ 102.974236][ T6359] EXT4-fs error (device loop4): ext4_truncate:4635: inode #15: comm syz.4.797: mark_inode_dirty error [ 102.985707][ T6359] EXT4-fs error (device loop4) in ext4_setattr:6035: Corrupt filesystem [ 102.992824][ T6375] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.800: mark_inode_dirty error [ 103.007285][ T6373] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.797: corrupted inode contents [ 103.028801][ T6385] 9p: Bad value for 'rfdno' [ 103.044005][ T6373] FAULT_INJECTION: forcing a failure. [ 103.044005][ T6373] name failslab, interval 1, probability 0, space 0, times 0 [ 103.056702][ T6373] CPU: 1 UID: 0 PID: 6373 Comm: syz.4.797 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 103.056736][ T6373] Tainted: [W]=WARN [ 103.056743][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.056758][ T6373] Call Trace: [ 103.056764][ T6373] [ 103.056771][ T6373] __dump_stack+0x1d/0x30 [ 103.056799][ T6373] dump_stack_lvl+0x95/0xd0 [ 103.056862][ T6373] dump_stack+0x15/0x1b [ 103.056885][ T6373] should_fail_ex+0x263/0x280 [ 103.056934][ T6373] should_failslab+0x8c/0xb0 [ 103.056960][ T6373] __kmalloc_cache_noprof+0x64/0x4a0 [ 103.056990][ T6373] ? __iomap_dio_rw+0x194/0x14c0 [ 103.057037][ T6373] __iomap_dio_rw+0x194/0x14c0 [ 103.057074][ T6373] iomap_dio_rw+0x40/0x90 [ 103.057099][ T6373] ext4_file_write_iter+0xae5/0xf70 [ 103.057133][ T6373] do_iter_readv_writev+0x4fd/0x5a0 [ 103.057236][ T6373] vfs_writev+0x2e1/0x900 [ 103.057265][ T6373] do_writev+0xe9/0x210 [ 103.057292][ T6373] __x64_sys_writev+0x45/0x50 [ 103.057333][ T6373] x64_sys_call+0x1ba5/0x3000 [ 103.057361][ T6373] do_syscall_64+0xc0/0x2a0 [ 103.057393][ T6373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.057418][ T6373] RIP: 0033:0x7f57026caeb9 [ 103.057474][ T6373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.057491][ T6373] RSP: 002b:00007f5701106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 103.057576][ T6373] RAX: ffffffffffffffda RBX: 00007f5702946090 RCX: 00007f57026caeb9 [ 103.057602][ T6373] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000005 [ 103.057617][ T6373] RBP: 00007f5701106090 R08: 0000000000000000 R09: 0000000000000000 [ 103.057632][ T6373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.057644][ T6373] R13: 00007f5702946128 R14: 00007f5702946090 R15: 00007ffc3a4045d8 [ 103.057693][ T6373] [ 103.244931][ T6375] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.800: corrupted inode contents [ 103.268437][ T6375] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.800: mark_inode_dirty error [ 103.293352][ T6375] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.800: corrupted inode contents [ 103.312360][ T6375] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.800: mark_inode_dirty error [ 103.344865][ T6375] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.800: corrupted inode contents [ 103.376718][ T6375] EXT4-fs error (device loop2): ext4_truncate:4635: inode #15: comm syz.2.800: mark_inode_dirty error [ 103.400030][ T6375] EXT4-fs error (device loop2) in ext4_setattr:6035: Corrupt filesystem [ 103.639985][ T6422] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 4294967289)! [ 103.650947][ T6422] EXT4-fs (loop1): group descriptors corrupted! [ 103.708762][ T6402] ================================================================== [ 103.716862][ T6402] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 103.724950][ T6402] [ 103.727270][ T6402] write to 0xffff88812cfd8be8 of 8 bytes by task 6405 on cpu 0: [ 103.734896][ T6402] filemap_splice_read+0x523/0x780 [ 103.740026][ T6402] splice_direct_to_actor+0x26e/0x670 [ 103.745394][ T6402] do_splice_direct+0x119/0x1a0 [ 103.750249][ T6402] do_sendfile+0x382/0x650 [ 103.754678][ T6402] __x64_sys_sendfile64+0x105/0x150 [ 103.759878][ T6402] x64_sys_call+0x2db1/0x3000 [ 103.764566][ T6402] do_syscall_64+0xc0/0x2a0 [ 103.769079][ T6402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.774973][ T6402] [ 103.777286][ T6402] write to 0xffff88812cfd8be8 of 8 bytes by task 6402 on cpu 1: [ 103.784915][ T6402] filemap_splice_read+0x523/0x780 [ 103.790040][ T6402] splice_direct_to_actor+0x26e/0x670 [ 103.795416][ T6402] do_splice_direct+0x119/0x1a0 [ 103.800265][ T6402] do_sendfile+0x382/0x650 [ 103.804689][ T6402] __x64_sys_sendfile64+0x105/0x150 [ 103.809888][ T6402] x64_sys_call+0x2db1/0x3000 [ 103.814577][ T6402] do_syscall_64+0xc0/0x2a0 [ 103.819086][ T6402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.824984][ T6402] [ 103.827300][ T6402] value changed: 0x0000000000001669 -> 0x0000000000001675 [ 103.834401][ T6402] [ 103.836716][ T6402] Reported by Kernel Concurrency Sanitizer on: [ 103.842874][ T6402] CPU: 1 UID: 0 PID: 6402 Comm: syz.4.806 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 103.854067][ T6402] Tainted: [W]=WARN [ 103.857857][ T6402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.867910][ T6402] ================================================================== [ 104.083047][ T6399] syz.4.806: attempt to access beyond end of device [ 104.083047][ T6399] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 104.096680][ T6399] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 104.105322][ T6402] syz.4.806: attempt to access beyond end of device [ 104.105322][ T6402] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 104.118945][ T6402] Buffer I/O error on dev loop4, logical block 128, lost async page write