last executing test programs: 1m37.989528361s ago: executing program 1 (id=322): unshare(0x22020400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"13422b6bcc59196216ce65c71e32eedf", 0x0, 0x0, {0x200, 0xd}, {0x4, 0x3ef}, 0x7, [0xfffffffffffffe01, 0x8, 0x7, 0x7, 0x6, 0x0, 0x3, 0x25d, 0xce, 0xa, 0x9, 0x0, 0x10000, 0x1, 0x7, 0x9]}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000180)={{r0}, r2, 0x2, @inherit={0x68, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000004000000000000000700000000000000080000000000000009000000000000000f000000000000000104000000000000010000000000000009ebecffffffffffff07000000000000010000000000000053030000000000000f00000000000000"]}, @subvolid=0xf}) 1m37.904795723s ago: executing program 1 (id=324): kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) r0 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) open_by_handle_at(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="10000000f1000000980000000000000000000008"], 0x400040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) flock(r4, 0x3) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1m37.673192839s ago: executing program 1 (id=328): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={&(0x7f0000000100), 0xc}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu>-0\t\t\t') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x47, 0x9, 0x8, 0x8, 0x8, "3912a8", 0x8}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r4) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@gettaction={0xd8, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x2b, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x4c, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'gact\x00'}}, {0x3b, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xffffffffffffff12, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478000}}]}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x21, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0x0, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {0x1, 0x2}, [], {0x4, 0x1}, [{0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x1}, {0x20, 0x2}}, 0x2c, 0x3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYRES32, @ANYRESDEC=r6, @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4c080}, 0x4000094) mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) unshare(0x38000000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001f80)="$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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000004c90020000000000030001000000000000000000000000000000000000000000000000000000000000000000eeff"]) 1m36.912574765s ago: executing program 1 (id=332): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = semget$private(0x0, 0x2, 0x180) semtimedop(r0, &(0x7f0000000100)=[{0x0, 0x7fff, 0x400}, {0x3, 0x86ac, 0x1000}], 0x2, 0x0) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000740)='./file0/../file0\x00', &(0x7f0000000700), 0x0, 0x7, 0x2) capset(&(0x7f00000005c0)={0x19980330}, &(0x7f0000000080)={0x20000, 0x81, 0xfffffffe, 0x1ff, 0x2, 0x7}) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="50010000100013040000000000000000e000000100000000000000000000000020010000000000000000000000000000000000004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00001200000000000000ffffac1414bb0000000032000000ac1414000000000000000000000000000000000000000000830f00000000000000000000000000000000000000000000ffffffffffffffff00000000000000000800000000e4ff00000000000000000000000000000000000800000000000000cc000000000000000000000000000000f6000000040000000000000000000000000000000a00010100000000000000005f001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000980000008000"], 0x150}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x8044, &(0x7f00000000c0)={[{@noinit_itable}]}, 0x0, 0x236, &(0x7f0000000300)="$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") syz_clone3(&(0x7f0000000680)={0xaa0400, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x12, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000180400000006000000005dcc0300", @ANYRES32=r4, @ANYRES8=r4, @ANYRES32=r8], 0x3c}}, 0x4000040) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8, 0x0, 0x0, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x3}]}]}, {0x0, [0x0, 0x5f, 0x2e]}}, 0x0, 0x65}, 0x28) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000009a80)=@newtfilter={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {0xffff, 0x1}, {0xa, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 1m36.033382214s ago: executing program 1 (id=336): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb4}}, &(0x7f0000000440)='GPL\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@quota}]}, 0xfd, 0x279, &(0x7f0000001000)="$eJzs3T9oJFUcB/DfzO6qmywStRHEPyAiMRBiJ2gRKyEgIYgIKkRErCQRYoJd1srGQmv/BASbIHYmrdgEG0W4KndJkWsO7sIVF664K/bYzC63l2xyd7ub3dzO5wPDzOTNm/cm5PtmsuzMBJBbYxExHRGFiJiIiFJEJK0bvJRNY43VtfLWfESt9t715HC7bD3TrDcaEdWIeCOi2Cxb2fho7+b2O69+t1x65beND8v9Or5W+3u77x78PPvtnzOvr/x34epsEtNRaZS1HkcvJW1+Vkwinj6Lxs6JpDjoHvAg5r7+42I9989ExMuH+S9F2ojs90uP/V2K1346qe4P1/5/rp99BXqvVivVz4HVGpA7aURUIkknIyJbTtPJyewa/lJhJP1icemric8Xlxc+G/RIBfTIeONftM3RI/m/UsjyDzwKdjY7qVWJ2H1/bn2nvnxQOFac9qBjwHnQ+mn789msnv+JT1bHo33+gSEm/5Bf8g/5Jf8wBDrMrvxDfnWT/yfOqE9Ar7T75vldzv8wxErNhWrbYvmH/JJ/GFK/nn7tH/IPudaafwAgX2qPD/oOZGBQBj3+AAAAAAAAAAAAAAAAAAAAx62Vt+abU7/a/OfHiP23I6LYrv1C4yWk2dPGR24kUWypm2TVTvXWL6eXf/xiV93v2u89u/u63FGtJy/3qv3O/PvC2ez3m3tXT/zlrC5EVOsbTxWLx//+kq5fgvvUfcpLn3bZwEM6+lTANz/ob/tH3V4fbPsz2xF/1cefqXbjTxrPHs7bjz+V1kcsd+jLW13uAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL65EwAA///ryW6V") open(0x0, 0x42b42, 0x1c0) unlink(0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000420005"], 0x14}}, 0x44014) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0x13, 0x803, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x16}, [@call={0x85, 0x0, 0x0, 0x44}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x94) fcntl$getflags(0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r4, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x8, 0x3, 0x1}}, 0x14) write$char_usb(r4, &(0x7f0000000600)="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", 0x3cb) write$UHID_INPUT(r4, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 1m35.324531619s ago: executing program 1 (id=340): perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r1) 1m35.30545023s ago: executing program 32 (id=340): perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r1) 5.377868743s ago: executing program 0 (id=1027): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x138, 0xb, 0xd0e0011, 0x138, 0xc6, 0x210, 0x1d8, 0x190, 0x210, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x138, 0x7000000, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xff], 0xfffffffc}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x2, 0x0, [0x22, 0x18, 0x3e, 0x24, 0x2b, 0x26, 0x29, 0x25, 0x0, 0x3a, 0x26, 0x2c, 0x4, 0x2d, 0x1b, 0x3b], 0x0, 0x1, 0x9}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x20000, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008054) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x700, @local}, @ib={0x1b, 0xffff, 0x0, {"00000000009de402e395c51a00000009"}, 0x80000, 0x0, 0x3ff}}}, 0x118) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) fsync(r3) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x7ff}, &(0x7f00000001c0)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x7, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x13}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) r4 = socket(0x18, 0x80805, 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) 5.288941305s ago: executing program 0 (id=1030): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb4}}, &(0x7f0000000440)='GPL\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@quota}]}, 0xfd, 0x279, &(0x7f0000001000)="$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") open(0x0, 0x42b42, 0x1c0) unlink(0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000420005"], 0x14}}, 0x44014) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0x13, 0x803, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x16}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x44}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x94) fcntl$getflags(0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r4, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x8, 0x3, 0x1}}, 0x14) write$char_usb(r4, &(0x7f0000000600)="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", 0x352) write$UHID_INPUT(r4, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 5.079096779s ago: executing program 3 (id=1034): openat$sndseq(0xffffffffffffff9c, 0x0, 0x202) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, 0x0, 0x4000040) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0xa09, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xe}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x4000000) (fail_nth: 1) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private1, 0xb}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 4.781383806s ago: executing program 0 (id=1037): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000e80), 0x28902) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000ec0)={{0x1, 0x1, 0x2, 0x3}, 0x10000, 0x1, 0x200000000000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x80000, 0x100) getdents64(r1, &(0x7f00000001c0)=""/150, 0x96) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@dax}, {@minixdf}, {@jqfmt_vfsv1}, {@usrjquota, 0x2e}], [], 0x2c}, 0x84, 0x452, &(0x7f0000000480)="$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") syz_emit_ethernet(0x7a, &(0x7f00000008c0)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ee527a", 0x44, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {{}, {}, {}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x2, {0x0, 0x5}}}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) getdents(r1, &(0x7f0000001440)=""/4096, 0x1000) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000800)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64, @ANYRESOCT], 0x1, 0x1f5, &(0x7f0000000600)="$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") r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000280)=@file={0x1, './file1\x00'}, 0x91) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x2}}) r5 = socket(0x840000000002, 0x3, 0x8) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000006f80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="1c00"], 0x1d0}}], 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5422) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') syz_pidfd_open(0x0, 0x0) 3.850216696s ago: executing program 0 (id=1042): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x7, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.089202522s ago: executing program 3 (id=1047): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x19980330}, 0x0) mlock(&(0x7f0000b34000/0x1000)=nil, 0x1000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0', [], 0xa, "2a74557bccd414a45796379ac26941df801f40ccdfa922ff31a0ee900344901e034b9adb3ab41b73d8fd9388476b9a346344dc973ca03914f30630622fca9095e1b77f90845a2da82938887308ad1db110ecff667697a95545091daf579c0d350d"}, 0x6c) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="0380c20000000180c200000008004500005c0024000000019078ac1e0001ac1414aa050090781200022820000000026600000029000000000000acfea016f8fd178dc0bdb92e56b4d93114144477d968b5f4f657b79b2c6645d12de0fd53b164700000000689236c64010102ac141422640101010a00640101020a010101e0000001004c4eb09a7c698093"], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000001c0)=0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000206030000000000000000000700000014000780080008400000001008000640000000060500010006000000050005000200000005000400000000000900020073797a31001001000c000300686173683a6970007c7fa7a2941d2bf5bcb0f7ed9688b92d478aa5a24b96f23fbefe531fa4dbef48fba592e899b6b1ac11c2335a0dccd214599431c3e774377253c87ddd80abc0d2903eb19515f90ba738bdf5def74c08f72804eafba578b24b1b9533c6f7535aec033571268941b8c59c56d8"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004098) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) dup3(r3, r4, 0x0) capset(&(0x7f0000000200)={0x19980330, r2}, &(0x7f0000000240)={0x40, 0x5, 0x3, 0x2, 0xcd6, 0x2}) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000300)='v', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.560961095s ago: executing program 2 (id=1069): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x51dc67a8a4d90de9, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioprio_get$pid(0x1, 0xffffffffffffffff) dup(r1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002000700000008000340000000f50800044000000001080006400000000208000140000000130900010073797a30000000000900020073797a3200000000140000201100010000000000000000000700000a58842cac6ff77cd98a1978120d2fa2df1dee08d46957a9366bb56de260b690821c3d41a92f9e3508d35e17377d4d088c5874125a2aa3aa7ddb466c190aa51b5c26e71a4c"], 0x94}}, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80047456, &(0x7f00000010c0)) 1.470830368s ago: executing program 2 (id=1071): lsetxattr$security_capability(&(0x7f0000000200)='./bus\x00', &(0x7f0000000100), &(0x7f0000000740)=@v3={0x3000000, [{0x5, 0xb}, {0xffffff7f, 0x10001}]}, 0x18, 0x2) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x8000, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES64, @ANYRESHEX=r0], 0xfe, 0x1239, &(0x7f0000002200)="$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") creat(&(0x7f00000007c0)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 1.238485133s ago: executing program 3 (id=1073): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x100000, &(0x7f0000002f40)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x2, 0x6, 0x1, 0x70ce}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x38, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.211630843s ago: executing program 2 (id=1074): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r2, @ANYBLOB="090200000000fedbdf2501000000050002000a00000014000700ff0000000000000000000000000000010500040001"], 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=0x0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x6, 0x19, "90df"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x49, 0x0, 0x0) prctl$PR_MCE_KILL(0x23, 0x0, 0x7fffffffeffe) openat2(0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x58) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff00c}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) r8 = syz_open_dev$loop(&(0x7f0000000240), 0x7fff, 0xe4302) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x10b802, 0x16f) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000080)={r9, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffe, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67e4162e43ac610200000000002000000001000000000000000000000d00", [0x2, 0x7]}}) ioctl$BLKRRPART(r8, 0x125f, 0x0) pipe2$9p(&(0x7f0000000040), 0x4000) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000000000000000200000000000fb0ec6945919d2e25d92e4e25af677812f5d50761438659a0458ec9027cb0037d4cf6beff8c1ebd19338a4e6e5cb770c1227a0339057fbe803924ba08d31edad7181"], 0x14}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 1.073444176s ago: executing program 3 (id=1076): r0 = gettid() bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x44042, 0x1bf) sendfile(r2, r1, 0x0, 0xfffa83) 1.068189757s ago: executing program 2 (id=1078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITHAW(r3, 0xc0045878) 1.005529378s ago: executing program 3 (id=1080): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xff7f, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000100039042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000900002537a940240012800b0001006772657461700000140002800600020022"], 0x44}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) 965.023809ms ago: executing program 5 (id=1082): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000206050000000000edff000000000000040017"], 0x18}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) 951.501079ms ago: executing program 0 (id=1083): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xee, 0x1, 0x0, 0x0, 0x0, 0x1, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x8, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x3c, 0x0, @dev, @local}}}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000000)={[{@i_version}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000140), 0x1, 0xbe0, &(0x7f0000001000)="$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") fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0xc840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) 872.214321ms ago: executing program 5 (id=1085): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000040)) r5 = pidfd_getfd(r4, r4, 0x0) getsockname$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000140)=0x1c) 825.267822ms ago: executing program 3 (id=1086): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={&(0x7f0000000100), 0xc}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x47, 0x9, 0x8, 0x8, 0x8, "3912a8", 0x8}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(0x0, r4) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@gettaction={0xd8, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x2b, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x4c, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'gact\x00'}}, {0x3b, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xffffffffffffff12, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478000}}]}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x21, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0x0, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {0x1, 0x2}, [], {0x4, 0x1}, [{0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x1}, {0x20, 0x2}}, 0x2c, 0x3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYRES32, @ANYRESDEC=r6, @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4c080}, 0x4000094) mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) unshare(0x38000000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001f80)="$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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000004c90020000000000030001000000000000000000000000000000000000000000000000000000000000000000eeff"]) 824.997142ms ago: executing program 5 (id=1087): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={&(0x7f0000000100), 0xc}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x47, 0x9, 0x8, 0x8, 0x8, "3912a8", 0x8}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(0x0, r4) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@gettaction={0xd8, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x2b, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x4c, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'gact\x00'}}, {0x3b, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xffffffffffffff12, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478000}}]}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x21, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0x0, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {0x1, 0x2}, [], {0x4, 0x1}, [{0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x1}, {0x20, 0x2}}, 0x2c, 0x3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYRES32, @ANYRESDEC=r6, @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4c080}, 0x4000094) mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) unshare(0x38000000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001f80)="$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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000004c90020000000000030001000000000000000000000000000000000000000000000000000000000000000000eeff"]) 508.528309ms ago: executing program 5 (id=1090): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10e448, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xb, 0xffffffffffffffff, 0x8) gettid() socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60c43, 0xaa) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) close(r3) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) read(0xffffffffffffffff, &(0x7f0000000080)=""/1, 0x1) munlockall() bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c6b057b27b0f43b8c40d51e4e54ddba473c53ad66d81b79eb360edf2e9076e2a0d8e35aaf2c3c62d0e400f35d1dd75c3cb6b", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x20008080) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x1) r8 = syz_open_procfs(0x0, &(0x7f00000012c0)='coredump_filter\x00') writev(r8, &(0x7f0000000300)=[{&(0x7f0000000000)='4', 0x1}, {&(0x7f0000000140)="81", 0x1}], 0x2) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000001300)=""/4096, 0x1000) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 461.489689ms ago: executing program 4 (id=1091): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000380)={{r0, &(0x7f00000000c0)='}\t-@}{-++(\x00', 0x240101, &(0x7f0000000140)={@_ha_fsid={[0x7fffffff, 0xa370]}, {0x368c, 0x8, 0x3, 0x6f}}, 0xf, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x5}, {[0x6, 0xbd, 0x80000001, 0x1000]}, 0x7, 0xab, &(0x7f00000002c0)=""/171}) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x9100, &(0x7f0000000400)={0x0, 0x10008c, 0x100000, {r1}}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x36, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000100039042abd70070000000000000000", @ANYRES32=0x0, @ANYBLOB="000900002537a940240012800b0001006772657461700000140002800600020022"], 0x44}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000000)) 438.25511ms ago: executing program 4 (id=1092): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'macvlan1\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000080)=@can={{0x0, 0x1, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "afd2c737e530aa39"}, 0x10}, 0x1, 0x0, 0x0, 0x20004000}, 0xc008004) 391.530301ms ago: executing program 5 (id=1093): syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={{r1}, 0x0, 0x0, 0x9, 0x9}) r2 = socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$sg(&(0x7f0000000240), 0x200, 0x80c0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x20800) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x20000, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r4, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x204800, &(0x7f0000000000)=ANY=[@ANYBLOB='map=off,unhide\x00check=strict,block=0x0000000000000800,utf8,check=strictAgid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f636f6d70726573732c6d61703d61636f726e2c636865636b3d72656c617865742c6d61703d6f66662c6d6170396e6f726d616c2c73686f77611ba626a1fe0e"], 0x0, 0x6d8, &(0x7f00000002c0)="$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") 335.913533ms ago: executing program 4 (id=1094): syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x110c22ffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 253.419094ms ago: executing program 4 (id=1095): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000206050000000000edff000000000000040017"], 0x18}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) 202.530235ms ago: executing program 2 (id=1096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) unshare(0x2a020400) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="050000000000000000000600000008000300256846d6786192518c4bc4680cc7428fac98a1ecd996579799ff22bf35281553cc1559ca8b12334dc030f59ddec1493e38bcde497235816ba179b364e93ad1e1cfaa1ec9cd0f6f37bdbde6958b0515fbb938ea68277812ee9af9a8a5926f3bf00d1cbed402f5110acab0dc05ee9d38439e0fbdd1bf6c8f259a60a7a9bbdadcd31ad40989c46b3baa1374a4ae0c218ca9c9eb43bcb3ee5aa0c5f7b9c2e7e4ee301925fa95f91f5170094b9137ca", @ANYRES16=r1, @ANYBLOB="0800945467a60b050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="58220f887c446887e94a11e0c9455bb1c93b7b903269ab0d290667139e2efd96d0ffdd0ddc56772acde4fc03684e5e0de59a7cd93d0cae811dd00935cea521bb3677706a64bfdc721c5d27d0f8122d542d51acf93d75d8efdc07cc5c1666590e1e96c90ead22dd479b8141083a13081f7a48beb30e88d4f98720ce3e9e36a237f15f8e12884cddc24ce519b867fe007f33", @ANYRES16, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="0a0034000101010101010000080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035000000000004000501", @ANYRESHEX], 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000010", @ANYRES16=0x0, @ANYBLOB="010029bd7000fcdbdf257b00000008000300", @ANYRES32=r1, @ANYBLOB="0a000600ffffffffffff0000140002013c296de58ad727c2c1480541b695d786214cd5a4082242130ed9c0aca8357644d97adf02a6a8fc64c7064e7c366b6fa73601d3c52af4cb1b6ab2c25ee0ba9c9c5e8810f42a0973290fbfb3415cce45ed7409a62b17ce87644f843edec7432fd03fcade9c966cbb1621080fddf794e820563a3289d5c7e576cdc6cb702bbabd23538df1c746e1aed906fe8f16067f2c79d108fa66e94580ff2d75e85f6ab619020ad6ef2f026f6e3c0da6411982f2cb4d2514"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) 176.759286ms ago: executing program 4 (id=1097): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="ea20f503527833c53b72"], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f7, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x6, 0x19, "90df"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x49, 0x0, 0x0) prctl$PR_MCE_KILL(0x23, 0x0, 0x7fffffffeffe) openat2(0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x58) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff00c}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) r8 = syz_open_dev$loop(&(0x7f0000000240), 0x7fff, 0xe4302) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x10b802, 0x16f) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000080)={r9, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffe, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67e4162e43ac610200000000002000000001000000000000000000000d00", [0x2, 0x7]}}) ioctl$BLKRRPART(r8, 0x125f, 0x0) pipe2$9p(&(0x7f0000000040), 0x4000) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000000000000000200000000000fb0ec6945919d2e25d92e4e25af677812f5d50761438659a0458ec9027cb0037d4cf6beff8c1ebd19338a4e6e5cb770c1227a0339057fbe803924ba08d31edad7181"], 0x14}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 24.524629ms ago: executing program 0 (id=1100): bpf$MAP_CREATE(0x0, 0x0, 0x0) 0s ago: executing program 5 (id=1101): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4801000010000100feffffbf0201000000000000000000000000000000000000fe8000000000000000000000000000bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fe8000000000000000000000000000aa000000000000000009000000000000000700000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffffa90e000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffff05046863ca3f6a8b00000000000a0001fd2000000000000000570003006465666c617465"], 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x75b, &(0x7f0000000880)={[{@noload}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@init_itable, 0x0}, {}, {@journal_dev={'journal_dev', 0x3d, 0x10}}, {@i_version}, {@nobarrier}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6a}}, {@data_err_ignore}], [], 0x2c}, 0x0, 0x4f9, &(0x7f0000000200)="$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") lseek(r0, 0x158, 0x3) kernel console output (not intermixed with test programs): ystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 132.906461][ T5889] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.966560][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.053443][ T5893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6741 sclass=netlink_route_socket pid=5893 comm=syz.0.575 [ 133.101762][ T5895] lo speed is unknown, defaulting to 1000 [ 133.171773][ T4916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.203334][ T5899] loop5: detected capacity change from 0 to 512 [ 133.212917][ T5899] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 133.226471][ T5899] EXT4-fs (loop5): orphan cleanup on readonly fs [ 133.236980][ T5899] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz.5.577: inode #15: comm syz.5.577: iget: illegal inode # [ 133.254143][ T5899] loop5: lost filesystem error report for type 5 error -117 [ 133.254346][ T5899] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.577: couldn't read orphan inode 15 (err -117) [ 133.261791][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 133.261817][ C0] EXT4-fs (loop5): initial error at time 1783905522: ext4_orphan_get:1399 [ 133.261866][ C0] EXT4-fs (loop5): last error at time 1783905522: ext4_orphan_get:1399 [ 133.297992][ T5899] loop5: lost filesystem error report for type 5 error -117 [ 133.302772][ T5899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 133.347624][ T4916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.389306][ T5908] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.489111][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 133.527516][ T5925] netlink: 'syz.4.586': attribute type 3 has an invalid length. [ 133.600427][ T5927] loop4: detected capacity change from 0 to 8192 [ 133.630680][ T5932] loop2: detected capacity change from 0 to 1024 [ 133.643013][ T5932] EXT4-fs: Ignoring removed orlov option [ 133.660520][ T5932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.732882][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'. [ 133.743348][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'. [ 133.746302][ T5939] loop4: detected capacity change from 0 to 1024 [ 133.764392][ T5939] EXT4-fs: Ignoring removed orlov option [ 133.783238][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.784122][ T5939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.824869][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.590'. [ 133.838143][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.590'. [ 133.870794][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.900535][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 133.969738][ T5953] netlink: 'syz.4.592': attribute type 21 has an invalid length. [ 133.977711][ T5953] netlink: 13 bytes leftover after parsing attributes in process `syz.4.592'. [ 134.265462][ T5964] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 134.277741][ T5964] bridge1: entered promiscuous mode [ 135.639537][ T5970] loop3: detected capacity change from 0 to 512 [ 135.649251][ T5970] EXT4-fs: Ignoring removed orlov option [ 135.671650][ T5970] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 135.703596][ T5970] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.598: invalid indirect mapped block 32768 (level 2) [ 135.718324][ T5970] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 135.719907][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 135.737706][ C1] EXT4-fs (loop3): initial error at time 1783905525: ext4_free_branches:1023: inode 16 [ 135.748689][ C1] EXT4-fs (loop3): last error at time 1783905525: ext4_free_branches:1023: inode 16 [ 135.765874][ T5970] EXT4-fs (loop3): 1 orphan inode deleted [ 135.772874][ T5970] EXT4-fs (loop3): 1 truncate cleaned up [ 135.785515][ T5970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.854485][ T5953] loop4: detected capacity change from 0 to 1024 [ 135.938512][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.058196][ T5953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.119204][ T5953] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.167433][ T5978] loop0: detected capacity change from 0 to 8192 [ 136.197333][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 136.197352][ T28] audit: type=1400 audit(1783905525.836:697): avc: denied { write } for pid=5951 comm="syz.4.592" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.204142][ T5953] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.592: bg 0: block 112: padding at end of block bitmap is not set [ 136.261687][ T5990] netlink: 56 bytes leftover after parsing attributes in process `syz.2.603'. [ 136.274747][ T28] audit: type=1400 audit(1783905525.836:698): avc: denied { write } for pid=5951 comm="syz.4.592" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.309806][ T5953] EXT4-fs (loop4): Remounting filesystem read-only [ 136.342025][ T28] audit: type=1400 audit(1783905525.836:699): avc: denied { rename } for pid=5951 comm="syz.4.592" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.409758][ T28] audit: type=1400 audit(1783905525.836:700): avc: denied { unlink } for pid=5951 comm="syz.4.592" name="file3" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.455997][ T28] audit: type=1400 audit(1783905525.916:701): avc: denied { remount } for pid=5977 comm="syz.0.600" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 136.552485][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 136.593083][ T6002] 9p: Bad value for 'wfdno' [ 136.781641][ T28] audit: type=1400 audit(1783905526.426:702): avc: denied { bind } for pid=6009 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 136.835512][ T28] audit: type=1400 audit(1783905526.426:703): avc: denied { node_bind } for pid=6009 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 137.033435][ C1] sd 0:0:1:0: [sda] tag#5332 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 137.034012][ T28] audit: type=1400 audit(1783905526.676:704): avc: denied { write } for pid=6013 comm="syz.2.609" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 137.043882][ C1] sd 0:0:1:0: [sda] tag#5332 CDB: Read(6) 08 00 00 00 00 00 00 00 00 00 00 00 [ 137.264054][ T6023] loop2: detected capacity change from 0 to 512 [ 137.305394][ T28] audit: type=1400 audit(1783905526.946:705): avc: denied { execute } for pid=6027 comm="syz.5.615" name="cgroup" dev="tmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 137.343338][ T6026] SELinux: Context system_u:object_r:var_t:s0 is not valid (left unmapped). [ 137.374151][ T6023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.393950][ T28] audit: type=1400 audit(1783905527.016:706): avc: denied { relabelto } for pid=6020 comm="syz.4.612" name="bus" dev="tmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:var_t:s0" [ 137.429347][ T6034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.440738][ T6023] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #11: comm syz.2.614: checksumming directory block 0 [ 137.455352][ T6034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.466159][ T6023] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 137.477771][ T6034] netlink: 85 bytes leftover after parsing attributes in process `syz.0.616'. [ 137.500249][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.601922][ T6028] tipc: Started in network mode [ 137.611121][ T6028] tipc: Node identity d6a7b3c6e6a8, cluster identity 4711 [ 137.620573][ T6028] tipc: Enabled bearer , priority 0 [ 137.627792][ T6028] syzkaller0: entered promiscuous mode [ 137.642657][ T6028] syzkaller0: entered allmulticast mode [ 137.670825][ T6028] tipc: Resetting bearer [ 137.681640][ T6028] tipc: Disabling bearer [ 137.693221][ T6046] IPVS: sh: FWM 3 0x00000003 - no destination available [ 137.700531][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 137.817775][ T6053] loop5: detected capacity change from 0 to 1024 [ 137.835382][ T6053] EXT4-fs: Ignoring removed orlov option [ 137.863578][ T6055] loop2: detected capacity change from 0 to 1024 [ 137.879395][ T6055] EXT4-fs: Ignoring removed orlov option [ 137.891048][ T6053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.917540][ T6055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.951353][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.622'. [ 137.962748][ T6034] loop0: detected capacity change from 0 to 8192 [ 137.968809][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.622'. [ 137.989263][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 137.999506][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 138.018184][ T6034] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.040655][ T4916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.053549][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.295188][ T6077] loop4: detected capacity change from 0 to 128 [ 138.306542][ T6077] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.336757][ T6077] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.388044][ T6079] loop0: detected capacity change from 0 to 512 [ 138.411637][ T6079] EXT4-fs: dax option not supported [ 138.516569][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.567158][ T6082] loop4: detected capacity change from 0 to 2048 [ 138.612895][ T6082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.630240][ T6082] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.671992][ T3860] IPVS: starting estimator thread 0... [ 138.686494][ T6084] IPVS: sh: FWM 3 0x00000003 - no destination available [ 138.702345][ T6089] Dead loop on virtual device ip6_vti0 (net 36), fix it urgently! [ 138.753249][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 138.760897][ T6087] IPVS: using max 2304 ests per chain, 115200 per kthread [ 138.831255][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.963679][ T6100] EXT4-fs: Ignoring removed orlov option [ 138.980839][ T6098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.989861][ T6100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.010516][ T6098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.038877][ T6098] netlink: 85 bytes leftover after parsing attributes in process `syz.0.636'. [ 139.048112][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 139.062459][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 139.097614][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.276844][ T6121] netlink: 'syz.2.641': attribute type 2 has an invalid length. [ 139.321959][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.331215][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 139.341371][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.350602][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 139.364083][ T6124] loop7: unable to read partition table [ 139.375675][ T6124] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 139.389654][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.398847][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 139.411439][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.423106][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 139.433062][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.442261][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 139.453520][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.462750][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 139.470880][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.480103][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 139.489653][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.498892][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 139.507687][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.517063][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 139.526121][ T6131] loop7: unable to read partition table [ 139.578910][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.670905][ T6146] EXT4-fs: Ignoring removed orlov option [ 139.678994][ T6146] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 139.700073][ T6146] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.647: invalid indirect mapped block 32768 (level 2) [ 139.713690][ T6146] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 139.714274][ T6146] EXT4-fs (loop4): 1 orphan inode deleted [ 139.723466][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 139.723492][ C0] EXT4-fs (loop4): initial error at time 1783905529: ext4_free_branches:1023: inode 16 [ 139.723530][ C0] EXT4-fs (loop4): last error at time 1783905529: ext4_free_branches:1023: inode 16 [ 139.755087][ T6146] EXT4-fs (loop4): 1 truncate cleaned up [ 139.761245][ T6146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.851218][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.878660][ T6136] netlink: 'syz.3.644': attribute type 1 has an invalid length. [ 139.910677][ T6153] netlink: 76 bytes leftover after parsing attributes in process `syz.4.649'. [ 139.931225][ T6153] netlink: 72 bytes leftover after parsing attributes in process `syz.4.649'. [ 139.947780][ T6098] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.959947][ T6153] netlink: 'syz.4.649': attribute type 3 has an invalid length. [ 140.175861][ T6153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.256493][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.356921][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.366182][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 140.375453][ T6173] loop7: unable to read partition table [ 140.381639][ T6173] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 140.414776][ T6177] loop7: unable to read partition table [ 140.506352][ T6181] IPVS: sh: FWM 3 0x00000003 - no destination available [ 140.514919][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 140.697025][ T6185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.779213][ T6185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.943747][ T6189] set_capacity_and_notify: 7 callbacks suppressed [ 140.944047][ T6189] loop2: detected capacity change from 0 to 8192 [ 140.974902][ T6189] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.696321][ T6194] loop5: detected capacity change from 0 to 512 [ 141.704560][ T6194] EXT4-fs: Ignoring removed orlov option [ 141.742139][ T6194] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 141.863167][ T6194] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.659: invalid indirect mapped block 32768 (level 2) [ 141.883010][ T6199] IPVS: sh: FWM 3 0x00000003 - no destination available [ 141.896004][ T6194] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 141.896477][ T6194] EXT4-fs (loop5): 1 orphan inode deleted [ 141.905978][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 141.906001][ C1] EXT4-fs (loop5): initial error at time 1783905531: ext4_free_branches:1023: inode 16 [ 141.906058][ C1] EXT4-fs (loop5): last error at time 1783905531: ext4_free_branches:1023: inode 16 [ 141.940499][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 141.985352][ T6194] EXT4-fs (loop5): 1 truncate cleaned up [ 141.998959][ T6194] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.204229][ T4916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.459149][ T6209] IPVS: sh: FWM 3 0x00000003 - no destination available [ 142.485348][ T6204] loop2: detected capacity change from 0 to 512 [ 142.622124][ T6213] loop4: detected capacity change from 0 to 512 [ 142.907114][ T6215] loop5: detected capacity change from 0 to 128 [ 142.920715][ T6215] msdos: Unknown parameter 'noduts' [ 143.077295][ T6218] loop7: detected capacity change from 0 to 7 [ 143.346001][ T6227] __nla_validate_parse: 3 callbacks suppressed [ 143.346017][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'. [ 143.394215][ T6229] loop0: detected capacity change from 0 to 1024 [ 143.419664][ T6229] netlink: 'syz.0.670': attribute type 2 has an invalid length. [ 143.586766][ T6213] EXT4-fs: Ignoring removed i_version option [ 143.593575][ T6213] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 143.626060][ T6218] loop7: unable to read partition table [ 143.640288][ T6213] EXT4-fs (loop4): 1 truncate cleaned up [ 143.649011][ T6218] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 143.669952][ T6213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.687010][ T6222] loop7: unable to read partition table [ 143.704338][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 143.704358][ T28] audit: type=1400 audit(1783905533.336:713): avc: denied { write } for pid=6212 comm="syz.4.666" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.791632][ T6235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.802865][ T28] audit: type=1400 audit(1783905533.446:714): avc: denied { write } for pid=6212 comm="syz.4.666" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.851043][ T6235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.867822][ T6235] netlink: 85 bytes leftover after parsing attributes in process `syz.2.671'. [ 144.339034][ T6235] loop2: detected capacity change from 0 to 8192 [ 144.389015][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.408034][ T6235] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.418864][ T6239] loop3: detected capacity change from 0 to 512 [ 144.473492][ T6239] EXT4-fs (loop3): 1 orphan inode deleted [ 144.492179][ T6239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.504886][ T6239] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.518681][ T6239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=6239 comm=syz.3.672 [ 144.548116][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.557345][ T6246] netlink: 76 bytes leftover after parsing attributes in process `syz.4.673'. [ 144.567064][ T6246] netlink: 72 bytes leftover after parsing attributes in process `syz.4.673'. [ 144.577314][ T6246] netlink: 'syz.4.673': attribute type 3 has an invalid length. [ 144.585922][ T6246] netlink: 11 bytes leftover after parsing attributes in process `syz.4.673'. [ 144.668102][ T28] audit: type=1400 audit(1783905534.306:715): avc: denied { setopt } for pid=6254 comm="syz.3.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 144.782931][ T28] audit: type=1400 audit(1783905534.426:716): avc: denied { accept } for pid=6258 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 144.832540][ T6246] loop4: detected capacity change from 0 to 2048 [ 144.885885][ T6246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.945599][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.188025][ T6276] EXT4-fs: Ignoring removed i_version option [ 145.202768][ T3618] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 145.255077][ T6276] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 145.350005][ T6276] EXT4-fs (loop3): 1 truncate cleaned up [ 145.393944][ T6276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.486731][ T28] audit: type=1400 audit(1783905535.126:717): avc: denied { write } for pid=6275 comm="syz.3.683" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.591452][ T28] audit: type=1400 audit(1783905535.236:718): avc: denied { write } for pid=6275 comm="syz.3.683" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.242575][ T6290] set_capacity_and_notify: 1 callbacks suppressed [ 146.242593][ T6290] loop2: detected capacity change from 0 to 128 [ 146.256746][ T6290] msdos: Unknown parameter 'noduts' [ 146.642639][ T6292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.652367][ T6292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.662391][ T6292] netlink: 85 bytes leftover after parsing attributes in process `syz.0.686'. [ 146.869647][ T6292] loop0: detected capacity change from 0 to 8192 [ 146.897375][ T6292] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.011927][ T6296] FAULT_INJECTION: forcing a failure. [ 147.011927][ T6296] name failslab, interval 1, probability 0, space 0, times 0 [ 147.026353][ T6296] CPU: 1 UID: 0 PID: 6296 Comm: syz.0.688 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 147.026451][ T6296] Tainted: [W]=WARN [ 147.026461][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 147.026478][ T6296] Call Trace: [ 147.026487][ T6296] [ 147.026495][ T6296] __dump_stack+0x1d/0x30 [ 147.026521][ T6296] dump_stack_lvl+0x95/0xd0 [ 147.026544][ T6296] dump_stack+0x15/0x1b [ 147.026595][ T6296] should_fail_ex+0x25e/0x270 [ 147.026631][ T6296] should_failslab+0x8c/0xb0 [ 147.026661][ T6296] __kmalloc_noprof+0xd4/0x4a0 [ 147.026779][ T6296] ? io_cache_alloc_new+0x2a/0xb0 [ 147.026811][ T6296] ? io_cache_alloc_new+0x2a/0xb0 [ 147.026852][ T6296] io_cache_alloc_new+0x2a/0xb0 [ 147.027017][ T6296] __io_prep_rw+0x121/0x740 [ 147.027043][ T6296] ? __io_alloc_req_refill+0x176/0x1d0 [ 147.027082][ T6296] io_prep_write+0x34/0xe0 [ 147.027122][ T6296] ? blk_start_plug_nr_ios+0xc2/0xe0 [ 147.027150][ T6296] io_submit_sqes+0x737/0x1180 [ 147.027178][ T6296] __se_sys_io_uring_enter+0x25c/0xf90 [ 147.027208][ T6296] ? mutex_unlock+0x4e/0x90 [ 147.027247][ T6296] ? fput+0x8f/0xc0 [ 147.027344][ T6296] __x64_sys_io_uring_enter+0x78/0x90 [ 147.027371][ T6296] x64_sys_call+0x1e16/0x3020 [ 147.027449][ T6296] do_syscall_64+0x136/0x3c0 [ 147.027489][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.027540][ T6296] RIP: 0033:0x7f88bd40de59 [ 147.027561][ T6296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.027586][ T6296] RSP: 002b:00007f88bbe67028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 147.027609][ T6296] RAX: ffffffffffffffda RBX: 00007f88bd695fa0 RCX: 00007f88bd40de59 [ 147.027624][ T6296] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 147.027636][ T6296] RBP: 00007f88bbe67090 R08: 0000000000000000 R09: 0000000000000000 [ 147.027648][ T6296] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 147.027722][ T6296] R13: 00007f88bd696038 R14: 00007f88bd695fa0 R15: 00007ffde00821a8 [ 147.027742][ T6296] [ 147.288755][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.334136][ T28] audit: type=1400 audit(1783905536.976:719): avc: denied { name_bind } for pid=6299 comm="syz.3.689" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 147.441025][ T28] audit: type=1400 audit(1783905537.086:720): avc: denied { mount } for pid=6299 comm="syz.3.689" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 147.780101][ T6328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.807528][ T6328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.827075][ T6328] netlink: 85 bytes leftover after parsing attributes in process `syz.2.698'. [ 147.849983][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.701'. [ 147.858986][ T6340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.701'. [ 147.870153][ T6340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.701'. [ 147.917470][ T6343] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20000 [ 147.951085][ T28] audit: type=1400 audit(1783905537.586:721): avc: denied { create } for pid=6342 comm="syz.4.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 147.989326][ T6346] netlink: 'syz.5.703': attribute type 3 has an invalid length. [ 147.998165][ T28] audit: type=1400 audit(1783905537.626:722): avc: denied { create } for pid=6342 comm="syz.4.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 148.075330][ T6348] IPVS: sh: FWM 3 0x00000003 - no destination available [ 148.147314][ T6346] loop5: detected capacity change from 0 to 2048 [ 148.213163][ T6346] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.291176][ T4916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.322137][ T6360] loop0: detected capacity change from 0 to 8 [ 148.348226][ T6357] netlink: 'syz.3.706': attribute type 39 has an invalid length. [ 148.357283][ T6362] __nla_validate_parse: 3 callbacks suppressed [ 148.357340][ T6362] netlink: 68 bytes leftover after parsing attributes in process `syz.5.707'. [ 148.361065][ T6360] loop0: detected capacity change from 8 to 7 [ 148.408801][ C0] blk_print_req_error: 17 callbacks suppressed [ 148.408819][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 148.426038][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.435268][ C1] buffer_io_error: 17 callbacks suppressed [ 148.435299][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 148.452157][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.461544][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 148.469980][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.479194][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 148.490187][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.499407][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 148.507413][ T6360] loop0: unable to read partition table [ 148.508241][ T6362] dummy0: entered promiscuous mode [ 148.514602][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.527905][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 148.536144][ T6360] loop_reread_partitions: partition scan of loop0 ([{BѷMܾ`*Z5]z(Ť4+hGpXgm [ 148.536144][ T6360] .BL_se) failed (rc=-5) [ 148.551827][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.551866][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 148.569332][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.578564][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 148.591303][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.600537][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 148.613906][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.623240][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 148.633098][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 148.653505][ T6362] dummy0: left promiscuous mode [ 148.746652][ T6375] loop0: detected capacity change from 0 to 256 [ 148.762135][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 148.762154][ T28] audit: type=1400 audit(1783905538.406:724): avc: denied { watch_reads } for pid=6374 comm="syz.0.714" path="/134/file1" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 148.810561][ T6328] loop2: detected capacity change from 0 to 8192 [ 148.826784][ T6328] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.856014][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.715'. [ 148.884216][ T3618] kworker/u8:8: attempt to access beyond end of device [ 148.884216][ T3618] loop0: rw=1, sector=1800, nr_sectors = 4 limit=256 [ 148.884771][ T6381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.913413][ T6381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.974391][ T6386] netlink: 76 bytes leftover after parsing attributes in process `syz.2.717'. [ 148.984074][ T6386] netlink: 72 bytes leftover after parsing attributes in process `syz.2.717'. [ 148.994373][ T6386] netlink: 'syz.2.717': attribute type 3 has an invalid length. [ 149.003521][ T6386] netlink: 11 bytes leftover after parsing attributes in process `syz.2.717'. [ 149.020060][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 149.151227][ T6386] loop2: detected capacity change from 0 to 2048 [ 149.195666][ T6386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.273252][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.308501][ T6394] loop2: detected capacity change from 0 to 1024 [ 149.316759][ T6394] EXT4-fs: Ignoring removed orlov option [ 149.342827][ T6394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.359931][ T28] audit: type=1400 audit(1783905539.006:725): avc: denied { setattr } for pid=6393 comm="syz.2.719" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 149.382360][ T28] audit: type=1400 audit(1783905539.016:726): avc: denied { write } for pid=6393 comm="syz.2.719" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.406511][ T28] audit: type=1400 audit(1783905539.016:727): avc: denied { create } for pid=6393 comm="syz.2.719" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 149.449469][ T28] audit: type=1400 audit(1783905539.016:728): avc: denied { write } for pid=6393 comm="syz.2.719" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.471463][ T28] audit: type=1400 audit(1783905539.026:729): avc: denied { write } for pid=6393 comm="syz.2.719" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.493489][ T28] audit: type=1400 audit(1783905539.026:730): avc: denied { write } for pid=6393 comm="syz.2.719" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.517044][ T28] audit: type=1400 audit(1783905539.116:731): avc: denied { write } for pid=6393 comm="syz.2.719" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.540031][ T28] audit: type=1400 audit(1783905539.116:732): avc: denied { write } for pid=6393 comm="syz.2.719" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.599913][ T28] audit: type=1400 audit(1783905539.246:733): avc: denied { open } for pid=6401 comm="syz.4.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 149.635584][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.761060][ T6416] loop3: detected capacity change from 0 to 1024 [ 149.888493][ T6427] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.909992][ T6427] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.919022][ T6418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=6418 comm=syz.4.725 [ 149.933020][ T6427] netlink: 85 bytes leftover after parsing attributes in process `syz.2.727'. [ 149.945160][ T6416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 149.959389][ T6418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=6418 comm=syz.4.725 [ 150.033993][ T6432] netlink: 76 bytes leftover after parsing attributes in process `syz.4.729'. [ 150.044601][ T6432] netlink: 72 bytes leftover after parsing attributes in process `syz.4.729'. [ 150.050159][ T6416] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.056791][ T6432] netlink: 'syz.4.729': attribute type 3 has an invalid length. [ 150.072367][ T6432] netlink: 11 bytes leftover after parsing attributes in process `syz.4.729'. [ 150.223149][ T6432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.253213][ T6416] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.720: Freeing blocks not in datazone - block = 0, count = 16 [ 150.267250][ T6416] EXT4-fs (loop3): Remounting filesystem read-only [ 150.287027][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.323985][ T6448] EXT4-fs: Ignoring removed i_version option [ 150.332124][ T6448] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 150.349173][ T6448] EXT4-fs (loop4): 1 truncate cleaned up [ 150.355694][ T6448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.415209][ T6427] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.508902][ T6454] EXT4-fs: Ignoring removed i_version option [ 150.533009][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 150.542656][ T6454] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 150.560823][ T6454] EXT4-fs (loop0): 1 truncate cleaned up [ 150.575755][ T6454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.915803][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.964780][ T6467] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6467 comm=syz.4.739 [ 151.985152][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.006244][ T6476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6476 comm=syz.4.744 [ 152.713991][ T6476] lo: Caught tx_queue_len zero misconfig [ 152.725088][ T6483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.760997][ T6483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.001481][ T6488] set_capacity_and_notify: 6 callbacks suppressed [ 153.001501][ T6488] loop0: detected capacity change from 0 to 128 [ 153.047987][ T6486] netlink: 76 bytes leftover after parsing attributes in process `syz.2.743'. [ 153.076706][ T6488] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 153.103800][ T6486] netlink: 'syz.2.743': attribute type 3 has an invalid length. [ 153.151245][ T6488] ext4 filesystem being mounted at /142/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.192857][ T6493] loop2: detected capacity change from 0 to 2048 [ 153.243987][ T6493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.401085][ T6488] EXT4-fs (loop0): shut down requested (1) [ 153.409565][ T6488] FAULT_INJECTION: forcing a failure. [ 153.409565][ T6488] name failslab, interval 1, probability 0, space 0, times 0 [ 153.441301][ T6488] CPU: 1 UID: 0 PID: 6488 Comm: syz.0.741 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 153.441349][ T6488] Tainted: [W]=WARN [ 153.441359][ T6488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.441376][ T6488] Call Trace: [ 153.441385][ T6488] [ 153.441394][ T6488] __dump_stack+0x1d/0x30 [ 153.441420][ T6488] dump_stack_lvl+0x95/0xd0 [ 153.441525][ T6488] dump_stack+0x15/0x1b [ 153.441673][ T6488] should_fail_ex+0x25e/0x270 [ 153.441788][ T6488] should_failslab+0x8c/0xb0 [ 153.441813][ T6488] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 153.441838][ T6488] ? security_inode_alloc+0x37/0x100 [ 153.441863][ T6488] ? security_inode_alloc+0x37/0x100 [ 153.441888][ T6488] ? sock_alloc_inode+0x1/0xf0 [ 153.441939][ T6488] security_inode_alloc+0x37/0x100 [ 153.441965][ T6488] inode_init_always_gfp+0x495/0x4e0 [ 153.441999][ T6488] ? __pfx_sock_alloc_inode+0x10/0x10 [ 153.442032][ T6488] alloc_inode+0x58/0x170 [ 153.442056][ T6488] __sock_create+0x121/0x580 [ 153.442086][ T6488] __sys_socketpair+0x1c4/0x430 [ 153.442184][ T6488] __x64_sys_socketpair+0x52/0x60 [ 153.442216][ T6488] x64_sys_call+0x2de5/0x3020 [ 153.442248][ T6488] do_syscall_64+0x136/0x3c0 [ 153.442393][ T6488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.442423][ T6488] RIP: 0033:0x7f88bd40de59 [ 153.442444][ T6488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.442468][ T6488] RSP: 002b:00007f88bbe67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 153.442544][ T6488] RAX: ffffffffffffffda RBX: 00007f88bd695fa0 RCX: 00007f88bd40de59 [ 153.442561][ T6488] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 153.442634][ T6488] RBP: 00007f88bbe67090 R08: 0000000000000000 R09: 0000000000000000 [ 153.442649][ T6488] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 153.442702][ T6488] R13: 00007f88bd696038 R14: 00007f88bd695fa0 R15: 00007ffde00821a8 [ 153.442729][ T6488] [ 153.442752][ T6488] socket: no more sockets [ 153.998438][ T6503] loop4: detected capacity change from 0 to 128 [ 154.005666][ T6503] msdos: Unknown parameter 'noduts' [ 154.086921][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.162782][ T6483] loop5: detected capacity change from 0 to 8192 [ 154.206058][ T6483] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.410347][ T6510] loop5: detected capacity change from 0 to 512 [ 154.417242][ T6510] EXT4-fs: Ignoring removed i_version option [ 154.445584][ T6510] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 154.457059][ T6510] EXT4-fs (loop5): 1 truncate cleaned up [ 154.463423][ T6510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.559797][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 154.559817][ T28] audit: type=1400 audit(1783905544.126:748): avc: denied { write } for pid=6505 comm="syz.5.749" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.604658][ T28] audit: type=1400 audit(1783905544.176:749): avc: denied { write } for pid=6505 comm="syz.5.749" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.762117][ T6508] loop3: detected capacity change from 0 to 1024 [ 154.784913][ T6491] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 154.839856][ T6515] loop0: detected capacity change from 0 to 1024 [ 154.855233][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.876385][ T6515] EXT4-fs: Ignoring removed orlov option [ 154.931505][ T6515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.018819][ T6515] __nla_validate_parse: 2 callbacks suppressed [ 155.018859][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 155.078515][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 155.138058][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.162530][ T4916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.221393][ T28] audit: type=1400 audit(1783905544.856:750): avc: denied { write } for pid=6507 comm="syz.3.750" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.254756][ T28] audit: type=1400 audit(1783905544.896:751): avc: denied { write } for pid=6507 comm="syz.3.750" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.280341][ T28] audit: type=1400 audit(1783905544.896:752): avc: denied { create } for pid=6507 comm="syz.3.750" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 155.305812][ T28] audit: type=1400 audit(1783905544.946:753): avc: denied { write } for pid=6507 comm="syz.3.750" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.327875][ T28] audit: type=1400 audit(1783905544.946:754): avc: denied { rmdir } for pid=6507 comm="syz.3.750" name="control" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 155.541358][ T28] audit: type=1400 audit(1783905545.186:755): avc: denied { read append } for pid=6531 comm="syz.4.757" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 155.637363][ T28] audit: type=1400 audit(1783905545.186:756): avc: denied { open } for pid=6531 comm="syz.4.757" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 155.725855][ T6543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.740162][ T6543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.755524][ T6546] loop3: detected capacity change from 0 to 512 [ 155.851489][ T28] audit: type=1400 audit(1783905545.496:757): avc: denied { read } for pid=6541 comm="syz.3.756" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 155.932060][ T6546] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 156.001178][ T6546] ext4 filesystem being remounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.051661][ T6566] netlink: 196 bytes leftover after parsing attributes in process `syz.5.763'. [ 156.069970][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.763'. [ 156.112505][ T6567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.766'. [ 156.130762][ T6543] loop0: detected capacity change from 0 to 8192 [ 156.163467][ T6543] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.370663][ T6577] loop0: detected capacity change from 0 to 4096 [ 156.379225][ T6577] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.401636][ T6577] EXT4-fs error (device loop0): __ext4_remount:6844: comm syz.0.770: Abort forced by user [ 156.416064][ T6577] EXT4-fs (loop0): Remounting filesystem read-only [ 156.422989][ T6577] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 156.438755][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'. [ 156.448738][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'. [ 156.641350][ T6587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6587 comm=syz.0.772 [ 156.854566][ T6589] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 156.873903][ T6589] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 156.899547][ T6589] System zones: 1-12 [ 156.933429][ T6589] EXT4-fs (loop0): orphan cleanup on readonly fs [ 156.974004][ T6589] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.773: bg 0: block 361: padding at end of block bitmap is not set [ 156.994475][ T6589] loop0: lost filesystem error report for type 5 error -117 [ 156.997039][ T6589] EXT4-fs (loop0): Remounting filesystem read-only [ 157.005659][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 157.005806][ C0] EXT4-fs (loop0): initial error at time 1783905546: ext4_validate_block_bitmap:441 [ 157.006069][ C0] EXT4-fs (loop0): last error at time 1783905546: ext4_validate_block_bitmap:441 [ 157.043677][ T6589] EXT4-fs (loop0): 1 truncate cleaned up [ 157.058787][ T6606] FAULT_INJECTION: forcing a failure. [ 157.058787][ T6606] name failslab, interval 1, probability 0, space 0, times 0 [ 157.077348][ T6602] bridge_slave_0: left allmulticast mode [ 157.090500][ T6606] CPU: 0 UID: 0 PID: 6606 Comm: syz.4.778 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 157.090600][ T6606] Tainted: [W]=WARN [ 157.090607][ T6606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 157.090620][ T6606] Call Trace: [ 157.090626][ T6606] [ 157.090634][ T6606] __dump_stack+0x1d/0x30 [ 157.090688][ T6606] dump_stack_lvl+0x95/0xd0 [ 157.090715][ T6606] dump_stack+0x15/0x1b [ 157.090735][ T6606] should_fail_ex+0x25e/0x270 [ 157.090769][ T6606] should_failslab+0x8c/0xb0 [ 157.090805][ T6606] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 157.090834][ T6606] ? do_getname+0x2e/0x1c0 [ 157.090876][ T6606] ? do_getname+0x2e/0x1c0 [ 157.090977][ T6606] do_getname+0x2e/0x1c0 [ 157.091009][ T6606] getname_flags+0x1d/0x30 [ 157.091040][ T6606] do_sys_openat2+0x6c/0x130 [ 157.091149][ T6606] __x64_sys_openat+0xf2/0x120 [ 157.091190][ T6606] x64_sys_call+0x1e39/0x3020 [ 157.091234][ T6606] do_syscall_64+0x136/0x3c0 [ 157.091281][ T6606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.091309][ T6606] RIP: 0033:0x7f959cc2e68e [ 157.091327][ T6606] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 157.091431][ T6606] RSP: 002b:00007f959b6c6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.091458][ T6606] RAX: ffffffffffffffda RBX: 00007f959b6c76c0 RCX: 00007f959cc2e68e [ 157.091477][ T6606] RDX: 0000000000000002 RSI: 00007f959b6c6c00 RDI: ffffffffffffff9c [ 157.091491][ T6606] RBP: 00007f959b6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 157.091504][ T6606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.091516][ T6606] R13: 00007f959cef6038 R14: 00007f959cef5fa0 R15: 00007ffc20e8a758 [ 157.091571][ T6606] [ 157.102356][ T6602] bridge_slave_0: left promiscuous mode [ 157.253633][ T6608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.272488][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 157.312533][ T6602] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.320955][ T6610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.383122][ T6602] bridge_slave_1: left allmulticast mode [ 157.388989][ T6602] bridge_slave_1: left promiscuous mode [ 157.399899][ T6610] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.413221][ T6602] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.426483][ T6614] netlink: 'syz.0.781': attribute type 1 has an invalid length. [ 157.438696][ T6602] bond0: (slave bond_slave_0): Releasing backup interface [ 157.464961][ T6602] bond0: (slave bond_slave_1): Releasing backup interface [ 157.542297][ T6602] team0: Port device team_slave_0 removed [ 157.563622][ T6602] team0: Port device team_slave_1 removed [ 157.581239][ T6602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.588776][ T6602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.603572][ T6602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.619815][ T6602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.631747][ T6602] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 157.654618][ T6614] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 157.893966][ T6637] EXT4-fs: Ignoring removed i_version option [ 158.045589][ T6637] EXT4-fs error (device loop4): ext4_quota_enable:7228: comm syz.4.782: Bad quota inum: 1, type: 0 [ 158.057498][ T6637] loop4: lost filesystem error report for type 5 error -117 [ 158.059354][ T6637] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=1). Please run e2fsck to fix. [ 158.059732][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 158.059849][ C0] EXT4-fs (loop4): initial error at time 1783905547: ext4_quota_enable:7228 [ 158.059870][ C0] EXT4-fs (loop4): last error at time 1783905547: ext4_quota_enable:7228 [ 158.111810][ T6637] EXT4-fs (loop4): mount failed [ 159.375108][ T6645] netlink: 20 bytes leftover after parsing attributes in process `syz.2.787'. [ 159.413760][ T3618] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.523296][ T3618] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.535360][ T3618] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.552305][ T6664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.559991][ T3618] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.569884][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 159.569903][ T28] audit: type=1400 audit(1783905549.206:762): avc: denied { create } for pid=6661 comm="syz.5.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 159.593592][ T6664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.604766][ T6662] netlink: 12 bytes leftover after parsing attributes in process `syz.5.791'. [ 159.615779][ T28] audit: type=1400 audit(1783905549.246:763): avc: denied { write } for pid=6661 comm="syz.5.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 159.673804][ T28] audit: type=1400 audit(1783905549.316:764): avc: denied { ioctl } for pid=6669 comm="syz.5.794" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 159.755687][ T6673] syzkaller0: entered promiscuous mode [ 159.761388][ T6673] syzkaller0: entered allmulticast mode [ 159.865565][ T28] audit: type=1400 audit(1783905549.506:765): avc: denied { bind } for pid=6678 comm="syz.5.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 159.890026][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.5.797'. [ 159.933710][ T6664] set_capacity_and_notify: 3 callbacks suppressed [ 159.933753][ T6664] loop4: detected capacity change from 0 to 8192 [ 159.952597][ T6679] loop5: detected capacity change from 0 to 8192 [ 159.969983][ T6679] vfat: Unknown parameter 'J f]@EXU}˘';e$yHߴJ8i`AsY?Ӓ' [ 159.993111][ T6664] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.074002][ T28] audit: type=1326 audit(1783905549.716:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.2.799" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16965de59 code=0x7ffc0000 [ 160.101641][ T6684] FAULT_INJECTION: forcing a failure. [ 160.101641][ T6684] name failslab, interval 1, probability 0, space 0, times 0 [ 160.116039][ T6684] CPU: 1 UID: 0 PID: 6684 Comm: syz.2.799 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 160.116083][ T6684] Tainted: [W]=WARN [ 160.116160][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 160.116177][ T6684] Call Trace: [ 160.116185][ T6684] [ 160.116195][ T6684] __dump_stack+0x1d/0x30 [ 160.116229][ T6684] dump_stack_lvl+0x95/0xd0 [ 160.116289][ T6684] dump_stack+0x15/0x1b [ 160.116360][ T6684] should_fail_ex+0x25e/0x270 [ 160.116398][ T6684] ? audit_log_d_path+0x8d/0x150 [ 160.116498][ T6684] should_failslab+0x8c/0xb0 [ 160.116603][ T6684] __kmalloc_cache_noprof+0x7b/0x3d0 [ 160.116659][ T6684] ? audit_log_d_path+0x8d/0x150 [ 160.116773][ T6684] audit_log_d_path+0x8d/0x150 [ 160.116823][ T6684] audit_log_d_path_exe+0x42/0x70 [ 160.116864][ T6684] audit_log_task+0x1e8/0x240 [ 160.116941][ T6684] audit_seccomp+0x6a/0x110 [ 160.116978][ T6684] __seccomp_filter+0x905/0x1370 [ 160.117011][ T6684] ? __fget_files+0x184/0x1c0 [ 160.117044][ T6684] ? mutex_lock+0x57/0x90 [ 160.117139][ T6684] ? mutex_unlock+0x4e/0x90 [ 160.117170][ T6684] __secure_computing+0x7d/0x150 [ 160.117193][ T6684] do_syscall_64+0xd4/0x3c0 [ 160.117232][ T6684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.117305][ T6684] RIP: 0033:0x7fb16965de59 [ 160.117321][ T6684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.117342][ T6684] RSP: 002b:00007fb1680b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 160.117363][ T6684] RAX: ffffffffffffffda RBX: 00007fb1698e5fa0 RCX: 00007fb16965de59 [ 160.117378][ T6684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.117406][ T6684] RBP: 00007fb1680b7090 R08: 0000000000000000 R09: 0000000000000000 [ 160.117420][ T6684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.117433][ T6684] R13: 00007fb1698e6038 R14: 00007fb1698e5fa0 R15: 00007ffd43a8b778 [ 160.117456][ T6684] [ 160.129365][ T28] audit: type=1326 audit(1783905549.736:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.2.799" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16965de59 code=0x7ffc0000 [ 160.344449][ T28] audit: type=1326 audit(1783905549.746:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.2.799" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb16961e68e code=0x7ffc0000 [ 160.379414][ T28] audit: type=1326 audit(1783905549.746:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.2.799" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb16961e68e code=0x7ffc0000 [ 160.405503][ T28] audit: type=1326 audit(1783905549.746:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.2.799" exe="" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fb16965de59 code=0x7ffc0000 [ 160.428870][ T28] audit: type=1326 audit(1783905549.756:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.2.799" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb16961e68e code=0x7ffc0000 [ 160.459624][ T6693] dvmrp0: entered allmulticast mode [ 160.476263][ T6693] __nla_validate_parse: 2 callbacks suppressed [ 160.476285][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.802'. [ 160.514071][ T6697] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=6697 comm=syz.5.803 [ 160.789707][ T6711] loop4: detected capacity change from 0 to 128 [ 160.796792][ T6711] msdos: Unknown parameter 'noduts' [ 161.627207][ T6721] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.638506][ T6721] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.887590][ T6721] loop5: detected capacity change from 0 to 8192 [ 161.897966][ T6721] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.938782][ T6709] loop3: detected capacity change from 0 to 1024 [ 162.005424][ T6709] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 162.005914][ T6709] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 162.006565][ T6709] EXT4-fs error (device loop3): ext4_get_journal_inode:5900: comm syz.3.806: inode #4294967295: comm syz.3.806: iget: illegal inode # [ 162.006776][ T6709] loop3: lost filesystem error report for type 5 error -117 [ 162.007296][ T6709] EXT4-fs (loop3): no journal found [ 162.043606][ T6727] smc: net device ip6_vti0 erased user defined pnetid SYZ2 [ 162.339774][ T6737] netlink: 'syz.4.815': attribute type 32 has an invalid length. [ 162.352144][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.815'. [ 162.395894][ T6742] loop3: detected capacity change from 0 to 1024 [ 162.421036][ T6742] EXT4-fs: Ignoring removed orlov option [ 162.491931][ T6748] loop2: detected capacity change from 0 to 128 [ 162.508725][ T6748] EXT4-fs mount: 8 callbacks suppressed [ 162.508749][ T6748] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 162.532523][ T6742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.552432][ T6748] ext4 filesystem being mounted at /167/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 162.595260][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'. [ 162.604598][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'. [ 162.647082][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.654205][ T6756] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.662432][ T6737] bond1: Setting coupled_control to on (1) [ 162.672297][ T6756] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.707319][ T3297] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.761644][ T6759] netlink: 'syz.4.824': attribute type 21 has an invalid length. [ 162.769692][ T6759] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.786902][ T6759] IPv6: Can't replace route, no match found [ 162.912040][ T6768] loop2: detected capacity change from 0 to 512 [ 162.956954][ T6768] EXT4-fs (loop2): 1 orphan inode deleted [ 162.972619][ T361] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:6: Failed to release dquot type 1 [ 162.975357][ T6768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.002539][ T6772] loop3: detected capacity change from 0 to 1024 [ 163.009118][ T6768] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.037159][ T6772] EXT4-fs: Ignoring removed bh option [ 163.086322][ T6772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.131600][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.198079][ T6756] loop5: detected capacity change from 0 to 8192 [ 163.276651][ T6785] EXT4-fs: Ignoring removed orlov option [ 163.316725][ T6756] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.329082][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.350950][ T6785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.560227][ T6792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.574163][ T6792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.725915][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.832'. [ 163.775774][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.832'. [ 163.837734][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.069082][ T6798] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 164.287236][ T6798] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 164.378219][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.840'. [ 164.571605][ C1] blk_print_req_error: 3 callbacks suppressed [ 164.571626][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.586973][ C1] buffer_io_error: 2 callbacks suppressed [ 164.587001][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 164.613403][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.622741][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 164.630666][ T6821] loop7: unable to read partition table [ 164.653172][ T6821] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 164.660337][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.683044][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 164.692054][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.701293][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 164.714212][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.723438][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 164.732435][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.741633][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 164.751685][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.760887][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 164.886908][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.976987][ T6825] syzkaller0: entered promiscuous mode [ 164.982905][ T6825] syzkaller0: entered allmulticast mode [ 165.338182][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.347433][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 165.355478][ T6823] loop7: unable to read partition table [ 165.367567][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.376871][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 165.578035][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 165.578053][ T28] audit: type=1400 audit(1783905555.216:790): avc: denied { read } for pid=6833 comm="syz.5.845" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 165.616221][ T28] audit: type=1400 audit(1783905555.216:791): avc: denied { open } for pid=6833 comm="syz.5.845" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 165.644432][ T28] audit: type=1400 audit(1783905555.256:792): avc: denied { ioctl } for pid=6833 comm="syz.5.845" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 165.691353][ T6839] set_capacity_and_notify: 3 callbacks suppressed [ 165.691384][ T6839] loop3: detected capacity change from 0 to 1024 [ 165.722756][ T6839] EXT4-fs: Ignoring removed orlov option [ 165.772310][ T6839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.820305][ T6840] netlink: 24 bytes leftover after parsing attributes in process `syz.5.845'. [ 165.869391][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.848'. [ 165.958429][ T6853] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.979571][ T6853] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.993813][ T6846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6846 comm=syz.0.848 [ 166.008709][ T28] audit: type=1400 audit(1783905555.646:793): avc: denied { write } for pid=6838 comm="syz.3.846" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.051745][ T28] audit: type=1400 audit(1783905555.646:794): avc: denied { write } for pid=6838 comm="syz.3.846" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.176636][ T6861] loop7: detected capacity change from 0 to 7 [ 166.188087][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.197374][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 166.206516][ T6861] loop7: unable to read partition table [ 166.216254][ T6861] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 166.254614][ T6865] loop7: unable to read partition table [ 166.444153][ T6869] loop5: detected capacity change from 0 to 512 [ 166.451229][ T6869] EXT4-fs: Ignoring removed i_version option [ 166.457661][ T6869] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 166.473271][ T6869] EXT4-fs (loop5): 1 truncate cleaned up [ 166.481593][ T6869] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.484968][ T6853] loop4: detected capacity change from 0 to 8192 [ 166.505056][ T6853] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.522643][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.541926][ T28] audit: type=1400 audit(1783905556.186:795): avc: denied { write } for pid=6868 comm="syz.5.854" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.624936][ T28] audit: type=1400 audit(1783905556.266:796): avc: denied { write } for pid=6868 comm="syz.5.854" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.678668][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.857'. [ 166.684283][ T6874] loop4: detected capacity change from 0 to 1024 [ 166.690702][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.857'. [ 166.735463][ T6874] EXT4-fs: inline encryption not supported [ 166.786080][ T6874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.801613][ T6885] loop3: detected capacity change from 0 to 1024 [ 166.809150][ T6885] EXT4-fs: Ignoring removed bh option [ 166.815228][ T6885] ext4: Unknown parameter 'uid<000000' [ 166.826153][ T28] audit: type=1400 audit(1783905556.466:797): avc: denied { write } for pid=6873 comm="syz.4.856" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.021366][ T28] audit: type=1400 audit(1783905556.666:798): avc: denied { ioctl } for pid=6873 comm="syz.4.856" path="socket:[15644]" dev="sockfs" ino=15644 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 167.130910][ T6890] batman_adv: batadv0: Adding interface: dummy0 [ 167.140641][ T6890] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.177340][ T6890] batman_adv: batadv0: Interface activated: dummy0 [ 167.188520][ T6893] batadv0: mtu less than device minimum [ 167.208527][ T6900] loop7: detected capacity change from 0 to 7 [ 167.215518][ T6893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.226485][ T6893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.237390][ T6893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.248516][ T6893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.259534][ T6893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.270471][ T6893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.281557][ T6893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.292585][ T6893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.303419][ T6893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.334116][ T6900] loop7: unable to read partition table [ 167.341811][ T6900] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 167.542970][ T6911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.544852][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.560553][ T6911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.641420][ T6920] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 167.655300][ T6920] loop0: detected capacity change from 0 to 764 [ 167.688183][ T6923] loop4: detected capacity change from 0 to 512 [ 167.777017][ T4916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.790748][ T6923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.825523][ T6923] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.889048][ T28] audit: type=1400 audit(1783905557.526:799): avc: denied { write } for pid=6921 comm="syz.4.870" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.964553][ T6940] loop5: detected capacity change from 0 to 512 [ 167.971255][ T6935] loop7: unable to read partition table [ 167.983147][ T6935] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 167.999513][ T6940] msdos: Bad value for 'tz' [ 168.008271][ T6935] loop7: unable to read partition table [ 168.064051][ T6940] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 168.098656][ T6940] EXT4-fs (loop5): orphan cleanup on readonly fs [ 168.134189][ T6940] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.876: Failed to acquire dquot type 1 [ 168.175425][ T6940] loop5: lost filesystem error report for type 5 error -5 [ 168.175863][ T6940] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.876: bg 0: block 40: padding at end of block bitmap is not set [ 168.183245][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 168.183268][ C0] EXT4-fs (loop5): initial error at time 1783905557: ext4_acquire_dquot:7041 [ 168.183304][ C0] EXT4-fs (loop5): last error at time 1783905557: ext4_acquire_dquot:7041 [ 168.317744][ T6940] loop5: lost filesystem error report for type 5 error -117 [ 168.317981][ T6940] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 168.363933][ T6911] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.375350][ T6940] loop5: lost filesystem error report for type 5 error -117 [ 168.382381][ T6940] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #16: comm syz.5.876: data will be lost [ 168.410679][ T6940] EXT4-fs (loop5): 1 truncate cleaned up [ 168.417213][ T6940] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.486848][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.870'. [ 168.515318][ T4916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.569216][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.617348][ T6943] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 168.671264][ T6943] EXT4-fs (loop0): orphan cleanup on readonly fs [ 168.685140][ T6943] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 168.685695][ T6964] netlink: 'syz.5.884': attribute type 6 has an invalid length. [ 168.719263][ T6943] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 168.735611][ T6943] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #16: comm syz.0.877: inode has both inline data and extents flags [ 168.753679][ T6943] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 168.757702][ T6943] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.877: couldn't read orphan inode 16 (err -117) [ 168.768386][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 168.768413][ C0] EXT4-fs (loop0): initial error at time 1783905558: ext4_orphan_get:1399: inode 16 [ 168.768520][ C0] EXT4-fs (loop0): last error at time 1783905558: ext4_orphan_get:1399: inode 16 [ 168.799455][ T6967] syzkaller0: entered promiscuous mode [ 168.820996][ T6971] syzkaller0: create flow: hash 1628610397 index 0 [ 168.824135][ T6967] syzkaller0: entered allmulticast mode [ 168.872248][ T6943] loop0: lost filesystem error report for type 5 error -117 [ 168.893726][ T6943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.957093][ T6974] loop7: unable to read partition table [ 168.963481][ T6974] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 168.979279][ T6974] loop7: unable to read partition table [ 170.062366][ T6971] syzkaller0 (unregistered): delete flow: hash 1628610397 index 0 [ 170.647158][ T6978] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 170.659774][ T6978] EXT4-fs (loop5): 1 truncate cleaned up [ 170.665995][ T6978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.683480][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 170.683500][ T28] audit: type=1400 audit(1783905560.325:803): avc: denied { write } for pid=6969 comm="syz.5.886" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.025298][ T28] audit: type=1400 audit(1783905560.325:804): avc: denied { write } for pid=6969 comm="syz.5.886" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.047857][ T28] audit: type=1400 audit(1783905560.325:805): avc: denied { lock } for pid=6969 comm="syz.5.886" path="/95/file1/cpuacct.usage_percpu" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 171.845088][ T6994] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.905482][ T4916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.916413][ T6996] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.965253][ T6996] set_capacity_and_notify: 6 callbacks suppressed [ 171.965276][ T6996] loop4: detected capacity change from 0 to 8192 [ 171.980928][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 172.003796][ T6996] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.108518][ T7000] loop5: detected capacity change from 0 to 512 [ 172.161847][ T7000] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.893: inode has both inline data and extents flags [ 172.182547][ T7000] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 172.182773][ T7000] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.893: couldn't read orphan inode 15 (err -117) [ 172.192037][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 172.192074][ C1] EXT4-fs (loop5): initial error at time 1783905561: ext4_orphan_get:1399: inode 15 [ 172.192100][ C1] EXT4-fs (loop5): last error at time 1783905561: ext4_orphan_get:1399: inode 15 [ 172.310961][ T7000] loop5: lost filesystem error report for type 5 error -117 [ 172.311723][ T7000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.371511][ T28] audit: type=1400 audit(1783905562.015:806): avc: denied { write } for pid=6999 comm="syz.5.893" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.413481][ T28] audit: type=1400 audit(1783905562.015:807): avc: denied { create } for pid=6999 comm="syz.5.893" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 172.470165][ T4916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.951572][ T7005] net_ratelimit: 12 callbacks suppressed [ 172.951590][ T7005] IPVS: sh: FWM 3 0x00000003 - no destination available [ 172.995780][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 173.070526][ T7014] loop4: detected capacity change from 0 to 512 [ 173.079035][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.081065][ T7014] EXT4-fs: Ignoring removed i_version option [ 173.105725][ T7014] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.135675][ T7014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.172598][ T7014] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.187704][ T7014] netlink: 32 bytes leftover after parsing attributes in process `syz.4.898'. [ 173.203145][ T7019] loop7: detected capacity change from 0 to 7 [ 173.223315][ C0] blk_print_req_error: 33 callbacks suppressed [ 173.223330][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 173.238800][ C0] buffer_io_error: 33 callbacks suppressed [ 173.238823][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.256913][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 173.266156][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.274134][ T7019] loop7: unable to read partition table [ 173.283933][ T7019] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 173.308066][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.317295][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.325588][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.334802][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.344073][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.353285][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.362151][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.372562][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.383951][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.393157][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.404625][ T7028] loop0: detected capacity change from 0 to 512 [ 173.412038][ T7028] EXT4-fs: Ignoring removed orlov option [ 173.413542][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.430752][ T7028] EXT4-fs: Ignoring removed oldalloc option [ 173.437209][ T28] audit: type=1400 audit(1783905819.074:808): avc: denied { setopt } for pid=7032 comm="syz.5.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 173.457103][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 173.466336][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.474886][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 173.484086][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.493197][ T7026] loop7: unable to read partition table [ 173.514988][ T7033] serio: Serial port ttyS3 [ 173.529069][ T7028] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.572516][ T7028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.610665][ T7028] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.738589][ T7040] loop2: detected capacity change from 0 to 512 [ 173.752439][ T7040] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.769659][ T28] audit: type=1400 audit(1783905819.404:809): avc: denied { setattr } for pid=7041 comm="syz.5.904" name="PACKET" dev="sockfs" ino=15858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 173.820093][ T7040] EXT4-fs (loop2): too many log groups per flexible block group [ 173.832591][ T28] audit: type=1400 audit(1783905819.404:810): avc: denied { setattr } for pid=7018 comm="syz.0.897" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 173.834106][ T7040] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 173.863553][ T7040] EXT4-fs (loop2): mount failed [ 173.999122][ T28] audit: type=1400 audit(1783905819.464:811): avc: denied { unmount } for pid=4916 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 174.047135][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.056990][ T28] audit: type=1400 audit(1783905819.554:812): avc: denied { execute } for pid=7039 comm="syz.2.903" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16520 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 174.634519][ T7056] IPVS: sh: FWM 3 0x00000003 - no destination available [ 174.936382][ T7066] loop0: detected capacity change from 0 to 512 [ 174.936770][ T7066] msdos: Bad value for 'tz' [ 175.006362][ T7068] loop7: detected capacity change from 0 to 7 [ 175.006688][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.006713][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 175.006847][ T7068] loop7: unable to read partition table [ 175.006870][ T7068] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 175.007664][ T7068] loop7: unable to read partition table [ 175.062982][ T7072] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.068277][ T7072] netlink: 85 bytes leftover after parsing attributes in process `syz.2.908'. [ 175.167229][ T7078] netlink: 76 bytes leftover after parsing attributes in process `syz.0.915'. [ 175.167261][ T7078] netlink: 72 bytes leftover after parsing attributes in process `syz.0.915'. [ 175.167324][ T7078] netlink: 'syz.0.915': attribute type 3 has an invalid length. [ 175.167422][ T7078] netlink: 11 bytes leftover after parsing attributes in process `syz.0.915'. [ 175.382790][ T7078] loop0: detected capacity change from 0 to 2048 [ 175.436392][ T7078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.477224][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.803078][ T7094] netlink: 24 bytes leftover after parsing attributes in process `syz.4.920'. [ 175.833753][ T7096] IPVS: sh: FWM 3 0x00000003 - no destination available [ 175.867067][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 175.867084][ T28] audit: type=1400 audit(1783905821.504:814): avc: denied { ioctl } for pid=7092 comm="syz.5.921" path="socket:[16001]" dev="sockfs" ino=16001 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 175.924326][ T7093] lo speed is unknown, defaulting to 1000 [ 175.960426][ T7100] loop4: detected capacity change from 0 to 1024 [ 175.975960][ T7100] EXT4-fs: Ignoring removed orlov option [ 176.016937][ T7100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.042109][ T7072] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.070415][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.923'. [ 176.088492][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.923'. [ 176.121693][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.226049][ T7108] loop7: unable to read partition table [ 176.233765][ T7108] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 176.256689][ T7106] Alternate GPT is invalid, using primary GPT. [ 176.267965][ T7106] loop4: p2 p3 p7 [ 176.275438][ T7108] loop7: unable to read partition table [ 176.320470][ T7106] netlink: 'syz.4.924': attribute type 12 has an invalid length. [ 176.351641][ T7106] netlink: 'syz.4.924': attribute type 29 has an invalid length. [ 176.390573][ T7106] netlink: 148 bytes leftover after parsing attributes in process `syz.4.924'. [ 176.406267][ T7106] netlink: 'syz.4.924': attribute type 1 has an invalid length. [ 176.438762][ T7115] netlink: 'syz.4.924': attribute type 12 has an invalid length. [ 176.446643][ T7115] netlink: 'syz.4.924': attribute type 29 has an invalid length. [ 176.459334][ T7115] netlink: 148 bytes leftover after parsing attributes in process `syz.4.924'. [ 176.471941][ T7115] netlink: 'syz.4.924': attribute type 1 has an invalid length. [ 176.553378][ T7116] bond1: option all_slaves_active: invalid value (5) [ 176.583222][ T7116] bond1 (unregistering): Released all slaves [ 176.702609][ T28] audit: type=1400 audit(1783905822.334:815): avc: denied { append } for pid=7123 comm="syz.0.929" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 176.890889][ T7138] netlink: 'syz.2.934': attribute type 3 has an invalid length. [ 176.945061][ T7122] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 177.426911][ T7122] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 177.438222][ T7122] System zones: 1-12 [ 177.450513][ T7122] EXT4-fs (loop4): orphan cleanup on readonly fs [ 177.485938][ T7122] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.928: bg 0: block 361: padding at end of block bitmap is not set [ 177.515310][ T7145] set_capacity_and_notify: 4 callbacks suppressed [ 177.515418][ T7145] loop2: detected capacity change from 0 to 2048 [ 177.529466][ T7122] loop4: lost filesystem error report for type 5 error -117 [ 177.531223][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 177.546114][ C1] EXT4-fs (loop4): initial error at time 1783905823: ext4_validate_block_bitmap:441 [ 177.556593][ C1] EXT4-fs (loop4): last error at time 1783905823: ext4_validate_block_bitmap:441 [ 177.627280][ T7145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.646583][ T7122] EXT4-fs (loop4): Remounting filesystem read-only [ 177.658849][ T7122] EXT4-fs (loop4): 1 truncate cleaned up [ 177.680107][ T7122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 177.731326][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 177.934957][ T7149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.962148][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.129898][ T7160] loop7: detected capacity change from 0 to 7 [ 178.152015][ T7160] loop7: unable to read partition table [ 178.160838][ T7160] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 178.596791][ T7149] loop4: detected capacity change from 0 to 8192 [ 178.618926][ C1] blk_print_req_error: 19 callbacks suppressed [ 178.618943][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 178.634436][ C1] buffer_io_error: 19 callbacks suppressed [ 178.634453][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 178.648625][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 178.657795][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 178.665826][ T7161] loop7: unable to read partition table [ 178.699030][ T7149] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.993939][ T7170] __nla_validate_parse: 5 callbacks suppressed [ 178.993972][ T7170] netlink: 60 bytes leftover after parsing attributes in process `syz.2.941'. [ 179.103657][ T7175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.943'. [ 179.467431][ T7181] loop3: detected capacity change from 0 to 512 [ 179.578205][ T7181] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.594591][ T7181] EXT4-fs (loop3): too many log groups per flexible block group [ 179.602726][ T7181] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 179.609597][ T7181] EXT4-fs (loop3): mount failed [ 179.704744][ T7187] loop4: detected capacity change from 0 to 128 [ 179.730373][ T7187] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 179.919554][ T3288] udevd[3288]: incorrect ext4 checksum on /dev/loop4 [ 179.939780][ T3288] udevd[3288]: incorrect ext4 checksum on /dev/loop4 [ 181.558785][ T7191] loop2: detected capacity change from 0 to 512 [ 181.597777][ T7191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.824046][ T28] audit: type=1326 audit(1783905827.464:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7195 comm="syz.4.951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959cc6de59 code=0x7ffc0000 [ 181.886683][ T7191] EXT4-fs (loop2): too many log groups per flexible block group [ 181.897526][ T7191] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 181.905996][ T7191] EXT4-fs (loop2): mount failed [ 181.977395][ T28] audit: type=1326 audit(1783905827.494:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7195 comm="syz.4.951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959cc6de59 code=0x7ffc0000 [ 182.082678][ T28] audit: type=1326 audit(1783905827.494:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7195 comm="syz.4.951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959cc6de59 code=0x7ffc0000 [ 182.123867][ T7203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.143401][ T7203] netlink: 85 bytes leftover after parsing attributes in process `syz.2.952'. [ 182.152808][ T28] audit: type=1326 audit(1783905827.494:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7195 comm="syz.4.951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f959cc6de59 code=0x7ffc0000 [ 182.229143][ T28] audit: type=1326 audit(1783905827.494:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7195 comm="syz.4.951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959cc6de59 code=0x7ffc0000 [ 182.320613][ T28] audit: type=1326 audit(1783905827.494:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7195 comm="syz.4.951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959cc6de59 code=0x7ffc0000 [ 182.401195][ T7205] loop7: detected capacity change from 0 to 7 [ 182.409035][ T28] audit: type=1326 audit(1783905827.494:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7195 comm="syz.4.951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959cc6de59 code=0x7ffc0000 [ 182.522347][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.531673][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 182.539993][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.549229][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 182.557174][ T7205] loop7: unable to read partition table [ 182.572604][ T7205] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 182.589773][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.599010][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 182.611506][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.620730][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 182.628974][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.638275][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 182.646819][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.656014][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 182.665174][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.674431][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 183.128318][ T7203] loop2: detected capacity change from 0 to 8192 [ 183.166067][ T7203] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.427894][ T7230] FAULT_INJECTION: forcing a failure. [ 183.427894][ T7230] name failslab, interval 1, probability 0, space 0, times 0 [ 183.450120][ T7230] CPU: 0 UID: 0 PID: 7230 Comm: syz.2.959 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 183.450165][ T7230] Tainted: [W]=WARN [ 183.450172][ T7230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 183.450262][ T7230] Call Trace: [ 183.450269][ T7230] [ 183.450277][ T7230] __dump_stack+0x1d/0x30 [ 183.450315][ T7230] dump_stack_lvl+0x95/0xd0 [ 183.450342][ T7230] dump_stack+0x15/0x1b [ 183.450367][ T7230] should_fail_ex+0x25e/0x270 [ 183.450427][ T7230] should_failslab+0x8c/0xb0 [ 183.450456][ T7230] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 183.450485][ T7230] ? skb_clone+0x151/0x1f0 [ 183.450566][ T7230] ? skb_clone+0x151/0x1f0 [ 183.450669][ T7230] skb_clone+0x151/0x1f0 [ 183.450774][ T7230] __netlink_deliver_tap+0x2be/0x510 [ 183.450834][ T7230] netlink_unicast+0x654/0x680 [ 183.450868][ T7230] netlink_sendmsg+0x5be/0x6f0 [ 183.450900][ T7230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.451007][ T7230] ____sys_sendmsg+0x532/0x580 [ 183.451113][ T7230] ___sys_sendmsg+0x195/0x1e0 [ 183.451190][ T7230] __x64_sys_sendmsg+0xd4/0x160 [ 183.451225][ T7230] x64_sys_call+0x194c/0x3020 [ 183.451250][ T7230] do_syscall_64+0x136/0x3c0 [ 183.451321][ T7230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.451344][ T7230] RIP: 0033:0x7fb16965de59 [ 183.451427][ T7230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.451451][ T7230] RSP: 002b:00007fb1680b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.451478][ T7230] RAX: ffffffffffffffda RBX: 00007fb1698e5fa0 RCX: 00007fb16965de59 [ 183.451497][ T7230] RDX: 0000000020004800 RSI: 0000200000006040 RDI: 0000000000000006 [ 183.451514][ T7230] RBP: 00007fb1680b7090 R08: 0000000000000000 R09: 0000000000000000 [ 183.451540][ T7230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.451553][ T7230] R13: 00007fb1698e6038 R14: 00007fb1698e5fa0 R15: 00007ffd43a8b778 [ 183.451573][ T7230] [ 183.566245][ T28] audit: type=1326 audit(1783905827.494:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7195 comm="syz.4.951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959cc6de59 code=0x7ffc0000 [ 183.681531][ T28] audit: type=1326 audit(1783905827.494:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7195 comm="syz.4.951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f959cc6de59 code=0x7ffc0000 [ 183.707319][ T28] audit: type=1326 audit(1783905827.494:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7195 comm="syz.4.951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959cc6de59 code=0x7ffc0000 [ 184.312661][ T7246] loop3: detected capacity change from 0 to 128 [ 184.319856][ T7246] msdos: Unknown parameter 'noduts' [ 185.043547][ T7263] netlink: 85 bytes leftover after parsing attributes in process `syz.4.969'. [ 185.055903][ T7258] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.065789][ T7264] loop2: detected capacity change from 0 to 512 [ 185.835223][ T7264] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 185.939219][ T7263] loop4: detected capacity change from 0 to 8192 [ 185.961624][ T7263] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.357659][ T7272] loop4: detected capacity change from 0 to 512 [ 186.444926][ T7272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.629043][ T7276] tipc: Can't bind to reserved service type 1 [ 187.467660][ T49] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 187.489617][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.585690][ T7282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.975'. [ 187.615557][ T7294] lo speed is unknown, defaulting to 1000 [ 187.651115][ T28] kauditd_printk_skb: 159 callbacks suppressed [ 187.651135][ T28] audit: type=1400 audit(1783905833.284:985): avc: denied { create } for pid=7295 comm="syz.4.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 187.685319][ T7298] vti0: entered promiscuous mode [ 187.698987][ T7298] vti0: entered allmulticast mode [ 187.716288][ T7298] tmpfs: Bad value for 'mpol' [ 187.897921][ T7302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.982'. [ 187.973818][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 187.983048][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.983'. [ 188.007477][ T7304] netlink: 'syz.0.983': attribute type 1 has an invalid length. [ 188.028800][ T7305] netlink: 148 bytes leftover after parsing attributes in process `syz.0.983'. [ 188.044292][ T7305] netlink: 116 bytes leftover after parsing attributes in process `syz.0.983'. [ 188.145834][ T7296] loop4: detected capacity change from 0 to 164 [ 188.250158][ T7296] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 188.269842][ T7296] isofs_fill_super: root inode is not a directory. Corrupted media? [ 188.396485][ T7296] netlink: 56 bytes leftover after parsing attributes in process `syz.4.980'. [ 188.545623][ T28] audit: type=1400 audit(1783905834.184:986): avc: denied { write } for pid=7295 comm="syz.4.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 189.222727][ T28] audit: type=1400 audit(1783905834.864:987): avc: denied { write } for pid=7325 comm="syz.5.988" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 189.379138][ T7326] loop5: detected capacity change from 0 to 1024 [ 189.411602][ T7326] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #4: comm syz.5.988: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 189.477812][ T7326] loop5: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 189.477956][ T7326] EXT4-fs error (device loop5): ext4_quota_enable:7235: comm syz.5.988: Bad quota inode: 4, type: 1 [ 189.487284][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 189.487302][ C1] EXT4-fs (loop5): initial error at time 1783905835: ext4_ext_check_inode:521: inode 4 [ 189.487327][ C1] EXT4-fs (loop5): last error at time 1783905835: ext4_ext_check_inode:521: inode 4 [ 189.629201][ T7334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.990'. [ 189.650153][ T7326] loop5: lost filesystem error report for type 5 error -117 [ 189.650519][ T7326] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 189.749863][ T7326] EXT4-fs (loop5): mount failed [ 189.885308][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 190.018415][ T7345] loop5: detected capacity change from 0 to 512 [ 190.033518][ T7345] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.051884][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 190.157643][ T7345] EXT4-fs (loop5): too many log groups per flexible block group [ 190.166787][ T7345] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 190.175097][ T7345] EXT4-fs (loop5): mount failed [ 190.881848][ T7389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.893311][ T7389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.952604][ T7395] loop4: detected capacity change from 0 to 512 [ 190.961795][ T7395] EXT4-fs: Ignoring removed i_version option [ 190.969712][ T7395] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 190.987982][ T7395] EXT4-fs (loop4): 1 truncate cleaned up [ 190.994961][ T7395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.011045][ T28] audit: type=1400 audit(1783905836.654:988): avc: denied { write } for pid=7394 comm="syz.4.1006" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.111077][ T7395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7395 comm=syz.4.1006 [ 191.183003][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.216656][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1009'. [ 191.233018][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1009'. [ 192.414537][ T7417] IPVS: sh: FWM 3 0x00000003 - no destination available [ 192.435246][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.442593][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.626888][ T7371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.655114][ T7371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.788603][ T30] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.805867][ T30] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.826621][ T30] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.836187][ T30] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.878333][ T30] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.899653][ T30] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.923457][ T30] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.935036][ T30] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.946729][ T7442] syzkaller0: entered promiscuous mode [ 192.963622][ T7442] syzkaller0: entered allmulticast mode [ 193.042722][ T7440] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1017'. [ 193.054790][ T30] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.089715][ T30] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.130281][ T30] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.144918][ T7464] loop0: detected capacity change from 0 to 128 [ 193.158893][ T30] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.184210][ T7464] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.224937][ T7464] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.306151][ T7463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1021'. [ 193.351519][ T7471] netlink: 'syz.4.1025': attribute type 2 has an invalid length. [ 193.381083][ T28] audit: type=1400 audit(1783905839.014:989): avc: denied { write } for pid=7457 comm="syz.0.1022" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.599673][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.702759][ T7485] loop0: detected capacity change from 0 to 128 [ 193.749858][ T7485] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 193.759261][ T7491] FAULT_INJECTION: forcing a failure. [ 193.759261][ T7491] name failslab, interval 1, probability 0, space 0, times 0 [ 193.796059][ T7485] ext4 filesystem being mounted at /210/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 193.806857][ T7491] CPU: 1 UID: 0 PID: 7491 Comm: syz.4.1033 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 193.806972][ T7491] Tainted: [W]=WARN [ 193.807001][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 193.807104][ T7491] Call Trace: [ 193.807127][ T7491] [ 193.807158][ T7491] __dump_stack+0x1d/0x30 [ 193.807240][ T7491] dump_stack_lvl+0x95/0xd0 [ 193.807313][ T7491] dump_stack+0x15/0x1b [ 193.807385][ T7491] should_fail_ex+0x25e/0x270 [ 193.807525][ T7491] should_failslab+0x8c/0xb0 [ 193.807599][ T7491] __kmalloc_noprof+0xd4/0x4a0 [ 193.807673][ T7491] ? bpf_prog_array_alloc+0x41/0x60 [ 193.807760][ T7491] ? bpf_prog_array_alloc+0x41/0x60 [ 193.807833][ T7491] bpf_prog_array_alloc+0x41/0x60 [ 193.807905][ T7491] netns_bpf_prog_attach+0x214/0x280 [ 193.807985][ T7491] bpf_prog_attach+0x3cb/0x570 [ 193.808154][ T7491] __sys_bpf+0x55c/0xc30 [ 193.808278][ T7491] ? vfs_write+0x790/0x990 [ 193.808377][ T7491] __x64_sys_bpf+0x69/0x80 [ 193.808407][ T7491] x64_sys_call+0x10cb/0x3020 [ 193.808432][ T7491] do_syscall_64+0x136/0x3c0 [ 193.808629][ T7491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.808774][ T7491] RIP: 0033:0x7f959cc6de59 [ 193.808847][ T7491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.808995][ T7491] RSP: 002b:00007f959b6c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 193.809115][ T7491] RAX: ffffffffffffffda RBX: 00007f959cef5fa0 RCX: 00007f959cc6de59 [ 193.809188][ T7491] RDX: 000000000000000a RSI: 00002000000002c0 RDI: 0000000000000008 [ 193.809230][ T7491] RBP: 00007f959b6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 193.809273][ T7491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.809301][ T7491] R13: 00007f959cef6038 R14: 00007f959cef5fa0 R15: 00007ffc20e8a758 [ 193.809357][ T7491] [ 193.866580][ T7491] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 193.897404][ T28] audit: type=1400 audit(1783905839.534:990): avc: denied { write } for pid=7484 comm="syz.0.1030" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.195086][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.425672][ T7516] loop5: detected capacity change from 0 to 164 [ 194.511910][ T7516] rock: corrupted directory entry. extent=134217760 out of volume (nzones=41) [ 194.695593][ T28] audit: type=1400 audit(1783905840.334:991): avc: denied { mount } for pid=7508 comm="syz.0.1037" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 194.734533][ T28] audit: type=1400 audit(1783905840.364:992): avc: denied { read } for pid=7508 comm="syz.0.1037" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 194.798295][ T28] audit: type=1400 audit(1783905840.364:993): avc: denied { open } for pid=7508 comm="syz.0.1037" path="/211/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 194.884960][ T7522] loop0: detected capacity change from 0 to 512 [ 194.927963][ T28] audit: type=1400 audit(1783905840.564:994): avc: denied { mounton } for pid=7508 comm="syz.0.1037" path="/211/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 194.954539][ T7522] EXT4-fs: dax option not supported [ 195.047513][ T7522] loop0: detected capacity change from 0 to 256 [ 195.136810][ T28] audit: type=1400 audit(1783905840.764:995): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 195.168489][ T7419] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.197387][ T7419] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 195.423148][ T7531] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 195.559808][ T7532] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1044'. [ 195.799479][ T7539] xt_CT: No such helper "netbios-ns" [ 195.928657][ T7543] loop7: detected capacity change from 0 to 7 [ 195.948487][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 195.957748][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 195.970970][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 195.980191][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 195.989782][ T7543] loop7: unable to read partition table [ 195.998303][ T7543] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 196.013268][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.022517][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 196.031971][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.041204][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 196.051983][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.061238][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 196.070852][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.080113][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 196.088412][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.097686][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 196.106801][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.116010][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 196.126632][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.135875][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 196.143861][ T7552] loop7: unable to read partition table [ 196.152474][ T28] audit: type=1400 audit(1783905841.794:996): avc: denied { sys_module } for pid=7544 comm="syz.5.1049" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 196.386243][ T7567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29703 sclass=netlink_route_socket pid=7567 comm=syz.4.1055 [ 196.387695][ T7568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29703 sclass=netlink_route_socket pid=7568 comm=syz.4.1055 [ 196.477647][ T7571] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1056'. [ 196.575622][ T7577] loop5: detected capacity change from 0 to 1024 [ 196.601731][ T7577] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.611125][ T7577] EXT4-fs: Ignoring removed i_version option [ 196.631788][ T7577] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.650919][ T7577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 196.725154][ T7577] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.773200][ T28] audit: type=1400 audit(1783905842.414:997): avc: denied { write } for pid=7575 comm="syz.5.1057" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 196.826446][ T12] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 112: padding at end of block bitmap is not set [ 196.843606][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 2 with error 28 [ 196.856179][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 196.856179][ T12] [ 196.867407][ T12] EXT4-fs (loop5): Total free blocks count 0 [ 196.878330][ T12] EXT4-fs (loop5): Free/Dirty block details [ 196.888481][ T12] EXT4-fs (loop5): free_blocks=0 [ 196.895290][ T12] EXT4-fs (loop5): dirty_blocks=32 [ 196.903781][ T12] EXT4-fs (loop5): Block reservation details [ 196.914985][ T12] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 196.931052][ T4916] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 196.956093][ T4916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 197.054101][ T7590] loop7: detected capacity change from 0 to 7 [ 197.084190][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.093530][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.103791][ T7590] loop7: unable to read partition table [ 197.112874][ T7590] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 197.128413][ T7596] loop7: unable to read partition table [ 197.308653][ T7604] loop5: detected capacity change from 0 to 164 [ 197.412616][ T7602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1065'. [ 197.566796][ T7621] loop5: detected capacity change from 0 to 128 [ 197.600685][ T7621] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 197.623078][ T7621] ext4 filesystem being mounted at /132/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 197.670830][ T7618] loop2: detected capacity change from 0 to 8192 [ 197.682805][ T7618] vfat: Unknown parameter '' [ 197.705432][ T28] audit: type=1400 audit(1783905843.344:998): avc: denied { write } for pid=7620 comm="syz.5.1072" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.781146][ T7627] loop7: unable to read partition table [ 197.786969][ T7627] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 197.809014][ T7627] loop7: unable to read partition table [ 197.846348][ T4916] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.996794][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'. [ 198.044156][ T7646] gretap1: entered promiscuous mode [ 198.049899][ T7650] EXT4-fs: Ignoring removed i_version option [ 198.059509][ T7650] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 198.073643][ T7650] EXT4-fs (loop0): 1 truncate cleaned up [ 198.080540][ T7650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.164477][ T7660] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1087'. [ 198.174113][ T7660] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1087'. [ 198.184283][ T7660] netlink: 'syz.5.1087': attribute type 3 has an invalid length. [ 198.192258][ T7660] netlink: 11 bytes leftover after parsing attributes in process `syz.5.1087'. [ 198.236879][ T7653] vfat: Unknown parameter '' [ 198.298750][ T7665] loop7: unable to read partition table [ 198.312153][ T7665] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 198.328264][ T7665] loop7: unable to read partition table [ 198.391210][ T7661] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1086'. [ 198.400528][ T7661] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1086'. [ 198.410704][ T7661] netlink: 'syz.3.1086': attribute type 3 has an invalid length. [ 198.419210][ T7661] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1086'. [ 198.428334][ T7660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.456586][ T4916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.483404][ T7675] gretap0: entered promiscuous mode [ 198.555361][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 198.555379][ T28] audit: type=1400 audit(1783905844.194:1002): avc: denied { create } for pid=7678 comm="syz.4.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.593929][ T28] audit: type=1400 audit(1783905844.224:1003): avc: denied { setopt } for pid=7678 comm="syz.4.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.617286][ T28] audit: type=1400 audit(1783905844.224:1004): avc: denied { write } for pid=7678 comm="syz.4.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.760418][ T7681] set_capacity_and_notify: 5 callbacks suppressed [ 198.760551][ T7681] loop5: detected capacity change from 0 to 164 [ 198.797598][ T7681] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 198.807705][ T7681] isofs_fill_super: root inode is not a directory. Corrupted media? [ 198.909945][ T7694] loop7: detected capacity change from 0 to 7 [ 198.921260][ T7694] loop7: unable to read partition table [ 198.927083][ T7694] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 198.957533][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.988590][ T7698] ================================================================== [ 198.996840][ T7698] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 199.004423][ T7698] [ 199.006789][ T7698] read-write to 0xffff888237c26528 of 1 bytes by task 7691 on cpu 0: [ 199.014887][ T7698] folio_add_lru+0xa4/0x250 [ 199.019427][ T7698] shmem_get_folio_gfp+0x7cc/0xd90 [ 199.024577][ T7698] shmem_write_begin+0xfc/0x1f0 [ 199.029468][ T7698] generic_perform_write+0x186/0x490 [ 199.034797][ T7698] shmem_file_write_iter+0xc5/0xf0 [ 199.039964][ T7698] vfs_write+0x57d/0x990 [ 199.044242][ T7698] ksys_write+0xdc/0x1a0 [ 199.048517][ T7698] __x64_sys_write+0x40/0x50 [ 199.053143][ T7698] x64_sys_call+0x27e1/0x3020 [ 199.057859][ T7698] do_syscall_64+0x136/0x3c0 [ 199.062496][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.068425][ T7698] [ 199.070775][ T7698] read to 0xffff888237c26528 of 1 bytes by task 7698 on cpu 1: [ 199.078347][ T7698] __lru_add_drain_all+0x17e/0x450 [ 199.083503][ T7698] lru_add_drain_all+0x10/0x20 [ 199.088310][ T7698] invalidate_bdev+0x47/0x70 [ 199.092949][ T7698] bdev_disk_changed+0xe8/0xe20 [ 199.097834][ T7698] blkdev_get_whole+0x1e8/0x2c0 [ 199.102731][ T7698] bdev_open+0x279/0x7d0 [ 199.107009][ T7698] bdev_file_open_by_dev+0x1cc/0x230 [ 199.112339][ T7698] disk_scan_partitions+0x149/0x1b0 [ 199.117574][ T7698] blkdev_common_ioctl+0x120d/0x2060 [ 199.122914][ T7698] blkdev_ioctl+0x31f/0x460 [ 199.127455][ T7698] __se_sys_ioctl+0xce/0x140 [ 199.132070][ T7698] __x64_sys_ioctl+0x43/0x50 [ 199.136694][ T7698] x64_sys_call+0x1563/0x3020 [ 199.141409][ T7698] do_syscall_64+0x136/0x3c0 [ 199.146044][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.151972][ T7698] [ 199.154315][ T7698] value changed: 0x15 -> 0x16 [ 199.159008][ T7698] [ 199.161349][ T7698] Reported by Kernel Concurrency Sanitizer on: [ 199.167534][ T7698] CPU: 1 UID: 0 PID: 7698 Comm: syz.2.1099 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 199.178432][ T7698] Tainted: [W]=WARN [ 199.182261][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 199.192377][ T7698] ================================================================== [ 199.227611][ T7691] loop4: detected capacity change from 0 to 8192 [ 199.236234][ T7661] loop3: detected capacity change from 0 to 2048 [ 199.236919][ T7700] loop5: detected capacity change from 0 to 512 [ 199.243519][ T7691] vfat: Unknown parameter '' [ 199.264772][ T7698] loop7: unable to read partition table [ 199.273869][ T7700] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 199.298612][ T7700] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 199.308525][ T7700] System zones: 1-12 [ 199.316364][ T7700] EXT4-fs (loop5): orphan cleanup on readonly fs [ 199.336825][ T7700] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1101: bg 0: block 361: padding at end of block bitmap is not set [ 199.362291][ T7700] loop5: lost filesystem error report for type 5 error -117 [ 199.368259][ T7700] EXT4-fs (loop5): Remounting filesystem read-only [ 199.376309][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 199.376338][ C1] EXT4-fs (loop5): initial error at time 1783905845: ext4_validate_block_bitmap:441 [ 199.376539][ C1] EXT4-fs (loop5): last error at time 1783905845: ext4_validate_block_bitmap:441 [ 199.415351][ T7700] EXT4-fs (loop5): 1 truncate cleaned up [ 199.434243][ T7661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.438702][ T7700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 199.477917][ T4916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 199.488073][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.