last executing test programs: 4.095656564s ago: executing program 3 (id=768): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$eJzs3c9vG1kdAPDvTOJukmZxFjgsK7Gs2EVJBHWSDd2NOCwgITitBCz3EhI3iuLEVeLsNtEKUvUPQEIIkLjAiQsSfwAI9cQZIVWCOwIEQtDCgUNhkO1xmho7cVX/QM7nI73OD9v5fl/ceZ733sQTwKX1SkQsRESWZdliRBTz/Wle4qRZ6s97+OD9jXpJIsve+VsSSXPfTOtnPZcvr+Yvm4qIr34p4hvJ/8Y9ODreWa9Uyvv59lJtN3mUZcfXtnfXt8pb5b3V1ZU31t5cu7623Jd6zkXEW1/40/e+/ZMvvvXLT733+xt/Wfhms4JN9Xr1JVCbZtULjd9Fy2RE7A8i2IhMNmrYdH3EuQAAcL76+f4HI+LjEbEYxZhonM0BAAAA4yT77Gw8SprzfwAAAMB4SiNiNpK01LyMM2YjTUul5jW8H46ZtFI9qH0yK56OF8xFIb25XSkv59cOzEUhqW+v5NfYtrZfb9tejYgXIuK7xenGdmmjWtkc5cAHAAAAXCJXH/f/G38O+89is/8PAAAAjJm5UScAAAAADJz+PwAAAIw//X8AAAAYa19+++16yVr3v9589+hwp/rutc3ywU5p93CjtFHdv1Xaqla3Gt/Zt3vRz6tUq7c+HXuHt5dq5YPa0sHR8Y3d6uFe7cb2E7fABgAAAIbohY/d+10SESefmU5b+67ky0JENnH2yZNDTw8YoLR9x3mjdH8cbC7AcE2MOgFgZJ76lP5XvxhMIsDQFUadADByF7UDXYcFft3/XAAAgMGY/8jp/H+jxJn5/2SkmQGDls//J451uHzM/8Pl1cv83+LdISQCDF3hvDMAnQIYe2kPh/qzz/9n2VMlBQAA9N1soyRpKe8HzEaalkoRzzduC1BIbm5XyssR8YGI+G2x8Fx9e6XxysTwAAAAAAAAAAAAAAAAAAAAAAAAAAD0KMuSyAAAAICxFpH+Ocnv/zVffG22fXzgSvKvYmMZEe/98J3v316v1fZX6vv/frq/9oN8/+ujGMEAAAAA2rX66a1+PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD008MH72+0yjDj/vXzETHXKf5kTDWWU1GIiJl/JDF55nVJREz0If7JnYh4sVP8pJ5WzOVZtMdPI2J6xPGv9iE+XGb36u3P5zodf2m80lh2Pv4m8/Ksurd/6Wn7N9Gl/Xu+xxgv3f/ZUtf4dyJemuzc/rTiJ13iv9pj/K9/7fi422PZjyPmO37+JE/EWqrt3lo6ODq+tr27vlXeKu+trq68sfbm2vW15aWb25Vy/m/HGN/56M//c179Z7rEn7ug/q/1WP9/37/94EPN1ULbQ4X4UZYtvNr5/X+x+RtqOBu/9dn3ifxzoL4931o/aa6f9fJPf/PyefXf7FL/i97/hR7rv/iVu3/o8akAwBAcHB3vrFcq5f1xW7ny/5GGlfrKdAwx6Hp0fijN/8sPre7fygMOI9ZU32ONqEECAAAG5vFJfz6BAAAAAAAAAAAAAAAAAAAAAAzdRV8DFn34OrH2mCejqSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLn+GwAA//+6zNbf") write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r1 = inotify_init1(0x800) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x25, 0x1c, @void}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x29) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000240)={{r3, &(0x7f0000001a40)='\x00', 0x139000, &(0x7f0000000040)={@_ha_fsid={[0x0, 0x4]}, {0xb92, 0x1ff, 0x1, 0x8}}, 0x194, &(0x7f0000000080), &(0x7f0000000340)=0x6bc}, 0x2, &(0x7f0000000200)=[{0x2, 0x371, &(0x7f0000000100)='@\x00', &(0x7f00000019c0)="fa8fa6948627591c26db3d3652d0c1f922989837786efb67dcbb6f626305dc902c7f7bde1f1d411beb2af76f1d18db8b27661c1c0000000000000000000000000000009483deeb81", 0x48, 0x2}, {0x2, 0x7fffffff, &(0x7f0000000180)='\x00', &(0x7f00000001c0)="941749acf8924b0fe2b80ec2dcbe9c7ee0a48d", 0x13, 0x8}]}) recvmsg(r4, &(0x7f0000001ac0)={&(0x7f0000000380)=@pppol2tpin6, 0x80, &(0x7f0000001940)=[{&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/245, 0xf5}, {&(0x7f0000001500)=""/146, 0x92}, {&(0x7f00000015c0)=""/137, 0x89}, {&(0x7f0000001bc0)=""/231, 0xe7}, {&(0x7f0000001780)=""/255, 0xff}, {&(0x7f0000001880)=""/163, 0xa3}], 0x8, &(0x7f0000001680)=""/236, 0xec}, 0x1) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f00000002c0)={0x4a, 0x6, 0xffffffc2, 0x3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) 4.087865265s ago: executing program 1 (id=769): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newnexthop={0x2c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x4}, {0x0, 0xff}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b1f5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x800) 3.855379175s ago: executing program 1 (id=772): socket(0x1000000000000010, 0x80802, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x5, 0x7, 0xe, 0x1f59}]}) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) 2.357376129s ago: executing program 1 (id=774): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000009c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x4, 0x2, 0x3, 0x8, 0x309, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x3, 0x200004, 0xce1, 0x800400}]}, 0x58) inotify_init1(0x0) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000002c0)={[{@jqfmt_vfsv0}, {@noblock_validity}, {@oldalloc}, {@delalloc}, {@lazytime}, {@delalloc}]}, 0x2, 0x615, &(0x7f0000000c00)="$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") r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) 2.01438063s ago: executing program 2 (id=776): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x3}}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) close_range(r3, r0, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000140)="40024193d18113b61f80858b31e7a81a015bd22a92ae499318e13855be8aafa30e46fbd1f5caabf496c0914c42b86d4747143e29cf011c3092566b783af5bcdcea090c5599d251b6509528c37c27f72d5a5dd3756f015b8c787fdb5f91", 0x5d}, {&(0x7f00000007c0)="7967fc", 0x3}, {&(0x7f0000000540)="e796825829f8a1d6c3293c79395ae15b8a95e2716fec5a83165fb3fc921096068b8528a92e2935f27a179090bbcc699334df808b6b7aae724a2bb4c359efacc84eaca60ac56b540d", 0x48}, {&(0x7f00000005c0)="238beccb6a", 0x5}, {&(0x7f00000008c0)="7a7c7e298e4bdf50", 0x8}, {&(0x7f00000009c0)="7e1765", 0x3}, {&(0x7f0000000a00)='xU1', 0x3}], 0x7, &(0x7f0000006200)}}, {{&(0x7f0000001000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc31f79cd38a279d05", 0x9}, {&(0x7f0000001080)="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", 0xd3f}, {&(0x7f0000002180)="2dd1", 0x2}, {&(0x7f0000002240)="52e8da01534b68eb517df185ded372b2df74fb80d9310eacd6ce72c95d0b9037c6572b7da359effd164297fce36fa377e7", 0x31}, {0x0}, {&(0x7f00000033c0)="c6a19f723c5b8c82ea8bf6f4c4e509930580", 0x12}, {&(0x7f00000034c0)="5bc6c2", 0x3}, {&(0x7f0000002080)="64824011397588d999f31dfd6821b03502aa677c", 0x14}, {&(0x7f0000003580)="949709d742", 0x5}], 0x9, &(0x7f0000003680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x58}}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000037c0)="f9e2dcf64a03da0a77e48a7ba72668c93696f1b19d12dc43e8b2b9149c41de374b02f9a530c477d7c54fa05a1149e6ab73ed257a44f9a21bf3949d037ddcb1224b25dd186f9e3ad6cb21c30b63d9ea16a82714", 0x53}, {&(0x7f0000003880)="3d8f2f300b6687174697", 0xa}, {&(0x7f0000003900)="cd52c0793e0c", 0x6}], 0x3}}], 0x3, 0x4000000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080), 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.865698813s ago: executing program 2 (id=777): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x90) 1.826277287s ago: executing program 2 (id=779): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}}, 0x24}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000340)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000540)=[{&(0x7f0000033a80)=""/102375, 0x18fe7}], 0x1, 0x0, 0x0) close(r3) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) listen(0xffffffffffffffff, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xe, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000600014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.266918627s ago: executing program 3 (id=782): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="120000000f0000000400000002"], 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) clock_getres(0x2, &(0x7f00000000c0)) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c", @ANYRES16=r3, @ANYBLOB="01062abd7000ffdbdf"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r4, &(0x7f0000000040), 0x0}, 0x20) 1.063875545s ago: executing program 1 (id=784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x81}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f00000006c0)="cb030000004c0b24676c6c71ae37efcedaf46242309766deb4e793f90000000000fb000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f3df056e4984e8b05ed2c4a920711fb4154b544672fc569e52bca80efaa99b0ea491c8999997c97c20517071900fdb72c92faadd3c304d838b1771aa94e1ef38983ac314bf11275d8b5099110a730139be654440b72eaf6c035dec41a", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000e00)="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", &(0x7f00000007c0)="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", 0x3, 0x0, 0x3ff}, 0x23) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) 1.027735788s ago: executing program 3 (id=785): r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2d02, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timerfd_create(0x0, 0x80800) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000580)=@hci, 0x8b0b4f55126e0104, &(0x7f0000000140)}, 0x8000) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) mprotect(&(0x7f00001a4000/0x2000)=nil, 0x2000, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xb97) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x78) close(r4) mmap$usbmon(&(0x7f00001a4000/0x4000)=nil, 0x4000, 0x3000002, 0x4010, r4, 0x48) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0xc10, 0x4) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000001b00)=0x1, 0x4) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb2360000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x394d024, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYRESDEC=r7], 0x58}}, 0x0) 1.027300888s ago: executing program 3 (id=786): socket$unix(0x1, 0x1, 0x0) msgget$private(0x0, 0x400) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x6}]}) fsopen(0x0, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000002c0)=""/24) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000180)={0xa, &(0x7f0000000400)=[{0x2, 0x2, 0x7, 0x8}, {0xff4c, 0x1, 0x9, 0xfff00000}, {0x6e, 0x0, 0x40, 0x40}, {0x5, 0x3, 0x7d}, {0x0, 0xb, 0x3, 0x1}, {0x6, 0x5, 0x6, 0x2}, {0x7, 0x4, 0x8, 0x8}, {0x0, 0x8d, 0xb6, 0x2}, {0x3ff, 0x3, 0x5, 0x3}, {0x4, 0xff, 0x6, 0x3ff}]}, 0x10) socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x1000) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) dup2(r5, 0xffffffffffffffff) 1.022689449s ago: executing program 2 (id=787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000011"], 0xc4}}, 0x4008800) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu\t>0&&\t') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffff5a}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000380)=r4, 0x4) sendmsg$sock(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, 0x40840) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="8100"}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, 0x0, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\b\x00'], 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r8, 0x27, 0xd, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc800320081", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r9, r8, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="020400020a0000002cbd7000fcdbdf25030006008000000002004e21acbf3e8623000000000000000200010000000000000007fe31000000030005000000000002004e22ac1e00010000000000000000455049defad3f43c193b26d6a84e66b41efd080278df37bd8a1a3c66ee1201bcfd5223da3834ffbf4b72615df9e7b23b09e5d1380d152abcae421a983ad4c05b7a169008ddb75e8829219abd1364a838a23a4dcc8761b6e62eb4c8721ea7bf220cd19a9f2c343e29eb29df9446b930eeee6a7674b28ffc25f2b771aee1812d"], 0x50}, 0x1, 0x7}, 0x8014) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000020000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 888.334291ms ago: executing program 2 (id=788): socket(0x1000000000000010, 0x80802, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) ptrace(0x10, r0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r5 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x5, 0x7, 0xe, 0x1f59}]}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) 797.444299ms ago: executing program 1 (id=789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd4}}, 0x0) 757.250182ms ago: executing program 1 (id=790): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, 0x1, 0x81000, 0x81, 0xffff0001, 0x3ff}, &(0x7f0000000480)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000540)={r3, 0x3}, &(0x7f0000000580)=0x8) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f00000000c0)={@loopback, @empty, 0x1, "175248864383bebb2a94ac9a2a8ee944b35de5870f8848d6d678ae51c54217cb", 0xffffffc5, 0x0, 0xfffffff7, 0x8001}, 0x3c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e24, @local}, 0x10) acct(0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000001c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e99", 0x26}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c", 0x65}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b4", 0x3a}], 0x3}}], 0x1, 0x2090) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000000c40)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x6}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c"], 0xf8}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000030000000100000f070000000d0000000700000065e0f750004f3030"], 0x0, 0x35, 0x0, 0x1}, 0x28) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000004c900200050000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000009000000000000ffffffffffffffff00000000000000000a00000000000000000000000000000000000000000000000000000000000000ffffffff0400000009000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdff00"/512]) sendto$inet(r0, &(0x7f0000000580), 0xf78501d970e10f11, 0x1000c095, 0x0, 0x0) 369.669977ms ago: executing program 0 (id=797): r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2d02, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timerfd_create(0x0, 0x80800) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000580)=@hci, 0x8b0b4f55126e0104, &(0x7f0000000140)}, 0x8000) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) mprotect(&(0x7f00001a4000/0x2000)=nil, 0x2000, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xb97) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x78) close(r4) mmap$usbmon(&(0x7f00001a4000/0x4000)=nil, 0x4000, 0x3000002, 0x4010, r4, 0x48) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0xc10, 0x4) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000001b00)=0x1, 0x4) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) setns(r6, 0x24020000) 345.011819ms ago: executing program 0 (id=798): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800180018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 285.166575ms ago: executing program 0 (id=799): syz_read_part_table(0x1056, &(0x7f0000001080)="$eJzsz7GNwkAUBNBZ++yzk0svoSAySiAgowncACXQAJ1QCU0ggWws0wEQvJf82QlG2vBRpc1+W5ckfZJhqefbTKm8irTP0yfHvzFUuTblv1oGL7ufOdXj4ibJ/ZDVbaqGdL9JuulxWifnN3wRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL7eIwAA//8VKwlg") r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) 282.861585ms ago: executing program 4 (id=801): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xe0, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xb}, [@IFLA_AF_SPEC={0xc0, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}]}]}, 0xe0}}, 0x0) 262.389307ms ago: executing program 4 (id=802): fcntl$lock(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, 0x0) 246.769368ms ago: executing program 0 (id=804): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) setresuid(0x0, 0xee00, 0x0) 194.877773ms ago: executing program 4 (id=805): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000046c0)=@newqdisc={0x434, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x10, 0x10000000, 0x0, 0x3ffffffd, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x200000, 0x7e150a0b, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000000, 0x3, 0x3, 0x6, 0x8, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x3, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x8, 0xe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x8000, 0x0, 0xfffffffd, 0x8, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x5, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe, 0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0x40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000000, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x23, 0xaaf0]}]}}]}, 0x434}}, 0x0) 194.700992ms ago: executing program 0 (id=806): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsm_get_self_attr(0x65, 0x0, &(0x7f00000010c0)=0x20, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f00000002c0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@sb={'sb', 0x3d, 0x5}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@uid_lt}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") 179.416204ms ago: executing program 3 (id=807): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004800) unshare(0x680) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100039740c7ba900eaffffff000003e4", @ANYRES32=r3, @ANYBLOB="830004000000000040001280080001007369740034000280060010000b000000050009002900000006000d000900000006000f000700"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000023c0)={@cgroup, 0xffffffffffffffff, 0x2f, 0x18, 0x4}, 0x20) 173.370304ms ago: executing program 4 (id=808): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0xa, 0x0, 0x0, 0x0, 0x7, 0x35a05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xf}, 0x1075, 0x6, 0xffffffff, 0x9, 0xffffffffffffbbfe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1c0000000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f9, &(0x7f0000000080)) 75.084043ms ago: executing program 4 (id=809): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 74.592513ms ago: executing program 3 (id=810): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f00000007c0)={0x0, 0x8, 0x1, [0x797d, 0xb88, 0xfffffffffffffffa, 0x1, 0x5], [0x0, 0x86, 0x9, 0x8, 0x8, 0x4, 0x80000001, 0x2, 0x0, 0x30, 0x7, 0x2, 0x4, 0x1, 0x9, 0x3, 0x8, 0x1ff, 0x4, 0xf, 0x7, 0x3, 0x6, 0x4, 0x1, 0x9, 0x3, 0x20002000000, 0x4, 0x2, 0x2, 0x4, 0x0, 0x2, 0x7fffffff, 0x1000, 0xa5, 0x5, 0x2, 0xffffffff, 0xc, 0x40, 0x25ba, 0x5, 0x101, 0xd, 0xfffffffffffffff8, 0x76, 0xf1d, 0x7f, 0x9, 0x5, 0x4, 0x6, 0xffffffffffffffd0, 0x3, 0x4, 0x0, 0x9, 0x2b9b00000, 0x8, 0x0, 0xff, 0x197400000000000, 0x8, 0x0, 0xf00, 0x4, 0x756ad617, 0xb4, 0x8000, 0x5, 0x6, 0x0, 0x0, 0x1, 0x8, 0x8, 0x8001, 0x1, 0x0, 0x81, 0x4, 0xfffffffffffffffb, 0x400, 0x0, 0x2b4, 0x5, 0xd, 0x7, 0x7fffffff, 0xfd3, 0x0, 0x3, 0x5387, 0x4, 0x0, 0x401, 0x196, 0x401, 0x0, 0x4, 0x7fffffffffffffff, 0x10001, 0x100, 0x0, 0x4, 0x7f, 0x2b5b, 0x0, 0x5, 0x3, 0x2, 0xffffffffffffffff, 0x7fff, 0x100000001, 0x8, 0x8, 0xfffffffffffffff7, 0x3, 0x4]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) process_vm_writev(0x0, &(0x7f0000001c80), 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/103, 0x67}], 0x1, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r7 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r5, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) timer_create(0x5, 0x0, &(0x7f0000000040)) write$cgroup_pid(r8, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000", @ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0x20040894}, 0x0) 74.441443ms ago: executing program 0 (id=811): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x400c84, &(0x7f0000000040)={[{}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0x41, 0x7c5, &(0x7f0000000dc0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb212) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 74.303173ms ago: executing program 4 (id=812): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x400c84, &(0x7f0000000040)={[{}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0x41, 0x7c5, &(0x7f0000000dc0)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb212) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x3fa, 0x200, 0x70bd26, 0x25dfdbff, {0x1, 0x1, 0x1, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4000) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000002a40)=""/4096, &(0x7f0000003a40)=0x1000) 0s ago: executing program 2 (id=813): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf672000000000001602000000c0ffff6702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000060a0b04000000000000000002000000180004800900010073797a31000000000900020073797a31000000000500074007000000140000001100010000000000000000000300000a460300c340725eead179c30f738f6add749bf138316e7da11d279caad7b6488f7a5de51a19a395460f234a44123a8b367249398054e78eb78d52afa31bd9f6b2a09379ea4275b905541b1d9cb477ac3fa736bf0174077558a0946445bab28382ec4595551438762b5bd1d26dbf900ee5e6af29179d64a68ee880d5dd9f5b3ceaeff9723efb453cb9f7c0a4180d9d"], 0x74}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x5) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x4058534c, &(0x7f0000000180)={0x80, 0x2}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000) close(r8) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r7, &(0x7f00000002c0), 0x15) splice(r6, 0x0, r8, 0x0, 0x19404, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYRESHEX=r0, @ANYRESOCT=r5], 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x4880) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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") read(r4, &(0x7f0000000500)=""/176, 0xb0) kernel console output (not intermixed with test programs): on on remount [ 36.470971][ T3762] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.479785][ T3762] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 36.502053][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.086677][ T3789] loop0: detected capacity change from 0 to 512 [ 37.098451][ T3789] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 37.108742][ T3789] EXT4-fs (loop0): orphan cleanup on readonly fs [ 37.125250][ T3789] EXT4-fs warning (device loop0): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 37.191466][ T3789] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 37.198375][ T3789] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #16: comm syz.0.81: inode has both inline data and extents flags [ 37.239659][ T3789] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 37.241805][ T3789] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.81: couldn't read orphan inode 16 (err -117) [ 37.242140][ T3804] IPv6: Can't replace route, no match found [ 37.250985][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 37.274890][ C1] EXT4-fs (loop0): initial error at time 1771451709: ext4_orphan_get:1391: inode 16 [ 37.284299][ C1] EXT4-fs (loop0): last error at time 1771451709: ext4_orphan_get:1391: inode 16 [ 37.294446][ T3805] netlink: 212 bytes leftover after parsing attributes in process `syz.2.80'. [ 37.298022][ T3789] loop0: lost filesystem error report for type 5 error -117 [ 37.310895][ T3789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.378100][ T3815] loop4: detected capacity change from 0 to 1024 [ 37.425082][ T3815] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 37.448613][ T3815] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 37.471068][ T3815] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 37.513406][ T3815] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 37.544174][ T3815] EXT4-fs error (device loop4): ext4_get_journal_inode:5865: inode #17: comm syz.4.89: iget: bad i_size value: 4398046511204 [ 37.603423][ T3815] loop4: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 37.608570][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 37.624133][ C1] EXT4-fs (loop4): initial error at time 1771451710: ext4_get_journal_inode:5865: inode 17 [ 37.634143][ C1] EXT4-fs (loop4): last error at time 1771451710: ext4_get_journal_inode:5865: inode 17 [ 37.644244][ T3815] EXT4-fs (loop4): no journal found [ 38.269171][ T3841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.96'. [ 38.514455][ T3856] netlink: 212 bytes leftover after parsing attributes in process `syz.4.98'. [ 38.557404][ T3789] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.81: iget: bad i_size value: 360287970189639690 [ 39.190825][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.334415][ T3867] syz.1.101 (3867) used greatest stack depth: 9424 bytes left [ 39.354665][ T3873] bridge1: entered promiscuous mode [ 39.421287][ T3878] netlink: 20 bytes leftover after parsing attributes in process `syz.4.108'. [ 39.459471][ T3882] netlink: 176 bytes leftover after parsing attributes in process `syz.1.110'. [ 39.463785][ T3882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 39.540047][ T3879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.573407][ T3879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.608945][ T3884] program syz.0.109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.618154][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 39.618195][ T28] audit: type=1400 audit(1771451712.253:2924): avc: denied { write } for pid=3877 comm="syz.0.109" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 39.626024][ T3893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.114'. [ 39.673484][ T3898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.103'. [ 39.689047][ T3899] loop1: detected capacity change from 0 to 1024 [ 39.695950][ T3899] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 39.706040][ T3879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.731731][ T3879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.741482][ T3899] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.772192][ T3899] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 39.795252][ T3899] EXT4-fs (loop1): orphan cleanup on readonly fs [ 39.814845][ T3899] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.115: Inode bitmap for bg 0 marked uninitialized [ 39.827492][ T3899] loop1: lost filesystem error report for type 5 error -117 [ 39.827571][ T3899] EXT4-fs (loop1): Remounting filesystem read-only [ 39.834901][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 39.834915][ C0] EXT4-fs (loop1): initial error at time 1771451712: ext4_read_inode_bitmap:167 [ 39.834934][ C0] EXT4-fs (loop1): last error at time 1771451712: ext4_read_inode_bitmap:167 [ 39.868036][ T3899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.908860][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.965310][ T3893] bridge_slave_1: left allmulticast mode [ 39.990245][ T28] audit: type=1400 audit(1771451712.623:2925): avc: denied { connect } for pid=3908 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.999722][ T3893] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.046147][ T3909] netlink: 84 bytes leftover after parsing attributes in process `syz.3.119'. [ 40.055924][ T3893] bridge_slave_0: left allmulticast mode [ 40.061797][ T3909] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 40.118562][ T28] audit: type=1400 audit(1771451712.733:2926): avc: denied { write } for pid=3908 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.158068][ T3893] bridge_slave_0: left promiscuous mode [ 40.189706][ T3893] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.216203][ T3915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.120'. [ 40.405089][ T3923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 40.465440][ T28] audit: type=1400 audit(1771451713.103:2927): avc: denied { write } for pid=3922 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.500802][ T3929] loop0: detected capacity change from 0 to 512 [ 40.510629][ T28] audit: type=1400 audit(1771451713.103:2928): avc: denied { read } for pid=3922 comm="syz.3.123" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.536199][ T3929] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.549418][ T3929] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 40.562781][ T28] audit: type=1400 audit(1771451713.203:2929): avc: denied { write } for pid=3926 comm="syz.1.124" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 40.605579][ T3929] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 40.620035][ T28] audit: type=1400 audit(1771451713.233:2930): avc: denied { write } for pid=3926 comm="syz.1.124" name="route" dev="proc" ino=4026532763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 40.628536][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 40.649054][ C1] EXT4-fs (loop0): initial error at time 1771451713: mb_free_blocks:2047: inode 11: block 64 [ 40.659243][ C1] EXT4-fs (loop0): last error at time 1771451713: mb_free_blocks:2047: inode 11: block 64 [ 40.673179][ T3929] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #11: comm syz.0.125: corrupted inode contents [ 40.699892][ T3929] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 40.700090][ T3929] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #11: comm syz.0.125: mark_inode_dirty error [ 40.735113][ T3929] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 40.735337][ T3929] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.125: invalid indirect mapped block 1 (level 1) [ 40.767252][ T3929] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 40.767444][ T3929] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #11: comm syz.0.125: corrupted inode contents [ 40.788695][ T3929] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 40.799175][ T3929] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 40.829122][ T3929] loop0: lost filesystem error report for type 5 error -117 [ 40.830420][ T3929] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #11: comm syz.0.125: corrupted inode contents [ 40.855767][ T3929] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 40.855997][ T3929] EXT4-fs error (device loop0): ext4_truncate:4587: inode #11: comm syz.0.125: mark_inode_dirty error [ 40.891521][ T3929] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 40.891708][ T3929] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 40.910396][ T3929] loop0: lost filesystem error report for type 5 error -117 [ 40.910609][ T3929] EXT4-fs (loop0): 1 truncate cleaned up [ 40.934434][ T3929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.958737][ T3929] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.125: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 41.010936][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.303384][ T3973] syz.1.138 uses obsolete (PF_INET,SOCK_PACKET) [ 41.440533][ T28] audit: type=1400 audit(1771451714.073:2931): avc: denied { append } for pid=3972 comm="syz.1.138" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.686003][ T3982] netlink: 28 bytes leftover after parsing attributes in process `syz.2.137'. [ 41.971762][ T3986] loop4: detected capacity change from 0 to 512 [ 42.158808][ T3986] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 42.168616][ T3986] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.198566][ T3986] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 42.231517][ T3986] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.248727][ T3986] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 42.274082][ T3986] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.141: inode has both inline data and extents flags [ 42.305098][ T3989] 9pnet: p9_errstr2errno: server reported unknown error  [ 42.318740][ T3986] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 42.322678][ T28] audit: type=1400 audit(1771451714.963:2932): avc: denied { getopt } for pid=3988 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 42.331941][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 42.331958][ C1] EXT4-fs (loop4): initial error at time 1771451714: ext4_orphan_get:1391: inode 16 [ 42.331995][ C1] EXT4-fs (loop4): last error at time 1771451714: ext4_orphan_get:1391: inode 16 [ 42.377044][ T3986] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.141: couldn't read orphan inode 16 (err -117) [ 42.398582][ T3986] loop4: lost filesystem error report for type 5 error -117 [ 42.399134][ T3986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.528771][ T3995] netlink: 176 bytes leftover after parsing attributes in process `syz.3.143'. [ 43.535199][ T4030] veth0: entered promiscuous mode [ 43.998725][ T3986] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.141: iget: bad i_size value: 360287970189639690 [ 44.064343][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.174114][ T3973] loop1: detected capacity change from 0 to 8192 [ 44.214606][ T4046] loop4: detected capacity change from 0 to 512 [ 44.225503][ T3973] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.298333][ T4046] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 44.322543][ T4052] loop0: detected capacity change from 0 to 512 [ 44.340775][ T4046] EXT4-fs (loop4): orphan cleanup on readonly fs [ 44.347509][ T4046] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 44.362899][ T4046] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 44.364989][ T4052] EXT4-fs: Ignoring removed nobh option [ 44.375462][ T4052] ext4: Unknown parameter 'smackfsfloor' [ 44.387860][ T4046] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.156: inode has both inline data and extents flags [ 44.401081][ T4046] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 44.403035][ T4052] loop0: detected capacity change from 0 to 512 [ 44.418534][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 44.424983][ C1] EXT4-fs (loop4): initial error at time 1771451717: ext4_orphan_get:1391: inode 16 [ 44.434379][ C1] EXT4-fs (loop4): last error at time 1771451717: ext4_orphan_get:1391: inode 16 [ 44.444134][ T4055] netlink: 'syz.3.159': attribute type 1 has an invalid length. [ 44.452446][ T4046] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.156: couldn't read orphan inode 16 (err -117) [ 44.466053][ T4046] loop4: lost filesystem error report for type 5 error -117 [ 44.467790][ T4046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.544042][ T4061] __nla_validate_parse: 2 callbacks suppressed [ 44.544086][ T4061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.157'. [ 44.858339][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 44.858351][ T28] audit: type=1326 audit(1771451717.493:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e125c629 code=0x7ffc0000 [ 44.966066][ T28] audit: type=1326 audit(1771451717.493:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e125c629 code=0x7ffc0000 [ 45.020554][ T4055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.035877][ T28] audit: type=1326 audit(1771451717.663:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1e125c629 code=0x7ffc0000 [ 45.103656][ T28] audit: type=1326 audit(1771451717.663:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e125c629 code=0x7ffc0000 [ 45.128977][ T28] audit: type=1326 audit(1771451717.663:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e125c629 code=0x7ffc0000 [ 45.152616][ T28] audit: type=1326 audit(1771451717.663:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd1e125c629 code=0x7ffc0000 [ 45.176029][ T28] audit: type=1326 audit(1771451717.663:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e125c629 code=0x7ffc0000 [ 45.217806][ T28] audit: type=1326 audit(1771451717.663:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e125c629 code=0x7ffc0000 [ 45.252631][ T4080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4080 comm=syz.2.164 [ 45.275013][ T28] audit: type=1326 audit(1771451717.663:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1e125c629 code=0x7ffc0000 [ 45.299114][ T4078] netlink: 'syz.0.163': attribute type 10 has an invalid length. [ 45.307063][ T4078] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.314330][ T4078] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.326537][ T4078] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.333630][ T4078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.340932][ T4078] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.347957][ T4078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.355973][ T4085] netlink: 'syz.3.166': attribute type 10 has an invalid length. [ 45.357414][ T28] audit: type=1326 audit(1771451717.663:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e125c629 code=0x7ffc0000 [ 45.365566][ T4078] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 45.514016][ T4062] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.156: iget: bad i_size value: 360287970189639690 [ 46.221704][ T4092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.339960][ T4092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.440266][ T3404] kernel write not supported for file bpf-prog (pid: 3404 comm: kworker/0:3) [ 46.471738][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.639123][ T4110] loop4: detected capacity change from 0 to 2048 [ 46.662444][ T4100] netlink: 'syz.3.172': attribute type 10 has an invalid length. [ 46.672864][ T4100] batman_adv: batadv0: Adding interface: netdevsim1 [ 46.680812][ T4100] batman_adv: batadv0: The MTU of interface netdevsim1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.708942][ T4100] batman_adv: batadv0: Not using interface netdevsim1 (retrying later): interface not active [ 46.736904][ T4110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.993768][ T4136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.185'. [ 47.091694][ T4136] veth3: entered promiscuous mode [ 47.486198][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.504758][ T4146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 47.514004][ T4146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.546463][ T4149] netlink: 256 bytes leftover after parsing attributes in process `syz.0.191'. [ 47.555716][ T4149] netlink: 72 bytes leftover after parsing attributes in process `syz.0.191'. [ 47.557454][ T4146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.596677][ T4151] netlink: 176 bytes leftover after parsing attributes in process `syz.4.190'. [ 47.619539][ T4151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 47.745327][ T4161] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 47.775179][ T4165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.198'. [ 47.821846][ T4161] netlink: 212 bytes leftover after parsing attributes in process `syz.1.197'. [ 47.870607][ T4177] netlink: 56 bytes leftover after parsing attributes in process `syz.4.201'. [ 48.221296][ T4197] can0: slcan on ttyS3. [ 48.288660][ T4197] can0 (unregistered): slcan off ttyS3. [ 49.712035][ T4228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 50.982873][ T4247] vhci_hcd vhci_hcd.4: invalid port number 40 [ 50.993248][ T4247] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 51.171077][ T4271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 51.178327][ T4271] IPv6: NLM_F_CREATE should be set when creating new route [ 51.210701][ T4274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 51.258667][ T4272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.227'. [ 51.258715][ T4272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 51.258726][ T4272] IPv6: NLM_F_CREATE should be set when creating new route [ 52.386850][ T4314] netlink: 'syz.3.243': attribute type 5 has an invalid length. [ 52.529565][ T4318] netlink: 176 bytes leftover after parsing attributes in process `syz.1.244'. [ 52.551315][ T4318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 52.573861][ T4325] netlink: 'syz.4.248': attribute type 10 has an invalid length. [ 52.587084][ T4325] team0: Device dummy0 is up. Set it down before adding it as a team port [ 52.614549][ T4330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 53.631827][ T4354] netlink: 60 bytes leftover after parsing attributes in process `syz.4.258'. [ 53.676596][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 53.676656][ T28] audit: type=1400 audit(1771451726.313:3018): avc: denied { module_load } for pid=4349 comm="syz.1.257" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=7952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 53.726934][ T4354] unsupported nlmsg_type 40 [ 53.734874][ T4354] loop4: detected capacity change from 0 to 128 [ 53.756252][ T4353] Invalid ELF header magic: != ELF [ 53.764116][ T4354] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=8802c018, mo2=0002] [ 53.789814][ T4354] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.816088][ T4354] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.882055][ T28] audit: type=1400 audit(1771451726.523:3019): avc: denied { write } for pid=4352 comm="syz.4.258" path="/50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.954746][ T4354] EXT4-fs error (device loop4): dx_make_map:1296: inode #2: block 20: comm syz.4.258: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=0 [ 53.997528][ T4354] EXT4-fs error (device loop4) in do_split:2027: Corrupt filesystem [ 54.022183][ T4358] EXT4-fs error (device loop4): dx_make_map:1296: inode #2: block 20: comm syz.4.258: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=0 [ 54.028735][ T28] audit: type=1400 audit(1771451726.663:3020): avc: denied { create } for pid=4352 comm="syz.4.258" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 54.085650][ T4362] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 54.101671][ T4358] EXT4-fs error (device loop4) in do_split:2027: Corrupt filesystem [ 54.132174][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.191242][ T28] audit: type=1400 audit(1771451726.833:3021): avc: denied { create } for pid=4367 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.226630][ T4373] netlink: 176 bytes leftover after parsing attributes in process `syz.0.265'. [ 54.238207][ T4368] loop4: detected capacity change from 0 to 128 [ 54.257719][ T4373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 54.258940][ T4377] netlink: 256 bytes leftover after parsing attributes in process `syz.3.264'. [ 54.267364][ T28] audit: type=1400 audit(1771451726.863:3022): avc: denied { mount } for pid=4367 comm="syz.4.262" name="/" dev="configfs" ino=2080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 54.307670][ T28] audit: type=1400 audit(1771451726.863:3023): avc: denied { search } for pid=4367 comm="syz.4.262" name="/" dev="configfs" ino=2080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.333488][ T28] audit: type=1400 audit(1771451726.873:3024): avc: denied { search } for pid=4367 comm="syz.4.262" name="/" dev="configfs" ino=2080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.471089][ T28] audit: type=1400 audit(1771451726.873:3025): avc: denied { read open } for pid=4367 comm="syz.4.262" path="/" dev="configfs" ino=2080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.516466][ T28] audit: type=1400 audit(1771451726.873:3026): avc: denied { setattr } for pid=4367 comm="syz.4.262" name="/" dev="configfs" ino=2080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.539338][ T28] audit: type=1400 audit(1771451726.873:3027): avc: denied { setopt } for pid=4367 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.649736][ T4394] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 54.677593][ T4397] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 54.746736][ T4403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.267'. [ 55.147348][ T4414] loop1: detected capacity change from 0 to 512 [ 55.268266][ T4414] EXT4-fs: Ignoring removed nobh option [ 55.368477][ T4414] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e118, mo2=0002] [ 55.446377][ T4420] netlink: 'syz.2.276': attribute type 10 has an invalid length. [ 55.456258][ T4420] macvlan1: entered allmulticast mode [ 55.512511][ T4414] System zones: 1-12 [ 55.524448][ T4414] EXT4-fs (loop1): orphan cleanup on readonly fs [ 55.547354][ T4414] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 55.561636][ T4414] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.275: corrupted inode contents [ 55.577164][ T4414] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.578531][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 55.594063][ C0] EXT4-fs (loop1): initial error at time 1771451728: ext4_do_update_inode:5569: inode 15 [ 55.603880][ C0] EXT4-fs (loop1): last error at time 1771451728: ext4_do_update_inode:5569: inode 15 [ 55.626253][ T4414] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.275: mark_inode_dirty error [ 55.639300][ T4414] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.642626][ T4414] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.275: corrupted inode contents [ 55.791469][ T4414] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.791875][ T4414] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.275: mark_inode_dirty error [ 55.942099][ T4414] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.943003][ T4414] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.275: mark inode dirty (error -117) [ 56.072212][ T4414] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.072432][ T4414] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117) [ 56.090804][ T4414] EXT4-fs (loop1): 1 orphan inode deleted [ 56.099685][ T4414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 56.198154][ T4428] netlink: 176 bytes leftover after parsing attributes in process `syz.3.280'. [ 56.223328][ T4428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 56.261444][ T4436] x_tables: ip_tables: REJECT.0 target: invalid size 8 (kernel) != (user) 0 [ 56.525792][ T4448] can0: slcan on ttyS3. [ 57.110394][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.148654][ T4448] can0 (unregistered): slcan off ttyS3. [ 57.576044][ T4470] loop4: detected capacity change from 0 to 256 [ 57.830518][ T4484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.290'. [ 57.862830][ T4485] netlink: 176 bytes leftover after parsing attributes in process `syz.1.297'. [ 57.892096][ T4485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 57.928126][ T4471] loop0: detected capacity change from 0 to 32768 [ 57.953398][ T4488] usb usb1: usbfs: process 4488 (syz.4.298) did not claim interface 0 before use [ 58.037823][ T4492] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 58.055551][ T4471] loop0: p1 p3 < > [ 58.063443][ T3006] loop0: p1 p3 < > [ 58.973599][ T4517] netlink: 'syz.0.309': attribute type 3 has an invalid length. [ 58.990507][ T4519] loop1: detected capacity change from 0 to 128 [ 59.010113][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 59.010187][ T28] audit: type=1400 audit(1771451731.653:3062): avc: denied { mounton } for pid=4518 comm="syz.1.310" path="/54/file0" dev="tmpfs" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 59.104495][ T4527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'. [ 59.199681][ T4530] lo speed is unknown, defaulting to 1000 [ 59.211146][ T4530] lo speed is unknown, defaulting to 1000 [ 59.246135][ T4530] lo speed is unknown, defaulting to 1000 [ 59.296545][ T4530] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 59.456810][ T4530] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 59.570572][ T4530] lo speed is unknown, defaulting to 1000 [ 59.581318][ T4530] lo speed is unknown, defaulting to 1000 [ 59.599724][ T4530] lo speed is unknown, defaulting to 1000 [ 59.621847][ T4530] lo speed is unknown, defaulting to 1000 [ 59.642991][ T4530] lo speed is unknown, defaulting to 1000 [ 59.656595][ T4530] lo speed is unknown, defaulting to 1000 [ 59.728326][ T4541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.317'. [ 59.799618][ T4548] 8021q: adding VLAN 0 to HW filter on device bond2 [ 59.831724][ T28] audit: type=1400 audit(1771451732.463:3063): avc: denied { name_bind } for pid=4547 comm="syz.3.320" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 59.856161][ T4550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4550 comm=syz.0.319 [ 60.096002][ T4558] loop0: detected capacity change from 0 to 512 [ 60.123307][ T4558] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 60.148863][ T4558] EXT4-fs (loop0): orphan cleanup on readonly fs [ 60.167801][ T4558] EXT4-fs warning (device loop0): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 60.204966][ T4558] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 60.211982][ T4558] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.323: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 60.229878][ T4558] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 60.231266][ T4558] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.323: couldn't read orphan inode 13 (err -117) [ 60.240466][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 60.240484][ C1] EXT4-fs (loop0): last error at time 1771451732: ext4_ext_check_inode:521: inode 13 [ 60.268189][ T4558] loop0: lost filesystem error report for type 5 error -117 [ 60.270546][ T4558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.325212][ T4558] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 60.325560][ T4562] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 60.350376][ T4558] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 60.491231][ T4567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'. [ 60.506439][ T4558] EXT4-fs warning (device loop0): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 60.758124][ T4558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'. [ 60.770810][ T28] audit: type=1400 audit(1771451733.393:3064): avc: denied { create } for pid=4557 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 60.944881][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.839478][ T4597] FAULT_INJECTION: forcing a failure. [ 61.839478][ T4597] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 61.857735][ T4597] CPU: 1 UID: 0 PID: 4597 Comm: syz.4.332 Not tainted syzkaller #0 PREEMPT(full) [ 61.857817][ T4597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.857834][ T4597] Call Trace: [ 61.857889][ T4597] [ 61.857896][ T4597] __dump_stack+0x1d/0x30 [ 61.857927][ T4597] dump_stack_lvl+0x95/0xd0 [ 61.857952][ T4597] dump_stack+0x15/0x1b [ 61.857975][ T4597] should_fail_ex+0x263/0x280 [ 61.858064][ T4597] should_fail+0xb/0x20 [ 61.858085][ T4597] should_fail_usercopy+0x1a/0x20 [ 61.858169][ T4597] _copy_from_user+0x1c/0xb0 [ 61.858204][ T4597] copy_from_sockptr_offset+0x66/0xa0 [ 61.858232][ T4597] do_tcp_getsockopt+0x97e/0x1ba0 [ 61.858257][ T4597] ? _parse_integer+0x27/0x40 [ 61.858322][ T4597] ? __rcu_read_unlock+0x4e/0x70 [ 61.858340][ T4597] ? avc_has_perm_noaudit+0xab/0x130 [ 61.858362][ T4597] ? avc_has_perm+0x101/0x190 [ 61.858384][ T4597] tcp_getsockopt+0x6e/0xe0 [ 61.858485][ T4597] sock_common_getsockopt+0x60/0x70 [ 61.858516][ T4597] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 61.858546][ T4597] do_sock_getsockopt+0x1c4/0x210 [ 61.858592][ T4597] __x64_sys_getsockopt+0x11d/0x1a0 [ 61.858619][ T4597] x64_sys_call+0x2dcf/0x3020 [ 61.858647][ T4597] do_syscall_64+0x12c/0x370 [ 61.858683][ T4597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.858763][ T4597] RIP: 0033:0x7f263c14c629 [ 61.858795][ T4597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.858811][ T4597] RSP: 002b:00007f263ab86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 61.858828][ T4597] RAX: ffffffffffffffda RBX: 00007f263c3c6090 RCX: 00007f263c14c629 [ 61.858844][ T4597] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000004 [ 61.858879][ T4597] RBP: 00007f263ab86090 R08: 0000200000000180 R09: 0000000000000000 [ 61.858893][ T4597] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 61.858950][ T4597] R13: 00007f263c3c6128 R14: 00007f263c3c6090 R15: 00007ffcc59749b8 [ 61.858968][ T4597] [ 62.063696][ T4600] netlink: 'syz.2.333': attribute type 10 has an invalid length. [ 62.269612][ T4605] loop1: detected capacity change from 0 to 512 [ 62.286517][ T4605] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.335: inode has both inline data and extents flags [ 62.314274][ T4605] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.314813][ T4605] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.335: couldn't read orphan inode 15 (err -117) [ 62.324073][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 62.324107][ C1] EXT4-fs (loop1): initial error at time 1771451734: ext4_orphan_get:1391: inode 15 [ 62.324152][ C1] EXT4-fs (loop1): last error at time 1771451734: ext4_orphan_get:1391: inode 15 [ 62.361046][ T4605] loop1: lost filesystem error report for type 5 error -117 [ 62.362386][ T4605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 62.387126][ T28] audit: type=1400 audit(1771451735.023:3065): avc: denied { add_name } for pid=4604 comm="syz.1.335" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.389194][ T4609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.336'. [ 62.409888][ T4612] netlink: 32 bytes leftover after parsing attributes in process `syz.0.337'. [ 62.450412][ T4616] loop0: detected capacity change from 0 to 512 [ 62.458123][ T28] audit: type=1400 audit(1771451735.093:3066): avc: denied { create } for pid=4604 comm="syz.1.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 62.498006][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 62.511216][ T4616] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.339: inode has both inline data and extents flags [ 62.524540][ T4616] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.524741][ T4616] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.339: couldn't read orphan inode 15 (err -117) [ 62.533984][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 62.534004][ C1] EXT4-fs (loop0): initial error at time 1771451735: ext4_orphan_get:1391: inode 15 [ 62.534028][ C1] EXT4-fs (loop0): last error at time 1771451735: ext4_orphan_get:1391: inode 15 [ 62.570864][ T4616] loop0: lost filesystem error report for type 5 error -117 [ 62.571515][ T4616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 62.649245][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 63.266318][ T28] audit: type=1400 audit(1771451735.903:3067): avc: denied { bind } for pid=4643 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.292517][ T4644] FAULT_INJECTION: forcing a failure. [ 63.292517][ T4644] name failslab, interval 1, probability 0, space 0, times 1 [ 63.305136][ T4644] CPU: 1 UID: 0 PID: 4644 Comm: syz.4.347 Not tainted syzkaller #0 PREEMPT(full) [ 63.305175][ T4644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 63.305183][ T4644] Call Trace: [ 63.305187][ T4644] [ 63.305192][ T4644] __dump_stack+0x1d/0x30 [ 63.305208][ T4644] dump_stack_lvl+0x95/0xd0 [ 63.305271][ T4644] dump_stack+0x15/0x1b [ 63.305331][ T4644] should_fail_ex+0x263/0x280 [ 63.305344][ T4644] ? tipc_topsrv_queue_evt+0xda/0x200 [ 63.305404][ T4644] should_failslab+0x8c/0xb0 [ 63.305415][ T4644] __kmalloc_cache_noprof+0x5f/0x410 [ 63.305537][ T4644] ? tipc_conn_lookup+0x156/0x1b0 [ 63.305575][ T4644] tipc_topsrv_queue_evt+0xda/0x200 [ 63.305599][ T4644] tipc_sub_report_overlap+0x2ef/0x310 [ 63.305634][ T4644] tipc_nametbl_remove_publ+0x778/0xe20 [ 63.305653][ T4644] tipc_nametbl_withdraw+0xe1/0x200 [ 63.305718][ T4644] tipc_sk_withdraw+0x1fc/0x310 [ 63.305738][ T4644] tipc_sk_bind+0x1de/0x390 [ 63.305919][ T4644] tipc_bind+0x5e/0x190 [ 63.305929][ T4644] __sys_bind+0x1d0/0x290 [ 63.305943][ T4644] __x64_sys_bind+0x3f/0x50 [ 63.305954][ T4644] x64_sys_call+0x2b30/0x3020 [ 63.305969][ T4644] do_syscall_64+0x12c/0x370 [ 63.306034][ T4644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.306047][ T4644] RIP: 0033:0x7f263c14c629 [ 63.306056][ T4644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.306066][ T4644] RSP: 002b:00007f263aba7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 63.306078][ T4644] RAX: ffffffffffffffda RBX: 00007f263c3c5fa0 RCX: 00007f263c14c629 [ 63.306156][ T4644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 63.306216][ T4644] RBP: 00007f263aba7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.306223][ T4644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.306230][ T4644] R13: 00007f263c3c6038 R14: 00007f263c3c5fa0 R15: 00007ffcc59749b8 [ 63.306258][ T4644] [ 63.318588][ T4644] tipc: Failed to remove unknown binding: 66,0,0/0:1936585910/1936585911 [ 63.374357][ T28] audit: type=1400 audit(1771451736.023:3068): avc: denied { getopt } for pid=4647 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.627511][ T28] audit: type=1400 audit(1771451736.263:3069): avc: denied { create } for pid=4633 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 63.910944][ T4666] loop1: detected capacity change from 0 to 512 [ 63.966153][ T28] audit: type=1400 audit(1771451736.283:3070): avc: denied { connect } for pid=4633 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 63.996103][ T4666] EXT4-fs: Ignoring removed i_version option [ 64.001973][ T28] audit: type=1400 audit(1771451736.333:3071): avc: denied { create } for pid=4649 comm="syz.4.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 64.060038][ T4666] EXT4-fs: Ignoring removed bh option [ 64.079064][ T28] audit: type=1400 audit(1771451736.343:3072): avc: denied { sys_admin } for pid=4649 comm="syz.4.349" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 64.100188][ T28] audit: type=1400 audit(1771451736.363:3073): avc: denied { write } for pid=4633 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 64.120862][ T28] audit: type=1400 audit(1771451736.393:3074): avc: denied { ioctl } for pid=4657 comm="syz.2.352" path="socket:[9340]" dev="sockfs" ino=9340 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.147144][ T4666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.156012][ T28] audit: type=1400 audit(1771451736.773:3075): avc: denied { create } for pid=4672 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 64.160428][ T4666] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.208643][ T28] audit: type=1400 audit(1771451736.773:3076): avc: denied { ioctl } for pid=4672 comm="syz.3.354" path="socket:[9364]" dev="sockfs" ino=9364 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 64.328175][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.370282][ T28] audit: type=1400 audit(1771451737.013:3077): avc: denied { accept } for pid=4679 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.471966][ T4683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'. [ 64.482133][ T4683] netlink: 72 bytes leftover after parsing attributes in process `syz.2.357'. [ 64.723181][ T4698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.743281][ T4698] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 64.864377][ T30] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 64.940519][ T4702] netlink: 176 bytes leftover after parsing attributes in process `syz.2.364'. [ 65.000832][ T30] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 65.022360][ T4704] netlink: 44 bytes leftover after parsing attributes in process `syz.4.365'. [ 65.034369][ T4702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 65.044026][ T4704] netlink: 76 bytes leftover after parsing attributes in process `syz.4.365'. [ 65.230097][ T4716] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 66.548049][ T4747] loop4: detected capacity change from 0 to 128 [ 66.658121][ T4749] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 66.704267][ T4749] __nla_validate_parse: 1 callbacks suppressed [ 66.704283][ T4749] netlink: 212 bytes leftover after parsing attributes in process `syz.2.376'. [ 66.734657][ T4747] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.747032][ T4747] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.768546][ T28] audit: type=1400 audit(1771451739.403:3078): avc: denied { setattr } for pid=4746 comm="syz.4.375" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.840119][ T28] audit: type=1400 audit(1771451739.403:3079): avc: denied { setattr } for pid=4746 comm="syz.4.375" name="bus" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 66.908905][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.972853][ T4762] loop4: detected capacity change from 0 to 512 [ 67.011115][ T4762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.023786][ T4762] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.036580][ T28] audit: type=1400 audit(1771451739.683:3080): avc: denied { watch watch_reads } for pid=4759 comm="syz.4.378" path="/80/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.049865][ T4772] loop0: detected capacity change from 0 to 512 [ 67.111443][ T4772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.125823][ T4775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.133244][ T4775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.143762][ T4772] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.145398][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.175840][ T4775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.183966][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.209943][ T28] audit: type=1400 audit(1771451739.843:3081): avc: denied { execute } for pid=4778 comm="syz.2.384" path="/memory.swap.current" dev="ramfs" ino=9021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 67.214103][ T4775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.246820][ T4775] batman_adv: batadv0: Removing interface: netdevsim1 [ 67.290894][ T4785] xt_hashlimit: size too large, truncated to 1048576 [ 67.470438][ T4783] loop1: detected capacity change from 0 to 512 [ 67.495803][ T4783] EXT4-fs (loop1): Unsupported encryption level 252 [ 67.505768][ T4787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.518988][ T4787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.657891][ T4783] loop1: detected capacity change from 0 to 1764 [ 67.687716][ T4783] iso9660: Unknown parameter '' [ 67.743277][ T4808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 67.757593][ T4783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.387'. [ 67.888860][ T4816] netlink: 176 bytes leftover after parsing attributes in process `syz.1.394'. [ 67.928896][ T4816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 68.071161][ T4808] netlink: 'syz.3.393': attribute type 64 has an invalid length. [ 68.088696][ T4808] netlink: 16 bytes leftover after parsing attributes in process `syz.3.393'. [ 68.185386][ T4827] loop1: detected capacity change from 0 to 512 [ 68.236778][ T4827] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 68.278680][ T4827] EXT4-fs (loop1): orphan cleanup on readonly fs [ 68.294948][ T4827] EXT4-fs warning (device loop1): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.350174][ T4827] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 68.385429][ T4827] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #16: comm syz.1.398: inode has both inline data and extents flags [ 68.408769][ T4827] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 68.408959][ T4827] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.398: couldn't read orphan inode 16 (err -117) [ 68.429867][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 68.429890][ C0] EXT4-fs (loop1): initial error at time 1771451741: ext4_orphan_get:1391: inode 16 [ 68.429935][ C0] EXT4-fs (loop1): last error at time 1771451741: ext4_orphan_get:1391: inode 16 [ 68.478914][ T4827] loop1: lost filesystem error report for type 5 error -117 [ 68.479379][ T4827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.539713][ T4847] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.405'. [ 68.548969][ T4847] 0XD: renamed from gretap0 (while UP) [ 68.556420][ T4847] 0XD: entered allmulticast mode [ 68.572782][ T4847] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 68.600995][ T4847] netlink: 14 bytes leftover after parsing attributes in process `syz.3.405'. [ 68.682816][ T4847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.695944][ T4847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.707228][ T4842] SELinux: Context system_u:object_r:apt_lock_t:s0 is not valid (left unmapped). [ 68.708596][ T4847] bond0 (unregistering): Released all slaves [ 68.755356][ T4842] xt_connbytes: Forcing CT accounting to be enabled [ 68.762352][ T4842] Cannot find add_set index 3 as target [ 68.951221][ T4827] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.398: iget: bad i_size value: 360287970189639690 [ 69.000523][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.172538][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 69.172551][ T28] audit: type=1400 audit(1771451741.813:3093): avc: denied { create } for pid=4858 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.204254][ T28] audit: type=1400 audit(1771451741.843:3094): avc: denied { connect } for pid=4858 comm="syz.1.407" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.265293][ T28] audit: type=1400 audit(1771451741.843:3095): avc: denied { setopt } for pid=4858 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.318586][ T28] audit: type=1400 audit(1771451741.953:3096): avc: denied { remove_name } for pid=3324 comm="syz-executor" name="file0" dev="tmpfs" ino=471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:apt_lock_t:s0" [ 69.412957][ T28] audit: type=1400 audit(1771451741.963:3097): avc: denied { rmdir } for pid=3324 comm="syz-executor" name="86" dev="tmpfs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:apt_lock_t:s0" [ 69.594696][ T28] audit: type=1400 audit(1771451742.233:3098): avc: denied { kexec_image_load } for pid=4861 comm="syz.4.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 70.163079][ T4862] lo speed is unknown, defaulting to 1000 [ 70.248435][ T28] audit: type=1400 audit(1771451742.883:3099): avc: denied { ioctl } for pid=4884 comm="syz.2.417" path="socket:[9214]" dev="sockfs" ino=9214 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.278809][ T4885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 70.297646][ T4885] bridge_slave_1: left allmulticast mode [ 70.303796][ T4885] bridge_slave_1: left promiscuous mode [ 70.327890][ T4885] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.450201][ T4885] bridge_slave_0: left allmulticast mode [ 70.468647][ T4885] bridge_slave_0: left promiscuous mode [ 70.475415][ T4885] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.536463][ T4885] bond0: (slave bridge0): Releasing backup interface [ 70.597902][ T28] audit: type=1400 audit(1771451743.233:3100): avc: denied { create } for pid=4893 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.636230][ T28] audit: type=1400 audit(1771451743.263:3101): avc: denied { bind } for pid=4893 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.752719][ T4885] netlink: 'syz.2.417': attribute type 64 has an invalid length. [ 70.773130][ T4885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.417'. [ 70.839760][ T28] audit: type=1400 audit(1771451743.483:3102): avc: denied { create } for pid=4900 comm="syz.4.421" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 70.950770][ T4910] io-wq is not configured for unbound workers [ 71.045231][ T10] lo speed is unknown, defaulting to 1000 [ 71.045256][ T10] syz0: Port: 1 Link DOWN [ 71.045325][ T1962] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.045354][ T1962] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.045430][ T1962] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.045533][ T1962] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.086842][ T4913] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 71.194836][ T4915] xt_socket: unknown flags 0x48 [ 71.548252][ T4920] loop1: detected capacity change from 0 to 256 [ 71.827702][ T4923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.839188][ T4923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.036024][ T4931] loop4: detected capacity change from 0 to 512 [ 72.056389][ T4931] EXT4-fs: old and new quota format mixing [ 72.353430][ T4944] netlink: 68 bytes leftover after parsing attributes in process `syz.4.435'. [ 72.565945][ T4957] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.440'. [ 72.575361][ T4957] netlink: zone id is out of range [ 72.581515][ T4957] netlink: zone id is out of range [ 72.587335][ T4957] netlink: zone id is out of range [ 72.602154][ T4957] netlink: set zone limit has 8 unknown bytes [ 72.644402][ T4957] lo speed is unknown, defaulting to 1000 [ 72.653028][ T4960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 72.695919][ T4960] bridge_slave_1: left allmulticast mode [ 72.705873][ T4960] bridge_slave_1: left promiscuous mode [ 72.717175][ T4960] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.729305][ T4960] bridge_slave_0: left allmulticast mode [ 72.735113][ T4960] bridge_slave_0: left promiscuous mode [ 72.745180][ T4960] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.761524][ T4960] bond0: (slave bridge0): Releasing backup interface [ 73.127231][ T4958] netlink: 44 bytes leftover after parsing attributes in process `syz.4.437'. [ 73.567340][ T4964] netlink: 'syz.0.441': attribute type 64 has an invalid length. [ 73.599954][ T4964] netlink: 16 bytes leftover after parsing attributes in process `syz.0.441'. [ 73.751981][ T4981] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 73.793598][ T4982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 73.802502][ T4982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.446'. [ 73.844240][ T4981] bond0 (unregistering): Released all slaves [ 74.048837][ T4996] netlink: 444 bytes leftover after parsing attributes in process `syz.0.452'. [ 74.066215][ T4996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'. [ 74.093245][ T4994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.448'. [ 74.176736][ T5004] loop0: detected capacity change from 0 to 512 [ 74.201908][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 74.201922][ T28] audit: type=1400 audit(1771451746.843:3115): avc: denied { create } for pid=5003 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 74.308859][ T4987] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4987 comm=syz.3.448 [ 74.484088][ T5008] loop0: detected capacity change from 0 to 512 [ 74.520438][ T28] audit: type=1400 audit(1771451747.163:3116): avc: denied { write } for pid=5011 comm="syz.4.458" laddr=::1 lport=1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.592239][ T5008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.746276][ T5008] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.880650][ T5038] loop1: detected capacity change from 0 to 1024 [ 74.888034][ T5038] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 74.905495][ T5038] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 74.989008][ T5038] EXT4-fs (loop1): invalid journal inode [ 74.994678][ T5038] EXT4-fs (loop1): can't get journal size [ 75.133162][ T5038] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 75.162568][ T5038] EXT4-fs (loop1): mount failed [ 75.413872][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.445361][ T5043] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 75.721927][ T5072] loop1: detected capacity change from 0 to 512 [ 75.725700][ T1683] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.749019][ T5053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.757563][ T5053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.765928][ T1962] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.785759][ T5072] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 75.794823][ T1962] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.808648][ T5072] EXT4-fs (loop1): orphan cleanup on readonly fs [ 75.858591][ T2073] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.867588][ T5072] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 75.888458][ T5072] EXT4-fs warning (device loop1): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.903507][ T5072] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 75.913183][ T5072] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #16: comm syz.1.478: inode has both inline data and extents flags [ 75.926320][ T5072] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 75.926599][ T5072] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.478: couldn't read orphan inode 16 (err -117) [ 75.935771][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 75.935789][ C1] EXT4-fs (loop1): initial error at time 1771451748: ext4_orphan_get:1391: inode 16 [ 75.935825][ C1] EXT4-fs (loop1): last error at time 1771451748: ext4_orphan_get:1391: inode 16 [ 75.991841][ T5072] loop1: lost filesystem error report for type 5 error -117 [ 75.992348][ T5072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.053980][ T5061] netlink: 'syz.2.475': attribute type 64 has an invalid length. [ 76.145376][ T5062] netlink: 'syz.4.474': attribute type 64 has an invalid length. [ 76.215458][ T5083] lo speed is unknown, defaulting to 1000 [ 76.567821][ T5072] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.478: iget: bad i_size value: 360287970189639690 [ 76.630122][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.786950][ T5090] netlink: 'syz.4.483': attribute type 12 has an invalid length. [ 76.807275][ T28] audit: type=1400 audit(1771451749.443:3117): avc: denied { ioctl } for pid=5089 comm="syz.4.483" path="/dev/input/event2" dev="devtmpfs" ino=244 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.075382][ T28] audit: type=1400 audit(1771451749.713:3118): avc: denied { mount } for pid=5105 comm="syz.2.488" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 77.311067][ T5104] loop4: detected capacity change from 0 to 1024 [ 77.318609][ T5104] EXT4-fs: inline encryption not supported [ 77.325800][ T28] audit: type=1400 audit(1771451749.893:3119): avc: denied { getopt } for pid=5108 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 77.430592][ T5104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.738558][ T5119] __nla_validate_parse: 12 callbacks suppressed [ 77.739159][ T5119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 77.856658][ T5119] bridge_slave_1: left allmulticast mode [ 77.892337][ T5119] bridge_slave_1: left promiscuous mode [ 77.925271][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.976270][ T5119] bridge_slave_0: left allmulticast mode [ 77.984145][ T5129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.494'. [ 78.008643][ T5119] bridge_slave_0: left promiscuous mode [ 78.048714][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.084918][ T5132] netlink: 176 bytes leftover after parsing attributes in process `syz.2.495'. [ 78.122749][ T5132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 78.448641][ T5121] netlink: 'syz.1.491': attribute type 64 has an invalid length. [ 78.472107][ T5121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.491'. [ 79.206320][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.339428][ T5149] loop4: detected capacity change from 0 to 512 [ 79.362806][ T5149] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 79.381015][ T28] audit: type=1326 audit(1771451752.023:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.0.500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a260ec629 code=0x0 [ 79.416346][ T5149] EXT4-fs (loop4): orphan cleanup on readonly fs [ 79.423607][ T5149] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 79.471449][ T5147] syzkaller0: entered promiscuous mode [ 79.492770][ T5147] syzkaller0: entered allmulticast mode [ 79.512233][ T28] audit: type=1400 audit(1771451752.143:3121): avc: denied { map } for pid=5158 comm="syz.2.504" path="socket:[10755]" dev="sockfs" ino=10755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.550077][ T5149] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.567820][ T28] audit: type=1400 audit(1771451752.143:3122): avc: denied { read } for pid=5158 comm="syz.2.504" path="socket:[10755]" dev="sockfs" ino=10755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.592873][ T5149] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 79.599835][ T5149] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.497: inode has both inline data and extents flags [ 79.613164][ T5149] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 79.613452][ T5149] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.497: couldn't read orphan inode 16 (err -117) [ 79.622706][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 79.622737][ C0] EXT4-fs (loop4): initial error at time 1771451752: ext4_orphan_get:1391: inode 16 [ 79.622772][ C0] EXT4-fs (loop4): last error at time 1771451752: ext4_orphan_get:1391: inode 16 [ 79.659792][ T5149] loop4: lost filesystem error report for type 5 error -117 [ 79.712974][ T5149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.931514][ T5174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 80.855603][ T5180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.882466][ T5180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.910998][ T5174] netlink: 'syz.1.508': attribute type 64 has an invalid length. [ 80.964081][ T5174] netlink: 16 bytes leftover after parsing attributes in process `syz.1.508'. [ 81.445681][ T5200] Illegal XDP return value 4294967274 on prog (id 125) dev N/A, expect packet loss! [ 81.656602][ T5209] netlink: 176 bytes leftover after parsing attributes in process `syz.1.519'. [ 81.670648][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.685169][ T5209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 81.838119][ T28] audit: type=1400 audit(1771451754.473:3123): avc: denied { read } for pid=5212 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.017184][ T5228] loop1: detected capacity change from 0 to 512 [ 82.027256][ T5228] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 82.047456][ T5228] EXT4-fs (loop1): orphan cleanup on readonly fs [ 82.054212][ T5228] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 82.067276][ T5228] EXT4-fs warning (device loop1): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 82.089500][ T5228] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 82.104119][ T5228] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #16: comm syz.1.525: inode has both inline data and extents flags [ 82.117473][ T5228] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.118417][ T5228] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.525: couldn't read orphan inode 16 (err -117) [ 82.118560][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 82.145775][ C1] EXT4-fs (loop1): initial error at time 1771451754: ext4_orphan_get:1391: inode 16 [ 82.155186][ C1] EXT4-fs (loop1): last error at time 1771451754: ext4_orphan_get:1391: inode 16 [ 82.164871][ T5228] loop1: lost filesystem error report for type 5 error -117 [ 82.165992][ T5228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.576177][ T28] audit: type=1400 audit(1771451755.213:3124): avc: denied { connect } for pid=5256 comm="syz.2.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.597627][ T5257] xt_hashlimit: overflow, try lower: 3/0 [ 82.702299][ T5261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.537'. [ 82.739724][ T5228] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.525: iget: bad i_size value: 360287970189639690 [ 82.800716][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.889409][ T5265] dummy0: entered promiscuous mode [ 82.894551][ T5265] dummy0: entered allmulticast mode [ 82.990896][ T28] audit: type=1400 audit(1771451755.633:3125): avc: denied { mounton } for pid=5266 comm="syz.1.538" path="/96/file0" dev="tmpfs" ino=524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 83.030340][ T5270] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 84.314978][ T5283] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 84.492387][ T5283] __nla_validate_parse: 1 callbacks suppressed [ 84.492453][ T5283] netlink: 212 bytes leftover after parsing attributes in process `syz.4.542'. [ 84.857868][ T5295] netlink: 176 bytes leftover after parsing attributes in process `syz.4.545'. [ 84.980518][ T5295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 85.202410][ T5248] Process accounting resumed [ 85.357100][ T28] audit: type=1326 audit(1771451757.993:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e125c629 code=0x7ffc0000 [ 85.475052][ T28] audit: type=1326 audit(1771451758.023:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e125c629 code=0x7ffc0000 [ 85.541957][ T28] audit: type=1326 audit(1771451758.033:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e125c629 code=0x7ffc0000 [ 85.579537][ T28] audit: type=1326 audit(1771451758.033:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e125c629 code=0x7ffc0000 [ 85.603091][ T28] audit: type=1326 audit(1771451758.033:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd1e125c629 code=0x7ffc0000 [ 85.626848][ T28] audit: type=1326 audit(1771451758.033:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e125c629 code=0x7ffc0000 [ 85.650962][ T28] audit: type=1326 audit(1771451758.033:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd1e125c629 code=0x7ffc0000 [ 85.690696][ T28] audit: type=1326 audit(1771451758.033:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e125c629 code=0x7ffc0000 [ 85.737870][ T28] audit: type=1326 audit(1771451758.033:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd1e125c629 code=0x7ffc0000 [ 85.811808][ T28] audit: type=1400 audit(1771451758.453:3135): avc: denied { bind } for pid=5305 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.207879][ T5317] loop1: detected capacity change from 0 to 512 [ 86.415492][ T5317] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 86.425250][ T5321] loop0: detected capacity change from 0 to 2048 [ 86.467891][ T5321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.607163][ T5317] EXT4-fs (loop1): orphan cleanup on readonly fs [ 86.646007][ T5317] EXT4-fs warning (device loop1): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.879834][ T5317] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 86.961095][ T5331] siw: device registration error -23 [ 86.990124][ T5317] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #16: comm syz.1.554: inode has both inline data and extents flags [ 87.003476][ T5317] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 87.003840][ T5317] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.554: couldn't read orphan inode 16 (err -117) [ 87.013010][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 87.013024][ C1] EXT4-fs (loop1): initial error at time 1771451759: ext4_orphan_get:1391: inode 16 [ 87.013063][ C1] EXT4-fs (loop1): last error at time 1771451759: ext4_orphan_get:1391: inode 16 [ 87.068959][ T5329] gretap0: entered promiscuous mode [ 87.083138][ T5329] vlan4: entered promiscuous mode [ 87.092837][ T5317] loop1: lost filesystem error report for type 5 error -117 [ 87.123008][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.192008][ T5317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.341355][ T5342] ------------[ cut here ]------------ [ 87.346893][ T5342] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 87.366753][ T5342] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.0.558/5342 [ 87.377603][ T5342] Modules linked in: [ 87.381531][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.558 Not tainted syzkaller #0 PREEMPT(full) [ 87.390844][ T5342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.400960][ T5342] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 87.407238][ T5342] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 87.426908][ T5342] RSP: 0018:ffffc90002ccf368 EFLAGS: 00010246 [ 87.433091][ T5342] RAX: ffff8881022fab78 RBX: 00000000ffffffff RCX: 0000000000000000 [ 87.441119][ T5342] RDX: ffffffff86816d6f RSI: ffffffff8682b1e9 RDI: ffffffff871d3f90 [ 87.449311][ T5342] RBP: ffff888103b3b040 R08: 0000007800000000 R09: 0000000000000000 [ 87.457547][ T5342] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff888103b3b000 [ 87.465585][ T5342] R13: 0000000000000000 R14: ffff888103b3b04c R15: ffff888103b3b038 [ 87.473640][ T5342] FS: 00007f8a24b476c0(0000) GS:ffff8882ae8db000(0000) knlGS:0000000000000000 [ 87.482660][ T5342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.485654][ T5335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'. [ 87.489309][ T5342] CR2: 0000200000000180 CR3: 0000000130e52000 CR4: 00000000003506f0 [ 87.506179][ T5342] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.509012][ T5347] netlink: 5 bytes leftover after parsing attributes in process `syz.0.558'. [ 87.514220][ T5342] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 87.530188][ T5347] netlink: 32 bytes leftover after parsing attributes in process `syz.0.558'. [ 87.530947][ T5342] Call Trace: [ 87.530954][ T5342] [ 87.530972][ T5342] reg_set_min_max+0x1f2/0x260 [ 87.550819][ T5342] check_cond_jmp_op+0x13b0/0x1ab0 [ 87.555981][ T5342] do_check+0x4a9b/0x9860 [ 87.560365][ T5342] do_check_common+0xd0b/0x1630 [ 87.565274][ T5342] bpf_check+0x2f6d/0xcc10 [ 87.569727][ T5342] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 87.575753][ T5342] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 87.579314][ T5335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'. [ 87.581407][ T5342] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 87.596051][ T5342] ? try_charge_memcg+0x215/0xa10 [ 87.601121][ T5342] ? pcpu_block_update+0x24e/0x3b0 [ 87.606281][ T5342] ? _find_next_zero_bit+0x64/0xa0 [ 87.611548][ T5342] ? pcpu_block_refresh_hint+0x157/0x170 [ 87.617342][ T5342] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 87.623521][ T5342] ? css_rstat_updated+0xbb/0x280 [ 87.628725][ T5342] ? mod_memcg_state+0x182/0x270 [ 87.633659][ T5342] ? __rcu_read_unlock+0x4e/0x70 [ 87.638683][ T5342] ? avc_has_perm_noaudit+0xab/0x130 [ 87.643973][ T5342] ? avc_has_perm+0x101/0x190 [ 87.648686][ T5342] ? selinux_bpf_prog_load+0x197/0x1c0 [ 87.654145][ T5342] ? security_bpf_prog_load+0x9e/0x140 [ 87.659681][ T5342] bpf_prog_load+0xf76/0x1140 [ 87.664439][ T5342] ? security_bpf+0x2b/0x90 [ 87.668996][ T5342] __sys_bpf+0x505/0x7e0 [ 87.673292][ T5342] __x64_sys_bpf+0x41/0x50 [ 87.677795][ T5342] x64_sys_call+0x10cb/0x3020 [ 87.682580][ T5342] do_syscall_64+0x12c/0x370 [ 87.687280][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.693287][ T5342] RIP: 0033:0x7f8a260ec629 [ 87.697706][ T5342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.717430][ T5342] RSP: 002b:00007f8a24b47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.725882][ T5342] RAX: ffffffffffffffda RBX: 00007f8a26365fa0 RCX: 00007f8a260ec629 [ 87.732178][ T5345] loop0: detected capacity change from 0 to 512 [ 87.733879][ T5342] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 87.748075][ T5342] RBP: 00007f8a26182b39 R08: 0000000000000000 R09: 0000000000000000 [ 87.756087][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.764156][ T5342] R13: 00007f8a26366038 R14: 00007f8a26365fa0 R15: 00007ffebcbe9178 [ 87.772157][ T5342] [ 87.775207][ T5342] ---[ end trace 0000000000000000 ]--- [ 87.785433][ T5355] netlink: 136 bytes leftover after parsing attributes in process `syz.0.558'. [ 87.798942][ T5345] EXT4-fs: Ignoring removed oldalloc option [ 87.945093][ T5345] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.558: Parent and EA inode have the same ino 15 [ 87.945131][ T5345] loop0: lost filesystem error report for type 5 error -117 [ 87.948024][ T5345] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 87.948093][ T5345] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.558: Parent and EA inode have the same ino 15 [ 87.948116][ T5345] loop0: lost filesystem error report for type 5 error -117 [ 87.948540][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 87.948557][ C0] EXT4-fs (loop0): initial error at time 1771451760: ext4_xattr_inode_iget:437 [ 87.948583][ C0] EXT4-fs (loop0): last error at time 1771451760: ext4_xattr_inode_iget:437 [ 87.970362][ T5345] EXT4-fs (loop0): 1 orphan inode deleted [ 87.970865][ T5345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.993546][ T5376] netlink: 'syz.4.566': attribute type 21 has an invalid length. [ 87.993584][ T5376] netlink: 132 bytes leftover after parsing attributes in process `syz.4.566'. [ 88.084056][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.105820][ T5378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 88.126081][ T5382] loop0: detected capacity change from 0 to 512 [ 88.212901][ T5382] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 88.213001][ T5382] EXT4-fs (loop0): orphan cleanup on readonly fs [ 88.251362][ T5382] EXT4-fs warning (device loop0): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.255297][ T5317] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.554: iget: bad i_size value: 360287970189639690 [ 88.281417][ T5382] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 88.318809][ T5382] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #16: comm syz.0.569: inode has both inline data and extents flags [ 88.340541][ T5382] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 88.341971][ T5382] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.569: couldn't read orphan inode 16 (err -117) [ 88.351213][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 88.351232][ C0] EXT4-fs (loop0): initial error at time 1771451760: ext4_orphan_get:1391: inode 16 [ 88.351265][ C0] EXT4-fs (loop0): last error at time 1771451760: ext4_orphan_get:1391: inode 16 [ 88.387724][ T5389] loop4: detected capacity change from 0 to 512 [ 88.395082][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.404113][ T5382] loop0: lost filesystem error report for type 5 error -117 [ 88.404767][ T5382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.452990][ T5389] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 88.478401][ T5389] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.504783][ T5389] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.519490][ T5392] loop1: detected capacity change from 0 to 512 [ 88.526662][ T5389] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 88.553988][ T5389] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.572: inode has both inline data and extents flags [ 88.594683][ T5392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.623356][ T5389] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 88.623595][ T5389] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.572: couldn't read orphan inode 16 (err -117) [ 88.632782][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 88.632801][ C0] EXT4-fs (loop4): initial error at time 1771451761: ext4_orphan_get:1391: inode 16 [ 88.632824][ C0] EXT4-fs (loop4): last error at time 1771451761: ext4_orphan_get:1391: inode 16 [ 88.648610][ T5392] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.688577][ T5389] loop4: lost filesystem error report for type 5 error -117 [ 88.723091][ T5389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.723478][ T5392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.727978][ T5382] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.569: iget: bad i_size value: 360287970189639690 [ 89.797541][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.860155][ T5428] loop1: detected capacity change from 0 to 2048 [ 89.866772][ T5428] EXT4-fs: Ignoring removed nobh option [ 89.928982][ T5389] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.572: iget: bad i_size value: 360287970189639690 [ 90.024524][ T5428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.037849][ T5428] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.090131][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.122643][ T5443] netlink: 'syz.0.585': attribute type 39 has an invalid length. [ 90.138943][ T5445] loop1: detected capacity change from 0 to 512 [ 90.152018][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.281163][ T5445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.294082][ T5445] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.341790][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.472306][ T5451] syzkaller0: entered promiscuous mode [ 90.477879][ T5451] syzkaller0: entered allmulticast mode [ 90.493986][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 90.494007][ T28] audit: type=1400 audit(1771451763.133:3143): avc: denied { relabelfrom } for pid=5450 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 90.524697][ T28] audit: type=1400 audit(1771451763.163:3144): avc: denied { relabelto } for pid=5450 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 90.556574][ T28] audit: type=1326 audit(1771451763.193:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6390bac629 code=0x7ffc0000 [ 90.580559][ T28] audit: type=1326 audit(1771451763.193:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6390badec7 code=0x7ffc0000 [ 90.607508][ T28] audit: type=1326 audit(1771451763.193:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6390b6cece code=0x7ffc0000 [ 90.631337][ T28] audit: type=1326 audit(1771451763.193:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6390b6cece code=0x7ffc0000 [ 90.659091][ T28] audit: type=1326 audit(1771451763.193:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6390b6cece code=0x7ffc0000 [ 90.689453][ T28] audit: type=1326 audit(1771451763.193:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6390b6cece code=0x7ffc0000 [ 90.715295][ T28] audit: type=1326 audit(1771451763.193:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6390bac629 code=0x7ffc0000 [ 90.803220][ T28] audit: type=1326 audit(1771451763.193:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6390bac629 code=0x7ffc0000 [ 90.822790][ T5461] __nla_validate_parse: 3 callbacks suppressed [ 90.822806][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.591'. [ 90.847353][ T5468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 90.856768][ T5470] netlink: 176 bytes leftover after parsing attributes in process `syz.3.594'. [ 90.869906][ T5470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 90.935933][ T5455] netlink: 36 bytes leftover after parsing attributes in process `syz.1.588'. [ 91.175053][ T5484] loop4: detected capacity change from 0 to 512 [ 91.177365][ T5482] syz.2.598 (5482) used greatest stack depth: 8776 bytes left [ 91.218706][ T5484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.240513][ T5484] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.290665][ T5484] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 91.345565][ T5501] netlink: 176 bytes leftover after parsing attributes in process `syz.3.605'. [ 91.357218][ T5501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'. [ 91.511425][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.910975][ T5522] bond1: down delay (128) is not a multiple of miimon (7), value rounded to 126 ms [ 91.920388][ T5522] bond1: peer notification delay (3) is not a multiple of miimon (7), value rounded to 0 ms [ 91.930709][ T5522] bond1: entered allmulticast mode [ 92.168608][ T5527] netlink: 212 bytes leftover after parsing attributes in process `syz.2.612'. [ 92.214337][ T5531] netlink: 'syz.2.613': attribute type 27 has an invalid length. [ 92.257122][ T5531] dummy0: left promiscuous mode [ 92.262788][ T5531] dummy0: left allmulticast mode [ 92.316978][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.328663][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.354546][ T5531] macvlan1: left allmulticast mode [ 92.371563][ T5531] gretap1: left allmulticast mode [ 92.379484][ T2073] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.419192][ T2073] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.469094][ T5540] lo speed is unknown, defaulting to 1000 [ 92.469100][ T2073] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.484584][ T5548] loop0: detected capacity change from 0 to 1024 [ 92.491335][ T2073] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.520664][ T5548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.678761][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.726152][ T5563] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 92.787229][ T5568] netlink: 212 bytes leftover after parsing attributes in process `syz.4.623'. [ 92.912934][ T5575] can0: slcan on ttyS3. [ 93.008697][ T5575] can0 (unregistered): slcan off ttyS3. [ 93.383866][ T5590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 93.711415][ T5605] loop1: detected capacity change from 0 to 1024 [ 93.722733][ T5607] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 93.816668][ T5605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 93.830129][ T5605] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.863127][ T5605] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.634: bg 0: block 112: padding at end of block bitmap is not set [ 93.922278][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 94.160459][ T5630] netlink: 'syz.0.640': attribute type 5 has an invalid length. [ 94.305932][ T5632] loop1: detected capacity change from 0 to 512 [ 94.384103][ T5632] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 94.400904][ T5632] EXT4-fs (loop1): orphan cleanup on readonly fs [ 94.416986][ T5632] EXT4-fs warning (device loop1): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 94.443314][ T5632] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 94.451163][ T5632] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #16: comm syz.1.641: inode has both inline data and extents flags [ 94.464584][ T5632] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 94.464794][ T5632] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.641: couldn't read orphan inode 16 (err -117) [ 94.474013][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 94.474033][ C0] EXT4-fs (loop1): initial error at time 1771451767: ext4_orphan_get:1391: inode 16 [ 94.474068][ C0] EXT4-fs (loop1): last error at time 1771451767: ext4_orphan_get:1391: inode 16 [ 94.512008][ T5632] loop1: lost filesystem error report for type 5 error -117 [ 94.535949][ T5632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.820565][ T5678] loop0: detected capacity change from 0 to 8192 [ 95.833692][ T5680] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 95.928645][ T5680] FAT-fs (loop0): Filesystem has been set read-only [ 96.016149][ T5689] netlink: 'syz.3.658': attribute type 10 has an invalid length. [ 96.046317][ T5632] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.641: iget: bad i_size value: 360287970189639690 [ 96.077476][ T5695] tipc: Started in network mode [ 96.082395][ T5695] tipc: Node identity , cluster identity 4711 [ 96.089858][ T5695] tipc: Failed to set node id, please configure manually [ 96.096881][ T5695] tipc: Enabling of bearer rejected, failed to enable media [ 96.099963][ T5697] __nla_validate_parse: 3 callbacks suppressed [ 96.099987][ T5697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 96.133117][ T5697] netlink: 'syz.3.660': attribute type 30 has an invalid length. [ 96.141693][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.145703][ T1771] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.172835][ T1771] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.192743][ T1771] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.292926][ T1771] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.446009][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.666'. [ 96.455311][ T5715] kernel profiling enabled (shift: 14) [ 96.729944][ T5729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.669'. [ 96.793028][ T5729] gtp0: entered promiscuous mode [ 96.824882][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 96.824897][ T28] audit: type=1400 audit(1771451769.433:3237): avc: denied { write } for pid=5727 comm="syz.1.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 96.926579][ T5738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5738 comm=syz.0.671 [ 96.941452][ T28] audit: type=1400 audit(1771451769.593:3238): avc: denied { mount } for pid=5737 comm="syz.0.671" name="/" dev="hugetlbfs" ino=12456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 97.012030][ T5742] netlink: 176 bytes leftover after parsing attributes in process `syz.0.674'. [ 97.035499][ T5742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.674'. [ 97.106271][ T28] audit: type=1400 audit(1771451769.743:3239): avc: denied { getopt } for pid=5746 comm="syz.2.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.418643][ T28] audit: type=1400 audit(1771451770.043:3240): avc: denied { accept } for pid=5761 comm="syz.0.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.445042][ T5760] SELinux: security_context_str_to_sid (8Ӎ CWyP A`aivaGpkjadeȴWO^ [ 97.445042][ T5760] 8) failed with errno=-22 [ 97.622053][ T5775] FAULT_INJECTION: forcing a failure. [ 97.622053][ T5775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.635396][ T5775] CPU: 1 UID: 0 PID: 5775 Comm: syz.1.682 Tainted: G W syzkaller #0 PREEMPT(full) [ 97.635495][ T5775] Tainted: [W]=WARN [ 97.635501][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 97.635572][ T5775] Call Trace: [ 97.635579][ T5775] [ 97.635586][ T5775] __dump_stack+0x1d/0x30 [ 97.635609][ T5775] dump_stack_lvl+0x95/0xd0 [ 97.635632][ T5775] dump_stack+0x15/0x1b [ 97.635720][ T5775] should_fail_ex+0x263/0x280 [ 97.635743][ T5775] should_fail+0xb/0x20 [ 97.635761][ T5775] should_fail_usercopy+0x1a/0x20 [ 97.635904][ T5775] _copy_to_user+0x20/0xa0 [ 97.635984][ T5775] simple_read_from_buffer+0xb5/0x130 [ 97.636008][ T5775] proc_fail_nth_read+0x10e/0x150 [ 97.636079][ T5775] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.636108][ T5775] vfs_read+0x1ab/0x7f0 [ 97.636200][ T5775] ? __rcu_read_unlock+0x4e/0x70 [ 97.636219][ T5775] ? __fget_files+0x184/0x1c0 [ 97.636245][ T5775] ? mutex_lock+0x57/0x90 [ 97.636274][ T5775] ksys_read+0xdc/0x1a0 [ 97.636310][ T5775] __x64_sys_read+0x40/0x50 [ 97.636385][ T5775] x64_sys_call+0x2886/0x3020 [ 97.636412][ T5775] do_syscall_64+0x12c/0x370 [ 97.636447][ T5775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.636488][ T5775] RIP: 0033:0x7f6390b6cece [ 97.636505][ T5775] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 97.636523][ T5775] RSP: 002b:00007f638f606fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.636550][ T5775] RAX: ffffffffffffffda RBX: 00007f638f6076c0 RCX: 00007f6390b6cece [ 97.636565][ T5775] RDX: 000000000000000f RSI: 00007f638f6070a0 RDI: 0000000000000007 [ 97.636576][ T5775] RBP: 00007f638f607090 R08: 0000000000000000 R09: 0000000000000000 [ 97.636644][ T5775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.636720][ T5775] R13: 00007f6390e26038 R14: 00007f6390e25fa0 R15: 00007ffd39a725f8 [ 97.636741][ T5775] [ 98.006666][ T5797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.685'. [ 98.091165][ T5810] syzkaller0: entered promiscuous mode [ 98.096754][ T5810] syzkaller0: entered allmulticast mode [ 98.242252][ T5823] netlink: 176 bytes leftover after parsing attributes in process `syz.2.694'. [ 98.271776][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'. [ 98.406996][ T5827] loop1: detected capacity change from 0 to 128 [ 98.425737][ T5827] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=8802c018, mo2=0002] [ 98.470758][ T5827] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.484843][ T5827] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.574944][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.590967][ T5844] loop0: detected capacity change from 0 to 256 [ 98.610857][ T5844] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.637174][ T28] audit: type=1400 audit(1771451771.273:3241): avc: denied { read write } for pid=5847 comm="syz.1.703" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 98.667918][ T5832] loop4: detected capacity change from 0 to 2048 [ 98.698477][ T5832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.699083][ T28] audit: type=1400 audit(1771451771.273:3242): avc: denied { open } for pid=5847 comm="syz.1.703" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 98.737167][ T5832] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.749197][ T28] audit: type=1400 audit(1771451771.393:3243): avc: denied { setattr } for pid=5831 comm="syz.4.698" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.868335][ T5866] loop1: detected capacity change from 0 to 512 [ 98.871553][ T5868] loop0: detected capacity change from 0 to 512 [ 98.918670][ T5866] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 98.927061][ T5866] EXT4-fs (loop1): orphan cleanup on readonly fs [ 98.933927][ T5866] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 98.945179][ T5866] EXT4-fs warning (device loop1): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.960809][ T5866] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 98.967672][ T5866] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #16: comm syz.1.707: inode has both inline data and extents flags [ 98.985902][ T5868] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.007309][ T5866] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 99.007492][ T5866] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.707: couldn't read orphan inode 16 (err -117) [ 99.016704][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 99.016718][ C1] EXT4-fs (loop1): initial error at time 1771451771: ext4_orphan_get:1391: inode 16 [ 99.016754][ C1] EXT4-fs (loop1): last error at time 1771451771: ext4_orphan_get:1391: inode 16 [ 99.078150][ T5868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.102775][ T5868] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.149532][ T5866] loop1: lost filesystem error report for type 5 error -117 [ 99.151513][ T5866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.209415][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.400015][ T5887] netlink: 'syz.0.713': attribute type 27 has an invalid length. [ 99.400388][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.453149][ T5889] netlink: 176 bytes leftover after parsing attributes in process `syz.4.712'. [ 99.482046][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'. [ 99.540423][ T5895] netlink: 'syz.2.716': attribute type 10 has an invalid length. [ 99.688611][ T5866] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.707: iget: bad i_size value: 360287970189639690 [ 99.719929][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.733242][ T28] audit: type=1400 audit(1771451772.373:3244): avc: denied { read } for pid=5909 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 99.754368][ T5893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.763692][ T5893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.786123][ T5912] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 99.797044][ T5912] bond1 (unregistering): Released all slaves [ 99.894726][ T5926] FAULT_INJECTION: forcing a failure. [ 99.894726][ T5926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.911044][ T5926] CPU: 0 UID: 0 PID: 5926 Comm: syz.1.729 Tainted: G W syzkaller #0 PREEMPT(full) [ 99.911077][ T5926] Tainted: [W]=WARN [ 99.911085][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 99.911097][ T5926] Call Trace: [ 99.911102][ T5926] [ 99.911144][ T5926] __dump_stack+0x1d/0x30 [ 99.911172][ T5926] dump_stack_lvl+0x95/0xd0 [ 99.911196][ T5926] dump_stack+0x15/0x1b [ 99.911342][ T5926] should_fail_ex+0x263/0x280 [ 99.911362][ T5926] should_fail+0xb/0x20 [ 99.911393][ T5926] should_fail_usercopy+0x1a/0x20 [ 99.911417][ T5926] _copy_to_user+0x20/0xa0 [ 99.911442][ T5926] simple_read_from_buffer+0xb5/0x130 [ 99.911462][ T5926] proc_fail_nth_read+0x10e/0x150 [ 99.911494][ T5926] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.911523][ T5926] vfs_read+0x1ab/0x7f0 [ 99.911552][ T5926] ? __rcu_read_unlock+0x4e/0x70 [ 99.911579][ T5926] ? __fget_files+0x184/0x1c0 [ 99.911646][ T5926] ? mutex_lock+0x57/0x90 [ 99.911763][ T5926] ksys_read+0xdc/0x1a0 [ 99.911790][ T5926] __x64_sys_read+0x40/0x50 [ 99.911818][ T5926] x64_sys_call+0x2886/0x3020 [ 99.911860][ T5926] do_syscall_64+0x12c/0x370 [ 99.911891][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.911965][ T5926] RIP: 0033:0x7f6390b6cece [ 99.911981][ T5926] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.912009][ T5926] RSP: 002b:00007f638f606fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.912026][ T5926] RAX: ffffffffffffffda RBX: 00007f638f6076c0 RCX: 00007f6390b6cece [ 99.912039][ T5926] RDX: 000000000000000f RSI: 00007f638f6070a0 RDI: 0000000000000003 [ 99.912052][ T5926] RBP: 00007f638f607090 R08: 0000000000000000 R09: 0000000000000000 [ 99.912066][ T5926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.912080][ T5926] R13: 00007f6390e26038 R14: 00007f6390e25fa0 R15: 00007ffd39a725f8 [ 99.912114][ T5926] [ 100.198211][ T28] audit: type=1326 audit(1771451772.833:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.1.731" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6390bac629 code=0x0 [ 100.244498][ T5935] loop4: detected capacity change from 0 to 512 [ 100.252207][ T5935] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 100.260407][ T5935] EXT4-fs (loop4): orphan cleanup on readonly fs [ 100.266992][ T5935] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 100.281839][ T5935] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 100.288671][ T5935] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.733: inode has both inline data and extents flags [ 100.301957][ T5935] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 100.302242][ T5935] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.733: couldn't read orphan inode 16 (err -117) [ 100.318553][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 100.323429][ T5935] loop4: lost filesystem error report for type 5 error -117 [ 100.329627][ C1] EXT4-fs (loop4): initial error at time 1771451772: ext4_orphan_get:1391: inode 16 [ 100.338826][ T5935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.346274][ C1] EXT4-fs (loop4): last error at time 1771451772: ext4_orphan_get:1396 [ 100.371435][ T5928] syzkaller0: entered promiscuous mode [ 100.376948][ T5928] syzkaller0: entered allmulticast mode [ 100.736862][ T5935] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.733: iget: bad i_size value: 360287970189639690 [ 100.763459][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.948502][ T5979] loop4: detected capacity change from 0 to 512 [ 100.956933][ T5979] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.045771][ T5984] loop1: detected capacity change from 0 to 764 [ 101.247861][ T5992] syz.4.748 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 101.316620][ T5993] loop1: detected capacity change from 0 to 256 [ 101.352644][ T5993] FAT-fs (loop1): Directory bread(block 64) failed [ 101.359467][ T5993] FAT-fs (loop1): Directory bread(block 65) failed [ 101.366070][ T5993] FAT-fs (loop1): Directory bread(block 66) failed [ 101.372655][ T5993] FAT-fs (loop1): Directory bread(block 67) failed [ 101.379271][ T5993] FAT-fs (loop1): Directory bread(block 68) failed [ 101.385876][ T5993] FAT-fs (loop1): Directory bread(block 69) failed [ 101.392623][ T5993] FAT-fs (loop1): Directory bread(block 70) failed [ 101.399247][ T5993] FAT-fs (loop1): Directory bread(block 71) failed [ 101.405820][ T5993] FAT-fs (loop1): Directory bread(block 72) failed [ 101.412446][ T5993] FAT-fs (loop1): Directory bread(block 73) failed [ 102.219583][ T6003] __nla_validate_parse: 9 callbacks suppressed [ 102.219597][ T6003] netlink: 176 bytes leftover after parsing attributes in process `syz.4.755'. [ 102.364933][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.755'. [ 102.631287][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.757'. [ 102.689770][ T2456] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.698827][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.757'. [ 102.726843][ T2456] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.758173][ T2456] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.812546][ T2456] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.858785][ T6011] FAULT_INJECTION: forcing a failure. [ 102.858785][ T6011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.906610][ T6011] CPU: 1 UID: 0 PID: 6011 Comm: syz.0.758 Tainted: G W syzkaller #0 PREEMPT(full) [ 102.906642][ T6011] Tainted: [W]=WARN [ 102.906648][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.906715][ T6011] Call Trace: [ 102.906721][ T6011] [ 102.906729][ T6011] __dump_stack+0x1d/0x30 [ 102.906758][ T6011] dump_stack_lvl+0x95/0xd0 [ 102.906781][ T6011] dump_stack+0x15/0x1b [ 102.906875][ T6011] should_fail_ex+0x263/0x280 [ 102.906897][ T6011] should_fail+0xb/0x20 [ 102.906917][ T6011] should_fail_usercopy+0x1a/0x20 [ 102.906942][ T6011] _copy_to_user+0x20/0xa0 [ 102.906993][ T6011] simple_read_from_buffer+0xb5/0x130 [ 102.907016][ T6011] proc_fail_nth_read+0x10e/0x150 [ 102.907124][ T6011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.907151][ T6011] vfs_read+0x1ab/0x7f0 [ 102.907177][ T6011] ? __rcu_read_unlock+0x4e/0x70 [ 102.907273][ T6011] ? __fget_files+0x184/0x1c0 [ 102.907293][ T6011] ? mutex_lock+0x57/0x90 [ 102.907319][ T6011] ksys_read+0xdc/0x1a0 [ 102.907392][ T6011] __x64_sys_read+0x40/0x50 [ 102.907433][ T6011] x64_sys_call+0x2886/0x3020 [ 102.907460][ T6011] do_syscall_64+0x12c/0x370 [ 102.907584][ T6011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.907604][ T6011] RIP: 0033:0x7f8a260acece [ 102.907620][ T6011] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.907640][ T6011] RSP: 002b:00007f8a24b46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.907661][ T6011] RAX: ffffffffffffffda RBX: 00007f8a24b476c0 RCX: 00007f8a260acece [ 102.907698][ T6011] RDX: 000000000000000f RSI: 00007f8a24b470a0 RDI: 0000000000000004 [ 102.907709][ T6011] RBP: 00007f8a24b47090 R08: 0000000000000000 R09: 0000000000000000 [ 102.907721][ T6011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.907732][ T6011] R13: 00007f8a26366038 R14: 00007f8a26365fa0 R15: 00007ffebcbe9178 [ 102.907749][ T6011] [ 103.208413][ T6013] loop0: detected capacity change from 0 to 764 [ 103.232489][ T6021] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.251536][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.761'. [ 103.400167][ T6031] lo speed is unknown, defaulting to 1000 [ 103.410145][ T6035] ipvlan2: entered promiscuous mode [ 103.437398][ T6035] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 103.474161][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 103.474174][ T28] audit: type=1400 audit(1771451776.113:3248): avc: denied { accept } for pid=6036 comm="syz.0.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 103.500216][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 103.523991][ T6042] set_capacity_and_notify: 1 callbacks suppressed [ 103.524044][ T6042] loop0: detected capacity change from 0 to 128 [ 103.538935][ T6042] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.560577][ T6042] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.573935][ T28] audit: type=1400 audit(1771451776.203:3249): avc: denied { map } for pid=6030 comm="syz.4.767" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.692878][ T6042] netlink: 'syz.0.771': attribute type 10 has an invalid length. [ 103.700884][ T6042] hsr0: entered promiscuous mode [ 103.737749][ T6042] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 103.748341][ T6042] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 103.761344][ T6042] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 104.161551][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.783'. [ 104.615404][ T6055] loop0: detected capacity change from 0 to 1024 [ 104.622986][ T6055] EXT4-fs: inline encryption not supported [ 104.712560][ T6055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.115685][ T6062] netlink: 176 bytes leftover after parsing attributes in process `syz.2.775'. [ 105.124726][ T28] audit: type=1400 audit(1771451777.753:3250): avc: denied { execute } for pid=6059 comm="syz.1.774" name="file0" dev="tmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.150734][ T6061] loop1: detected capacity change from 0 to 1024 [ 105.179358][ T6061] EXT4-fs: Ignoring removed oldalloc option [ 105.186685][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'. [ 105.206159][ T6061] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.238668][ T28] audit: type=1400 audit(1771451777.753:3251): avc: denied { execute_no_trans } for pid=6059 comm="syz.1.774" path="/137/file0" dev="tmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.265869][ T6061] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 105.326772][ T28] audit: type=1400 audit(1771451777.823:3252): avc: denied { mounton } for pid=6059 comm="syz.1.774" path="/137/file0" dev="tmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.359301][ T6061] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.774: bad orphan inode 11 [ 105.388696][ T6061] loop1: lost filesystem error report for type 5 error -117 [ 105.398537][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 105.412280][ C0] EXT4-fs (loop1): initial error at time 1771451778: ext4_orphan_get:1417 [ 105.420782][ C0] EXT4-fs (loop1): last error at time 1771451778: ext4_orphan_get:1417 [ 105.430166][ T6061] ext4_test_bit(bit=10, block=4) = 1 [ 105.435459][ T6061] is_bad_inode(inode)=0 [ 105.450622][ T6061] NEXT_ORPHAN(inode)=3254779904 [ 105.470092][ T6061] max_ino=32 [ 105.479105][ T6061] i_nlink=0 [ 105.486423][ T6061] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 2: comm syz.1.774: lblock 2 mapped to illegal pblock 2 (length 1) [ 105.508976][ T6061] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 105.509076][ T6061] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 105.526320][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 105.526336][ C0] EXT4-fs (loop1): initial error at time 1771451778: ext4_orphan_get:1417 [ 105.526354][ C0] EXT4-fs (loop1): last error at time 1771451778: ext4_map_blocks:776: inode 3: block 2 [ 105.551738][ T6065] netlink: 'syz.2.776': attribute type 10 has an invalid length. [ 105.683795][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.779'. [ 105.701466][ T6061] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 48: comm syz.1.774: lblock 0 mapped to illegal pblock 48 (length 1) [ 105.723210][ T6076] loop4: detected capacity change from 0 to 512 [ 105.763248][ T6061] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 105.763417][ T6061] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 105.791742][ T6076] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 105.812013][ T6076] EXT4-fs (loop4): orphan cleanup on readonly fs [ 105.838862][ T6076] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 105.858662][ T6061] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.774: Failed to acquire dquot type 0 [ 105.872448][ T6076] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 105.881962][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.887251][ T6061] loop1: lost filesystem error report for type 5 error -117 [ 105.896710][ T6076] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 105.910936][ T6061] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 105.928584][ T6061] loop1: lost filesystem error report for type 5 error -117 [ 105.928831][ T6061] EXT4-fs error (device loop1): ext4_evict_inode:255: inode #11: comm syz.1.774: mark_inode_dirty error [ 105.947537][ T6076] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.780: inode has both inline data and extents flags [ 105.963245][ T6061] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 105.963374][ T6061] EXT4-fs warning (device loop1): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 105.972769][ T6076] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 105.983448][ T6061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.004971][ T6076] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.780: couldn't read orphan inode 16 (err -117) [ 106.005908][ T6061] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.016765][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 106.025946][ T6061] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz.1.774: Invalid inode table block 1 in block_group 0 [ 106.032119][ C0] EXT4-fs (loop4): initial error at time 1771451778: ext4_orphan_get:1391: inode 16 [ 106.032146][ C0] EXT4-fs (loop4): last error at time 1771451778: ext4_orphan_get:1391: inode 16 [ 106.033341][ T6076] loop4: lost filesystem error report for type 5 error -117 [ 106.066157][ T6061] loop1: lost filesystem error report for type 5 error -117 [ 106.077291][ T6076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.085067][ T6080] loop0: detected capacity change from 0 to 512 [ 106.107195][ T6061] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 106.127416][ T6061] loop1: lost filesystem error report for type 5 error -117 [ 106.127547][ T6061] EXT4-fs error (device loop1): ext4_quota_off:7287: inode #3: comm syz.1.774: mark_inode_dirty error [ 106.167810][ T6080] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 106.201181][ T6080] EXT4-fs (loop0): orphan cleanup on readonly fs [ 106.213658][ T6061] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 106.214429][ T6072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=6072 comm=syz.2.779 [ 106.242270][ T6080] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 106.281849][ T6080] EXT4-fs warning (device loop0): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 106.298825][ T6080] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 106.330132][ T6080] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #16: comm syz.0.781: inode has both inline data and extents flags [ 106.343369][ T6080] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 106.343596][ T6080] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.781: couldn't read orphan inode 16 (err -117) [ 106.352762][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 106.352793][ C0] EXT4-fs (loop0): initial error at time 1771451778: ext4_orphan_get:1391: inode 16 [ 106.352841][ C0] EXT4-fs (loop0): last error at time 1771451778: ext4_orphan_get:1391: inode 16 [ 106.398029][ T6080] loop0: lost filesystem error report for type 5 error -117 [ 106.398700][ T6080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.491308][ T28] audit: type=1326 audit(1771451779.133:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.3.786" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1e125c629 code=0x0 [ 106.784265][ T6107] loop1: detected capacity change from 0 to 512 [ 106.799105][ T6107] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 106.818407][ T6107] EXT4-fs (loop1): 1 truncate cleaned up [ 106.833756][ T6107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.839165][ T6080] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.781: iget: bad i_size value: 360287970189639690 [ 106.879322][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.882467][ T6076] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.780: iget: bad i_size value: 360287970189639690 [ 106.927159][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.031917][ T6116] loop4: detected capacity change from 0 to 2048 [ 107.053212][ T6116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.088468][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.167022][ T6131] loop0: detected capacity change from 0 to 8192 [ 107.314217][ T6145] __nla_validate_parse: 4 callbacks suppressed [ 107.314241][ T6145] netlink: 16 bytes leftover after parsing attributes in process `syz.3.807'. [ 107.323043][ T6143] loop0: detected capacity change from 0 to 512 [ 107.353061][ T6143] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 107.388296][ T6153] loop0: detected capacity change from 0 to 2048 [ 107.421166][ T6153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.461463][ T3308] ================================================================== [ 107.469564][ T3308] BUG: KCSAN: data-race in generic_fillattr / touch_atime [ 107.476685][ T3308] [ 107.479003][ T3308] write to 0xffff88811cc880f0 of 4 bytes by task 3883 on cpu 1: [ 107.486625][ T3308] touch_atime+0x1d7/0x330 [ 107.491050][ T3308] do_readlinkat+0x137/0x2f0 [ 107.491831][ T6159] netlink: 5 bytes leftover after parsing attributes in process `syz.2.813'. [ 107.495644][ T3308] __x64_sys_readlink+0x47/0x60 [ 107.495670][ T3308] x64_sys_call+0x2b51/0x3020 [ 107.513890][ T3308] do_syscall_64+0x12c/0x370 [ 107.514050][ T6159] netlink: 32 bytes leftover after parsing attributes in process `syz.2.813'. [ 107.518486][ T3308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.518511][ T3308] [ 107.518517][ T3308] read to 0xffff88811cc880f0 of 4 bytes by task 3308 on cpu 0: [ 107.518533][ T3308] generic_fillattr+0x172/0x340 [ 107.518554][ T3308] shmem_getattr+0x181/0x200 [ 107.518578][ T3308] vfs_getattr_nosec+0x146/0x1e0 [ 107.557392][ T3308] vfs_getattr+0x48/0x60 [ 107.561625][ T3308] vfs_statx_path+0x28/0x140 [ 107.566206][ T3308] vfs_statx+0xc4/0x170 [ 107.570371][ T3308] vfs_fstatat+0x118/0x170 [ 107.574775][ T3308] __se_sys_newfstatat+0x55/0x3e0 [ 107.579791][ T3308] __x64_sys_newfstatat+0x55/0x70 [ 107.584818][ T3308] x64_sys_call+0x2c64/0x3020 [ 107.589492][ T3308] do_syscall_64+0x12c/0x370 [ 107.594079][ T3308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.599960][ T3308] [ 107.602268][ T3308] value changed: 0x05562710 -> 0x062d5d00 [ 107.607966][ T3308] [ 107.610276][ T3308] Reported by Kernel Concurrency Sanitizer on: [ 107.616413][ T3308] CPU: 0 UID: 0 PID: 3308 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 107.626814][ T3308] Tainted: [W]=WARN [ 107.630599][ T3308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 107.640642][ T3308] ================================================================== [ 107.662282][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.682196][ T6155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.685352][ T6159] netlink: 136 bytes leftover after parsing attributes in process `syz.2.813'. [ 107.724935][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.759194][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.850769][ T6164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.810'.