last executing test programs: 20.034222214s ago: executing program 2 (id=399): r0 = socket$can_j1939(0x1d, 0x2, 0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) 20.000981967s ago: executing program 2 (id=400): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}}, 0x0) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0), 0x3, 0x56d, &(0x7f0000000c00)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f0000000000)="d15c63a71f5830d64288afcf17daed294ace45c496318fe3c46811760cd6a13359d58089d476fc09d94de32cd46f19b02faecc5e987565a20bbf906d9d0c1c5c22c3b78d627d67f1ea5e4c81539303160119320d26b6f1debe08ad64743de8c6ccd30b380d5d2d639b50e9bc9550e478f3966e0e2603219c8c6c062051af", &(0x7f0000000080)=""/164, &(0x7f0000000140)="16a7cdb4e385747979b86f594a27f1803019d33742d7b027c6c1b5338b8da80fe523bf5fb1681da5ab8006b525c4cfcb148c9798168b0cf7f99661c9e55646482b919b5685cac943cdd4eff43f19bda3a4e331f53e46d08ffc2da26c9d922c7b28e6e635ecdb601e08d50ba9bb79be4bc71132020b203c2864765a874e26fecc600d08f990d2f2847e9ac5a5246ea5d3fb783ff205a29eb0ea721cd5d2a2a5adb3f3e111d4a7a08b1e6155b25736dadfaeb9be7352a071f57bf9aeb2ca685d71aee1ba6c", &(0x7f0000000240)="7671c4fbbb053eb0b08734302ef1bf4e0e1a50b751fd76fe6c2c1bec0ea586024dfd87a9f7819be07ca46e2fb2d2762b35bcda868a7b1ebeb8a8a01dea279daa1cb6ae345dfc355f78194f9f2eabb1f1afbbe8f1469e6998680a898f96d22888a42550086bdd6c439254a49eb6", 0xfffff800, r5, 0x4}, 0x38) 18.745525035s ago: executing program 2 (id=406): sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x4e0, 0xffffffff, 0x0, 0x308, 0x308, 0xffffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x5, "02d7", 0x1}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x1e0, 0x210, 0x0, {}, [@common=@rt={{0x138}, {0x7, [0x7, 0xfff], 0x2, 0x2, 0x3, [@remote, @remote, @rand_addr=' \x01\x00', @loopback, @private0, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @empty, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @local], 0xd}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x6, 0x5}, 0x7, 0xc}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote, [0xff, 0xfffffefe, 0xff, 0xffffffff], 0x4e23, 0x4e23, 0x4e22, 0x4e21, 0x2, 0x7, 0x1, 0x400}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 17.847571251s ago: executing program 2 (id=410): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x2208046, &(0x7f0000000b80)=ANY=[], 0x1, 0x2bd, &(0x7f0000000a00)="$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") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r5, &(0x7f00000004c0)="d7", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e22, 0x6, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f00000001c0)=0xff, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38}, 0x20) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f00000003c0)={@val={0x0, 0x86dd}, @void, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x64, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "11d288ef4d97cf1e0ea9f498e1e026092d17667b95abdb56013dbc1cc365344a"}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xd, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x90) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xfa, &(0x7f0000000580)=""/250, 0x40f00}, 0x94) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/zoneinfo\x00', 0x0, 0x0) lseek(r8, 0x80000001, 0x0) pwrite64(r7, &(0x7f0000000040)="10", 0x1, 0x4) 17.568924991s ago: executing program 2 (id=415): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, 0x0) 16.205161326s ago: executing program 2 (id=420): syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Ls1cYB+CTwEsoVCIiONhBMLg0KsRBh2SwEtMsRsSKFGfBQQfBwUFSorMf/4DiF4iL2NlRjCAKcZKM4lxQXDKltD6FtnZpiyl9ua4lnHPf59w5/J7A/1o8/NRsNmMhhGbi75/+7jQ/XuyZHJ2aDiEW5kII+a++/LUSizp+u/U8WpeidTGRqe3fjL2ctt/23ldTh/GofhEP4YcQwuLjUfLfvo3P31nuKrm+sVzYXM0tPBTWnobm+/PdW/mlneGDbHmmKzsbfVgX8dbMT9VGju+apefdtoFP1Vojcx31pWMfM5//1p/z3+us1CuNib6TlcF0R/2yvB3l/ip/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgg53lrpLrG8uFzdXcwkNh7Wlovj/fvZVf2hk+yJZnurKz8be+i3hr5qdqI8d3zdLzbtvAp2qtkbmO+tKxd0e/+fFj/hIt9HX4Y/57nZV6pTHRd7IymO6oX5a3o9xf3+cPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCX8uPFnsnRqekQYmEuhPDt/fe9v+w3E2/1WNR3Hv2Wov1iIlPbvxl7OW2/7b2vpg4nEyEkfnfv4uNR8otWPoR/5OcAAAD//2wlhu4=") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0xcdd1dff97325e36a, &(0x7f00000003c0)={[{@block_validity}, {@nodiscard}, {@sysvgroups}, {@barrier_val={'barrier', 0x3d, 0x40000000071b3}}, {@grpjquota}, {@orlov}, {@bsdgroups}, {@noauto_da_alloc}, {@usrjquota_path={'usrjquota', 0x3d, './file0/file0'}}]}, 0x7, 0x580, &(0x7f0000001b40)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQk5e6JNNQsumW7KY0sdD2YC9epAgiFsQ/wLvH4j/gX1HQQpES9OBlZTaz7TbJJpt02127nw9M+97M7L558+Y9vm9mwgYwsMayfwoRr0bEt0nEwZZtw5FvHFvdb+XhtelsSaJe/+yvJJJ8XXP/JP9/f555JSJ++zrieGF9udWl5blSuZwu5Pnx2vzl8erS8omL86XZdDa9NDk1deqdqcn333u3a3V989w/P3x696NT3xxd+f6X+4duJ3EmDuTbWuvxFG60ZsZiLD8nI3FmzY4TXSisnyS9PgB2ZCjv5yORjQEHYyjv9cCL73pE1IEBlej/MKCacUBzbr9mHvzCT+sefLg6AVpf/+HVeyOxpzE32reSPDEzyk7MaBfKz8r49c87t7MltrgPcb0L5QE03bgZESeHh9ePf0k+/q1xoPPvPtm4eby5tWV06T4s0IG7Wfzz1kbxT+FR/BMbxD/7N+i7O7F1/y/c70IxbWXx3wcbxr+Phq7RoTz3UiPmG0kuXCynJyPi5Yg4FiO7s/xmz3NOrdyrt9vWGv9lS1Z+MxbMj+P+8O4nPzNTqpWeps6tHtyMeO1x/JvEuvF/TyPWXdv+2fk412EZR9I7r7fbtnX9W3U/Aq7/HPHGhu3/eOqTbP58crxxPYw3r4r1/r515Pd25W+v/t2Xtf++zes/mrQ+r61uv4yf9vybttu20+t/V/J5I70rX3e1VKstTETsSj5Zv37y8Web+eb+Wf2PHd18/Nvo+t8bEV92WP9bh2+13bUf2n9mW+2//cS9j7/6sV35nbX/243UsXxNJ+Nfpwf4NOcOAAAAAAAA+k2h8UpXUig+ShcKxeLq+x2HY1+hXKnWjl+oLF6aWX31azRGCs0n3Qdb3oeYyN+HbeYn1+SnIuJQRHw3tLeRL05XyjO9rjwAAAAAAAAAAAAAAAAAAAD0if1t/v4/88dQr48OeOb85DcMri37fzd+6QnoS5v0/y+e53EAz5/4HwaX/g+DS/+HwaX/w+DS/2Fw6f8wuPR/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KpzZ89mS33l4bXpLD9zZWlxrnLlxExanSvOL04XpysLl4uzlcpsOS1OV+a3+r5ypXJ5YjIWr47X0mptvLq0fH6+snipdv7ifGk2PZ+OPJdaAQAAAAAAAAAAAAAAAAAAwP9LdWl5rlQupwv9nNjb28M4HTv7+FD0/tRliWSrVj6dXww7KmK49xUc8EQ9eRbf3OOBCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa/BcAAP//7uAzCw==") 16.17789253s ago: executing program 32 (id=420): syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Ls1cYB+CTwEsoVCIiONhBMLg0KsRBh2SwEtMsRsSKFGfBQQfBwUFSorMf/4DiF4iL2NlRjCAKcZKM4lxQXDKltD6FtnZpiyl9ua4lnHPf59w5/J7A/1o8/NRsNmMhhGbi75/+7jQ/XuyZHJ2aDiEW5kII+a++/LUSizp+u/U8WpeidTGRqe3fjL2ctt/23ldTh/GofhEP4YcQwuLjUfLfvo3P31nuKrm+sVzYXM0tPBTWnobm+/PdW/mlneGDbHmmKzsbfVgX8dbMT9VGju+apefdtoFP1Vojcx31pWMfM5//1p/z3+us1CuNib6TlcF0R/2yvB3l/ip/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgg53lrpLrG8uFzdXcwkNh7Wlovj/fvZVf2hk+yJZnurKz8be+i3hr5qdqI8d3zdLzbtvAp2qtkbmO+tKxd0e/+fFj/hIt9HX4Y/57nZV6pTHRd7IymO6oX5a3o9xf3+cPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCX8uPFnsnRqekQYmEuhPDt/fe9v+w3E2/1WNR3Hv2Wov1iIlPbvxl7OW2/7b2vpg4nEyEkfnfv4uNR8otWPoR/5OcAAAD//2wlhu4=") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0xcdd1dff97325e36a, &(0x7f00000003c0)={[{@block_validity}, {@nodiscard}, {@sysvgroups}, {@barrier_val={'barrier', 0x3d, 0x40000000071b3}}, {@grpjquota}, {@orlov}, {@bsdgroups}, {@noauto_da_alloc}, {@usrjquota_path={'usrjquota', 0x3d, './file0/file0'}}]}, 0x7, 0x580, &(0x7f0000001b40)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQk5e6JNNQsumW7KY0sdD2YC9epAgiFsQ/wLvH4j/gX1HQQpES9OBlZTaz7TbJJpt02127nw9M+97M7L558+Y9vm9mwgYwsMayfwoRr0bEt0nEwZZtw5FvHFvdb+XhtelsSaJe/+yvJJJ8XXP/JP9/f555JSJ++zrieGF9udWl5blSuZwu5Pnx2vzl8erS8omL86XZdDa9NDk1deqdqcn333u3a3V989w/P3x696NT3xxd+f6X+4duJ3EmDuTbWuvxFG60ZsZiLD8nI3FmzY4TXSisnyS9PgB2ZCjv5yORjQEHYyjv9cCL73pE1IEBlej/MKCacUBzbr9mHvzCT+sefLg6AVpf/+HVeyOxpzE32reSPDEzyk7MaBfKz8r49c87t7MltrgPcb0L5QE03bgZESeHh9ePf0k+/q1xoPPvPtm4eby5tWV06T4s0IG7Wfzz1kbxT+FR/BMbxD/7N+i7O7F1/y/c70IxbWXx3wcbxr+Phq7RoTz3UiPmG0kuXCynJyPi5Yg4FiO7s/xmz3NOrdyrt9vWGv9lS1Z+MxbMj+P+8O4nPzNTqpWeps6tHtyMeO1x/JvEuvF/TyPWXdv+2fk412EZR9I7r7fbtnX9W3U/Aq7/HPHGhu3/eOqTbP58crxxPYw3r4r1/r515Pd25W+v/t2Xtf++zes/mrQ+r61uv4yf9vybttu20+t/V/J5I70rX3e1VKstTETsSj5Zv37y8Web+eb+Wf2PHd18/Nvo+t8bEV92WP9bh2+13bUf2n9mW+2//cS9j7/6sV35nbX/243UsXxNJ+Nfpwf4NOcOAAAAAAAA+k2h8UpXUig+ShcKxeLq+x2HY1+hXKnWjl+oLF6aWX31azRGCs0n3Qdb3oeYyN+HbeYn1+SnIuJQRHw3tLeRL05XyjO9rjwAAAAAAAAAAAAAAAAAAAD0if1t/v4/88dQr48OeOb85DcMri37fzd+6QnoS5v0/y+e53EAz5/4HwaX/g+DS/+HwaX/w+DS/2Fw6f8wuPR/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KpzZ89mS33l4bXpLD9zZWlxrnLlxExanSvOL04XpysLl4uzlcpsOS1OV+a3+r5ypXJ5YjIWr47X0mptvLq0fH6+snipdv7ifGk2PZ+OPJdaAQAAAAAAAAAAAAAAAAAAwP9LdWl5rlQupwv9nNjb28M4HTv7+FD0/tRliWSrVj6dXww7KmK49xUc8EQ9eRbf3OOBCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa/BcAAP//7uAzCw==") 8.107058814s ago: executing program 0 (id=481): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000bc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mmap(&(0x7f000026c000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 6.395488484s ago: executing program 0 (id=491): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adbaa402}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000c40)=""/200, 0xc8}, {0x0}], 0x2}, 0x7dcf}], 0x1, 0x120, 0x0) 5.348782817s ago: executing program 0 (id=499): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_io_uring_setup(0x1b68, &(0x7f0000000380)={0x0, 0x1040, 0x10, 0x1003, 0x101}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) r6 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) r7 = fsmount(r6, 0x0, 0x0) r8 = openat(r7, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r8, 0xfffffffffffffffe, 0x29) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x59, 0x0, 0xb7, 0x2, 0x0, 0x127}) (async) io_uring_enter(r3, 0x6d1c, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f00000000c0)={0x8000, r3, 0x6, {0x6, 0x3}, 0x9}, 0x1) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xb4, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4518d9923430f67f6a934064107f2fdcbf563294b66715c7"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b5ffbc103b236aa1b2742e390a7fdf406af0bef03b36285d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0xb4}, 0x1, 0x0, 0x0, 0x4080}, 0x40) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000008095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x33, &(0x7f0000001e00)=""/4076}, 0x94) 4.909764462s ago: executing program 3 (id=501): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x1, 0x0, 0x401, 0x8001, 0x401400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x60) 4.824796644s ago: executing program 3 (id=502): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$eJzs3cFrI1UcB/DfxrXdXe2mBxEUxIde9DK09R8wyC6IBaVuZfUgzNqphswmJRNWsoi7N/Hm37F49CaI4LkX79689eJxD4uRJm23ienBhTSWfD4Q3i/z8mXeJEz4XZJ3cPuHu63dKtvNe1F7N8XViKg9jliNWhy7dDTWhvVSnPYw3q7f/uO1jz/97IPG5uaNrZRuNm69s5FSuv76L19/8+Mbv/Ze+OSn6z8vx/7q5wd/bfy5//L+Kwd/3/qqWaVmldqdXsrTnU6nl98pi7TTrFpZSh+VRV4Vqdmuiu7Y/G7Z2dvrp7y9s3Jtr1tUVcrb/dQq+qnXSb1uP+Vf5s12yrIsrVyLxfIs17v9aGsrb8xgMZyj7ycPXB1/2u028sN7ePlfye1HM10YAPC/NNn/1+LK8Pic+v/jFuW/9/+XFr3/fxb6/0Vw2P8vHd2/4/T/AAAAAAAAAAAAAABwETweDOqDwaB+PE4+5r0+Zsvnv9hO/XDvSkT53b3te9ujcTTf2I1mlFHEWtTjScTgxKi++f7mjbU0tBordx+M8ofjc+P59ajH6vT8ekpp8CCl8fzzw3+0OMlvRD1emp7fGJ1/Ir8Ub715Kp9FPX7/IjpRxk4cZp/mv11P6b0PNyfyy8PXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAYsnRi6v79WXbW/Ch/sr/+WtTjyfT9+dem7s9/OV69PN9rBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBjVf9+Ky/Lonv+xcM4Y2pwZF4LO/8iYman+O3FOOt9VijOLub9zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn7+mm3/NeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPNU9e+38rIsujMs5n2NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF8k/AQAA//8A7ioD") open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mmap(&(0x7f000026c000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 4.209477031s ago: executing program 4 (id=504): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r2, {}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 4.108800019s ago: executing program 4 (id=505): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f", 0x8b}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) 3.960836647s ago: executing program 3 (id=506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.939427353s ago: executing program 3 (id=507): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000"], 0x184}}, 0x0) 3.316856878s ago: executing program 5 (id=508): io_setup(0x5, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20f42, 0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0xc, r1, &(0x7f0000000080)='E', 0x1, 0x8000}]) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000f2ff110800014000000000140003"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) mq_notify(r2, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/251}], 0x59) 3.303819275s ago: executing program 4 (id=509): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adbaa402}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000c40)=""/200, 0xc8}, {0x0}], 0x2}, 0x7dcf}], 0x1, 0x120, 0x0) 3.218471866s ago: executing program 5 (id=510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f00"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0xfdef) 3.14513251s ago: executing program 5 (id=511): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpiuJN4NDEejTdNvOrRePIPwIMHE0NCDBfA05jZnWm3291ttz8p+/kk232e2WfmeZ6ZeWaffZ7OBNCzhrI/ScT/IuJORDxVjy5MMFR/e3j/+sSj+9cnYjZNz/yT1NI9yOK5Yr2deWS4FFH6MmnaYN301WsXxqvVqSt5fHTm4mej01evvX7+4vi5qXNTl8ZOnTpx/NjJN8fe6L5SLfLL6vVg/xeXD+x79+zt9yfKxfKB/L2xHm2VuyvGUIfPXuluU4+9XQ3hZPF+urGhhWHZBvLTupK1/+vVw2c3u0DAhknTNO1v//Fs2uzmoiXAlpXEZpcA2BzFF332+7d4bVDX47Fw73T9B1BW74f5q/5JOUp5mkrT79u1NBQRH8/++032ik7jEH+uUwEAgJ7zy+miJ9jc/yvF3oZ0/8/nUAYj4umI2B0Rz0TEnoh4NqKW9rmIeL45gyQi7ZD/nqb4fP4/5rMIpburrmQHWf/vrXxua2H/r+j9xWBfHtsVUXSYp47m+2Q4Kv2fnK9OHWuz/W1L5N/Y/8teWf5FXzAvx91y0wDd5PjM+Mpqu9i9mxH7y831T8rZgSumcZKI2BcR+7vY7mBD+Pxr3x2Yi1Ty96/rb0vXvyZtMaXX9XxcK+m3Ea/Wj/9sNB7/ZD7HpPP85OhAVKeOjmZnwdGWefz2+60P2uW/ZP1/+qt5lXdO/nxm1fUuZMd/R8P5H8X87fwk6mASkczN105HpH3d5XHrj/YrrPT835Z8VAsX7evz8ZmZK8citiXvLV4+Nr9uES/SZ/UfPtK6/e/O18n2xAsRkZ3EL0bESxFxMC/7oYg4HBFHOtT/17df/nTl9V9fWf0nW17/Fhz/+fn6ZQaKlbMlfRcO3XnU5uKxvON/ohYazpe0vv4lCy4Ryy3p6vYeAAAAbA2lqP3vf2lkLlwqjYzUx4D2xI5S9fL0zMGIuDRZv0dgMCqlYqSrPh5cSYrxz8GG+FhT/Hg+bvxV3/ZafGTicnVysysPPW5nrc0ni9p/5u8ux3mBLWgN5tGALWqp9r/39gYVBNhwvv+hdzW0/9k2SWb9pww8mXz/Q+9q1f5vxPcd711wzYCtL9WWoadp/9C7yvHhXLh223PLu22BJ5Hvf+hJ3d7Xv5xA8biGaxfS/tZpBqLFEwMG1rgYeWB7i7w2JZD1rNZwg5WIWF7i7SvJougCtn/CQ6m7DfbH4o/6otNaSRfPcSgC2V5ZMvG5vWt+8hfPRFnr0+aH+XZaaTgW5aWOzuoDG3oZAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWDf/BQAA//8mic8a") symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'none\x00', 0x0, 0x10001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x8, 0x821}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) times(0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) preadv(r7, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x1006c, 0x0) 2.395271129s ago: executing program 4 (id=512): unshare(0x2a060400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000001080)={{0x1d, @multicast2, 0x2, 0x0, 'fo\x00', 0x0, 0x5, 0x2000000}, {@broadcast, 0x2, 0x2000, 0x7ffffff, 0x0, 0x20100}}, 0x44) 2.394226058s ago: executing program 4 (id=513): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x378, 0x0) r2 = epoll_create1(0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0xb0000000}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) 2.377385165s ago: executing program 0 (id=514): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffec1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x505c1, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x4, 0x7, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x12f0, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1350) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001480)=ANY=[@ANYBLOB="6d0000e90f005fba0000000000000000000000006dc670795c17d719f03508ab5dc34ba81a1045a2a4a4b9812eaf8bbcad6b28b10b1dd506e5d68488aca8286824f5df14e04c42b7b82ca96a645150fafcfcf6ca22d66d8fa7050f20df4d650a6769dbe51b065f32c5f1851612f6ceab4fd86bc9c7afb1351ed7e572aae0d3450f8c6900"/144, @ANYRES32=0x0, @ANYBLOB="80000200c988000008001b0000000000"], 0x28}}, 0x800) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 2.377043225s ago: executing program 3 (id=515): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000bc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f000026c000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 1.612471279s ago: executing program 5 (id=518): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}}, 0x44004) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x20, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[], 0xe4}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b930ae1cbb246016ace2049f1db715c5192a29b256ef1f8d75b57e1104b3d2259c0"], 0x34}}, 0x0) 1.591521734s ago: executing program 1 (id=519): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f", 0x8b}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) 691.08249ms ago: executing program 1 (id=520): clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0xff64cd1d00000000, 0x0, 0x0, 0x2, 0x41, 0x2, 0x9797, 0x6, 0x0, 0x8, 0xd, 0x6, 0x2, 0x7f, 0x10000, 0x1ff, 0xffffffffffffffff, 0x0, 0x100, 0x3ff, 0x7, 0x2000000000, 0x4, 0xe6, 0x3}) r0 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESDEC=0x0, @ANYBLOB="43da2e2e"], 0x48) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r1, 0x0, 0x0, 0x4000, &(0x7f0000000100)={0x23, 0x2, 0xbb, 0x5}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 571.011994ms ago: executing program 1 (id=521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f00"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0xfdef) 559.091512ms ago: executing program 3 (id=522): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adbaa402}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000b00)={@val={0xa}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x8, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x4f19, 0x4e20, 0x8}}}}}}}, 0x42) recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000c40)=""/200, 0xc8}, {0x0}], 0x2}, 0x7dcf}], 0x1, 0x120, 0x0) 332.558472ms ago: executing program 1 (id=523): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13ed", 0xe}], 0x1}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1, 0x0, 0x0, 0x1000000}, 0x123) shutdown(r0, 0x1) 318.121429ms ago: executing program 0 (id=524): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13ed", 0xe}], 0x1}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) fsmount(0xffffffffffffffff, 0x644d50b656e945c5, 0x0) shutdown(r0, 0x1) 229.28346ms ago: executing program 5 (id=525): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000"], 0x184}}, 0x0) 125.324387ms ago: executing program 0 (id=526): socket$kcm(0x2a, 0x2, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES16=r4], 0x14) 125.132827ms ago: executing program 1 (id=527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 124.594507ms ago: executing program 1 (id=528): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x3, 0x0) getdents64(r3, 0x0, 0x22) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, 0xa, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) timerfd_create(0x4, 0x800) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) file_getattr(r4, 0x0, &(0x7f0000000040), 0x64, 0x1000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0xf6, 0x2040) ioctl$BLKDISCARD(r7, 0x1277, &(0x7f00000000c0)=0x1ff) shutdown(r1, 0x1) 92.57957ms ago: executing program 5 (id=529): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") socket$key(0xf, 0x3, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x4400, &(0x7f00000005c0)=ANY=[], 0xfc, 0x2e2, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r3, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendfile(r3, r0, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x140}, {0xffffffffffffffff, 0x50f0}, {0xffffffffffffffff, 0x400}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x2]}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x80047210, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) linkat(r4, &(0x7f00000000c0)='./bus\x00', r0, 0x0, 0x400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000180), 0x0, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xac, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) 0s ago: executing program 4 (id=530): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f", 0x8b}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) kernel console output (not intermixed with test programs): p3 p4 [ 46.732921][ T3900] loop4: p3 size 251658240 extends beyond EOD, truncated [ 46.740668][ T3900] loop4: p4 size 262144 extends beyond EOD, truncated [ 46.751066][ T3969] loop4: p1 p2 p3 p4 [ 46.757396][ T3969] loop4: p3 size 251658240 extends beyond EOD, truncated [ 46.765394][ T3969] loop4: p4 size 262144 extends beyond EOD, truncated [ 46.855884][ T3968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.170'. [ 47.064281][ T3973] syzkaller0: entered promiscuous mode [ 47.083115][ T3975] xt_hashlimit: size too large, truncated to 1048576 [ 47.089609][ T3973] syzkaller0: entered allmulticast mode [ 47.416212][ T3982] loop1: detected capacity change from 0 to 1764 [ 47.476740][ T3982] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 47.540596][ T3982] isofs_fill_super: get root inode failed [ 47.822893][ T3990] loop4: detected capacity change from 0 to 512 [ 47.842191][ T3990] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.674296][ T3994] xt_hashlimit: size too large, truncated to 1048576 [ 48.860094][ T4001] syzkaller0: entered promiscuous mode [ 48.865757][ T4001] syzkaller0: entered allmulticast mode [ 48.889859][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.488634][ T4019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'. [ 49.490957][ T4017] syzkaller0: entered promiscuous mode [ 49.503029][ T4017] syzkaller0: entered allmulticast mode [ 49.739413][ T4040] syzkaller1: entered promiscuous mode [ 49.745106][ T4040] syzkaller1: entered allmulticast mode [ 49.761458][ T4034] netlink: 44 bytes leftover after parsing attributes in process `syz.3.190'. [ 49.817329][ T4038] loop3: detected capacity change from 0 to 512 [ 49.824144][ T4038] EXT4-fs: Ignoring removed nobh option [ 49.832620][ T4042] syzkaller0: entered promiscuous mode [ 49.844030][ T4034] netlink: 43 bytes leftover after parsing attributes in process `syz.3.190'. [ 49.844543][ T4037] loop0: detected capacity change from 0 to 512 [ 49.852468][ T4042] syzkaller0: entered allmulticast mode [ 49.897413][ T4037] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.901575][ T4034] netlink: 'syz.3.190': attribute type 5 has an invalid length. [ 49.909704][ T4038] EXT4-fs (loop3): orphan cleanup on readonly fs [ 49.910077][ T4038] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.190: EA inode hash validation failed [ 49.910244][ T4038] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.190: corrupted inode contents [ 49.910316][ T4038] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.927132][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 49.970047][ C0] EXT4-fs (loop3): initial error at time 1772260993: ext4_do_update_inode:5569: inode 15 [ 49.970101][ C0] EXT4-fs (loop3): last error at time 1772260993: ext4_do_update_inode:5569: inode 15 [ 49.983511][ T4038] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.190: mark_inode_dirty error [ 50.003243][ T4045] syzkaller0: entered promiscuous mode [ 50.003275][ T4045] syzkaller0: entered allmulticast mode [ 50.006404][ T4045] tipc: Enabling of bearer rejected, failed to enable media [ 50.037463][ T4034] netlink: 43 bytes leftover after parsing attributes in process `syz.3.190'. [ 50.048170][ T4038] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.048329][ T4038] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.190: corrupted inode contents [ 50.048357][ T4038] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.062991][ T4038] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.190: mark_inode_dirty error [ 50.063085][ T4038] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.063229][ T4038] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.190: mark inode dirty (error -117) [ 50.063332][ T4038] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.063447][ T4038] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 50.063541][ T4038] EXT4-fs (loop3): 1 orphan inode deleted [ 50.064056][ T4038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 50.276453][ T4059] loop4: detected capacity change from 0 to 1764 [ 50.282551][ T4059] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 50.282626][ T4059] isofs_fill_super: get root inode failed [ 50.728195][ T4061] syzkaller0: entered promiscuous mode [ 50.728323][ T4061] syzkaller0: entered allmulticast mode [ 50.768088][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.263327][ T4076] syzkaller0: entered promiscuous mode [ 51.263347][ T4076] syzkaller0: entered allmulticast mode [ 52.098507][ T4091] syzkaller0: entered promiscuous mode [ 52.104030][ T4091] syzkaller0: entered allmulticast mode [ 52.360825][ T4106] loop2: detected capacity change from 0 to 512 [ 52.375153][ T4106] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.198201][ T4117] syzkaller0: entered promiscuous mode [ 53.205934][ T4117] syzkaller0: entered allmulticast mode [ 53.266707][ T4120] syzkaller0: entered promiscuous mode [ 53.280922][ T4120] syzkaller0: entered allmulticast mode [ 53.309558][ T4120] 0: reclassify loop, rule prio 0, protocol 800 [ 54.014105][ T4130] loop3: detected capacity change from 0 to 512 [ 54.029869][ T4130] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.279606][ T4132] loop4: detected capacity change from 0 to 1764 [ 55.753726][ T4147] loop2: detected capacity change from 0 to 512 [ 55.767651][ T4147] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.611116][ T4132] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 56.641622][ T4157] syzkaller0: entered promiscuous mode [ 56.664169][ T4157] syzkaller0: entered allmulticast mode [ 56.682554][ T4132] isofs_fill_super: get root inode failed [ 56.749226][ T4162] IPv6: NLM_F_CREATE should be specified when creating new route [ 56.771418][ T4162] netlink: 44 bytes leftover after parsing attributes in process `syz.1.226'. [ 56.800732][ T4162] netlink: 43 bytes leftover after parsing attributes in process `syz.1.226'. [ 56.835932][ T4165] loop1: detected capacity change from 0 to 512 [ 56.855415][ T4162] netlink: 'syz.1.226': attribute type 5 has an invalid length. [ 56.880574][ T4165] EXT4-fs: Ignoring removed nobh option [ 56.897530][ T4162] netlink: 43 bytes leftover after parsing attributes in process `syz.1.226'. [ 56.932133][ T4165] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.946620][ T4132] loop4: detected capacity change from 0 to 8192 [ 56.955841][ T4165] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.226: EA inode hash validation failed [ 56.982008][ T4165] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.226: corrupted inode contents [ 57.020430][ T4165] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.020656][ T4165] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.226: mark_inode_dirty error [ 57.029958][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 57.029975][ C0] EXT4-fs (loop1): initial error at time 1772261000: ext4_do_update_inode:5569: inode 15 [ 57.030002][ C0] EXT4-fs (loop1): last error at time 1772261000: ext4_do_update_inode:5569: inode 15 [ 57.142165][ T4165] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.142487][ T4165] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.226: corrupted inode contents [ 57.209854][ T4165] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.210054][ T4165] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.226: mark_inode_dirty error [ 57.254293][ T4169] syzkaller0: entered promiscuous mode [ 57.267891][ T4169] syzkaller0: entered allmulticast mode [ 57.298799][ T3900] loop4: p1 p2 p3 p4 [ 57.305530][ T4169] 0: reclassify loop, rule prio 0, protocol 800 [ 57.331776][ T3900] loop4: p3 size 251658240 extends beyond EOD, truncated [ 57.349337][ T4165] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.349559][ T4165] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3002: inode #15: comm syz.1.226: mark inode dirty (error -117) [ 57.379080][ T3900] loop4: p4 size 262144 extends beyond EOD, truncated [ 57.387044][ T4165] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.396247][ T4165] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117) [ 57.415373][ T4165] EXT4-fs (loop1): 1 orphan inode deleted [ 57.421794][ T4165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 57.460265][ T28] audit: type=1400 audit(1772261001.337:198): avc: denied { create } for pid=4171 comm="syz.2.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 57.460607][ T4132] loop4: p1 p2 p3 p4 [ 57.490102][ T4132] loop4: p3 size 251658240 extends beyond EOD, truncated [ 57.511886][ T4132] loop4: p4 size 262144 extends beyond EOD, truncated [ 57.815763][ T4185] netlink: 44 bytes leftover after parsing attributes in process `syz.0.231'. [ 57.837368][ T4185] netlink: 43 bytes leftover after parsing attributes in process `syz.0.231'. [ 57.848557][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.860015][ T4185] netlink: 'syz.0.231': attribute type 5 has an invalid length. [ 57.879085][ T4188] loop0: detected capacity change from 0 to 512 [ 57.885741][ T4185] netlink: 43 bytes leftover after parsing attributes in process `syz.0.231'. [ 57.928762][ T4188] EXT4-fs: Ignoring removed nobh option [ 57.944584][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 57.956875][ T3900] udevd[3900]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 57.958291][ T3920] udevd[3920]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 57.978259][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 57.999654][ T4188] EXT4-fs (loop0): orphan cleanup on readonly fs [ 58.038635][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 58.044982][ T4195] netlink: 44 bytes leftover after parsing attributes in process `syz.2.235'. [ 58.049904][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 58.062005][ T3900] udevd[3900]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 58.076683][ T3920] udevd[3920]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 58.088851][ T4195] netlink: 43 bytes leftover after parsing attributes in process `syz.2.235'. [ 58.088870][ T4195] netlink: 'syz.2.235': attribute type 5 has an invalid length. [ 58.088883][ T4195] netlink: 43 bytes leftover after parsing attributes in process `syz.2.235'. [ 58.101474][ T4188] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.231: EA inode hash validation failed [ 58.101624][ T4188] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.231: corrupted inode contents [ 58.101650][ T4188] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.105686][ T4188] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.231: mark_inode_dirty error [ 58.105717][ T4188] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.107131][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 58.107151][ C0] EXT4-fs (loop0): initial error at time 1772261001: ext4_do_update_inode:5569: inode 15 [ 58.107189][ C0] EXT4-fs (loop0): last error at time 1772261001: ext4_dirty_inode:6450: inode 15 [ 58.107236][ T4188] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.231: corrupted inode contents [ 58.107271][ T4188] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.107469][ T4188] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.231: mark_inode_dirty error [ 58.107565][ T4188] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.107841][ T4188] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.231: mark inode dirty (error -117) [ 58.107874][ T4188] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.108124][ T4188] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 58.108227][ T4188] EXT4-fs (loop0): 1 orphan inode deleted [ 58.108575][ T4188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 58.109179][ T28] audit: type=1400 audit(1772261001.987:199): avc: denied { connect } for pid=4197 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.119977][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 58.120002][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 58.122297][ T4190] netlink: 44 bytes leftover after parsing attributes in process `syz.1.232'. [ 58.122917][ T4190] netlink: 'syz.1.232': attribute type 5 has an invalid length. [ 58.255282][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.275486][ T4190] loop1: detected capacity change from 0 to 512 [ 58.409188][ T4195] loop2: detected capacity change from 0 to 512 [ 58.446604][ T4190] EXT4-fs: Ignoring removed nobh option [ 58.464086][ T4195] EXT4-fs: Ignoring removed nobh option [ 58.556882][ T4205] loop4: detected capacity change from 0 to 1764 [ 58.601607][ T4205] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 58.611164][ T4190] EXT4-fs (loop1): orphan cleanup on readonly fs [ 58.640796][ T4190] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.232: EA inode hash validation failed [ 58.644143][ T4195] EXT4-fs (loop2): orphan cleanup on readonly fs [ 58.659729][ T4190] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.232: corrupted inode contents [ 58.682403][ T4205] isofs_fill_super: get root inode failed [ 58.686701][ T4190] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.232: mark_inode_dirty error [ 58.687181][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 58.710410][ C0] EXT4-fs (loop1): initial error at time 1772261002: ext4_do_update_inode:5569: inode 15 [ 58.710511][ C0] EXT4-fs (loop1): last error at time 1772261002: ext4_do_update_inode:5569: inode 15 [ 58.717340][ T4190] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.232: corrupted inode contents [ 58.771175][ T4195] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.235: EA inode hash validation failed [ 58.786959][ T4190] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.232: mark_inode_dirty error [ 58.793029][ T4195] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.235: corrupted inode contents [ 58.817329][ T4190] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3002: inode #15: comm syz.1.232: mark inode dirty (error -117) [ 58.849001][ T4190] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117) [ 58.849859][ T4190] EXT4-fs (loop1): 1 orphan inode deleted [ 58.877125][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 58.877147][ C0] EXT4-fs (loop2): initial error at time 1772261002: ext4_do_update_inode:5569: inode 15 [ 58.877177][ C0] EXT4-fs (loop2): last error at time 1772261002: ext4_do_update_inode:5569: inode 15 [ 58.877688][ T4195] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.235: mark_inode_dirty error [ 58.936293][ T4190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 58.940079][ T4195] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.235: corrupted inode contents [ 58.955173][ T4195] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.235: mark_inode_dirty error [ 58.977855][ T4195] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3002: inode #15: comm syz.2.235: mark inode dirty (error -117) [ 58.991426][ T4195] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 58.992345][ T4195] EXT4-fs (loop2): 1 orphan inode deleted [ 59.067238][ T4195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 59.131417][ T4193] loop4: detected capacity change from 0 to 8192 [ 59.149203][ T4219] syzkaller0: entered promiscuous mode [ 59.149297][ T4219] syzkaller0: entered allmulticast mode [ 59.167306][ T4216] loop0: detected capacity change from 0 to 1764 [ 59.185480][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.185534][ T4216] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 59.197193][ T3900] loop4: p1 p2 p3 p4 [ 59.198302][ T3900] loop4: p3 size 251658240 extends beyond EOD, truncated [ 59.201722][ T3900] loop4: p4 size 262144 extends beyond EOD, truncated [ 59.214149][ T4216] isofs_fill_super: get root inode failed [ 59.242953][ T4193] loop4: p1 p2 p3 p4 [ 59.318424][ T4193] loop4: p3 size 251658240 extends beyond EOD, truncated [ 59.319339][ T4193] loop4: p4 size 262144 extends beyond EOD, truncated [ 59.338940][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.505841][ T4227] netlink: 'syz.3.243': attribute type 5 has an invalid length. [ 59.594611][ T4231] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 59.596595][ T4231] isofs_fill_super: get root inode failed [ 59.839133][ T4227] EXT4-fs: Ignoring removed nobh option [ 59.881938][ T3920] loop2: p1 p2 p3 p4 [ 59.883244][ T3920] loop2: p3 size 251658240 extends beyond EOD, truncated [ 59.883805][ T3920] loop2: p4 size 262144 extends beyond EOD, truncated [ 59.884980][ T4227] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.922718][ T4227] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.243: EA inode hash validation failed [ 59.926740][ T4227] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.243: corrupted inode contents [ 59.927199][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 59.927340][ C1] EXT4-fs (loop3): initial error at time 1772261003: ext4_do_update_inode:5569: inode 15 [ 59.927579][ C1] EXT4-fs (loop3): last error at time 1772261003: ext4_do_update_inode:5569: inode 15 [ 59.993586][ T4227] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.243: mark_inode_dirty error [ 59.996347][ T4227] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.243: corrupted inode contents [ 59.999046][ T4227] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.243: mark_inode_dirty error [ 59.999136][ T4231] loop2: p1 p2 p3 p4 [ 60.001749][ T4227] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.243: mark inode dirty (error -117) [ 60.013759][ T4231] loop2: p3 size 251658240 extends beyond EOD, truncated [ 60.014248][ T4231] loop2: p4 size 262144 extends beyond EOD, truncated [ 60.015032][ T4227] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 60.015898][ T4227] EXT4-fs (loop3): 1 orphan inode deleted [ 60.043317][ T3000] loop2: p1 p2 p3 p4 [ 60.065068][ T3000] loop2: p3 size 251658240 extends beyond EOD, truncated [ 60.065682][ T3000] loop2: p4 size 262144 extends beyond EOD, truncated [ 60.082092][ T4227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 60.153006][ T4230] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.576216][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.599965][ T3920] loop0: p1 p2 p3 p4 [ 60.738632][ T3920] loop0: p3 size 251658240 extends beyond EOD, truncated [ 60.746781][ T3920] loop0: p4 size 262144 extends beyond EOD, truncated [ 60.770858][ T4210] loop0: p1 p2 p3 p4 [ 60.776061][ T4210] loop0: p3 size 251658240 extends beyond EOD, truncated [ 60.789810][ T4210] loop0: p4 size 262144 extends beyond EOD, truncated [ 61.258397][ T4256] netlink: 'syz.2.250': attribute type 5 has an invalid length. [ 61.283935][ T4256] set_capacity_and_notify: 5 callbacks suppressed [ 61.283954][ T4256] loop2: detected capacity change from 0 to 512 [ 61.312028][ T4256] EXT4-fs: Ignoring removed nobh option [ 61.344159][ T4256] EXT4-fs (loop2): orphan cleanup on readonly fs [ 61.352690][ T4259] syzkaller0: entered promiscuous mode [ 61.364006][ T4256] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.250: EA inode hash validation failed [ 61.378107][ T4260] loop4: detected capacity change from 0 to 1764 [ 61.382201][ T4249] loop3: detected capacity change from 0 to 512 [ 61.390112][ T4259] syzkaller0: entered allmulticast mode [ 61.409551][ T4249] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.429543][ T4260] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 61.465027][ T4256] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.250: corrupted inode contents [ 61.492142][ T4260] isofs_fill_super: get root inode failed [ 61.497309][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 61.505062][ C1] EXT4-fs (loop2): initial error at time 1772261005: ext4_do_update_inode:5569: inode 15 [ 61.515640][ C1] EXT4-fs (loop2): last error at time 1772261005: ext4_do_update_inode:5569: inode 15 [ 61.547144][ T4256] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.250: mark_inode_dirty error [ 61.599800][ T4256] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.250: corrupted inode contents [ 61.635520][ T4256] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.250: mark_inode_dirty error [ 61.671530][ T4256] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3002: inode #15: comm syz.2.250: mark inode dirty (error -117) [ 61.697686][ T4256] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 61.715919][ T4256] EXT4-fs (loop2): 1 orphan inode deleted [ 61.727531][ T4256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 61.775407][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.866255][ T4271] __nla_validate_parse: 10 callbacks suppressed [ 61.866286][ T4271] netlink: 44 bytes leftover after parsing attributes in process `syz.1.256'. [ 61.883356][ T4247] loop4: detected capacity change from 0 to 8192 [ 61.905775][ T4271] netlink: 43 bytes leftover after parsing attributes in process `syz.1.256'. [ 61.984823][ T3900] loop4: p1 p2 p3 p4 [ 61.990940][ T3900] loop4: p3 size 251658240 extends beyond EOD, truncated [ 62.006286][ T3900] loop4: p4 size 262144 extends beyond EOD, truncated [ 62.025685][ T4250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'. [ 62.108476][ T4271] netlink: 'syz.1.256': attribute type 5 has an invalid length. [ 62.132320][ T4271] netlink: 43 bytes leftover after parsing attributes in process `syz.1.256'. [ 62.322980][ T4279] loop1: detected capacity change from 0 to 512 [ 62.343545][ T4279] EXT4-fs: Ignoring removed nobh option [ 62.403454][ T4247] loop4: p1 p2 p3 p4 [ 62.413670][ T4247] loop4: p3 size 251658240 extends beyond EOD, truncated [ 62.427366][ T4279] EXT4-fs (loop1): orphan cleanup on readonly fs [ 62.437964][ T4247] loop4: p4 size 262144 extends beyond EOD, truncated [ 62.449469][ T4279] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.256: EA inode hash validation failed [ 62.544558][ T4279] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.256: corrupted inode contents [ 62.556425][ T4279] fserror_report: 20 callbacks suppressed [ 62.556442][ T4279] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.587132][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 62.602744][ C0] EXT4-fs (loop1): initial error at time 1772261006: ext4_do_update_inode:5569: inode 15 [ 62.612728][ C0] EXT4-fs (loop1): last error at time 1772261006: ext4_do_update_inode:5569: inode 15 [ 62.622607][ T4279] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.256: mark_inode_dirty error [ 62.661806][ T4279] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.661989][ T4279] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.256: corrupted inode contents [ 62.707147][ T4279] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.707336][ T4279] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.256: mark_inode_dirty error [ 62.728750][ T4279] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.728987][ T4279] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3002: inode #15: comm syz.1.256: mark inode dirty (error -117) [ 62.750975][ T4279] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.751143][ T4279] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117) [ 62.769530][ T4279] EXT4-fs (loop1): 1 orphan inode deleted [ 62.777363][ T4279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 63.054459][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.112019][ T4299] netlink: 44 bytes leftover after parsing attributes in process `syz.4.261'. [ 63.121407][ T4299] netlink: 43 bytes leftover after parsing attributes in process `syz.4.261'. [ 63.132278][ T4299] netlink: 'syz.4.261': attribute type 5 has an invalid length. [ 63.140998][ T4299] netlink: 43 bytes leftover after parsing attributes in process `syz.4.261'. [ 63.194894][ T4299] loop4: detected capacity change from 0 to 512 [ 63.213887][ T4299] EXT4-fs: Ignoring removed nobh option [ 63.274291][ T4299] EXT4-fs (loop4): orphan cleanup on readonly fs [ 63.300537][ T4299] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.261: EA inode hash validation failed [ 63.319762][ T4299] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.261: corrupted inode contents [ 63.332354][ T4299] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.334097][ T4299] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.261: mark_inode_dirty error [ 63.343708][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 63.343877][ C1] EXT4-fs (loop4): initial error at time 1772261007: ext4_do_update_inode:5569: inode 15 [ 63.344183][ C1] EXT4-fs (loop4): last error at time 1772261007: ext4_do_update_inode:5569: inode 15 [ 63.400462][ T4299] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.402426][ T4299] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.261: corrupted inode contents [ 63.413243][ T4310] syzkaller0: entered promiscuous mode [ 63.424948][ T4299] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.430730][ T4310] syzkaller0: entered allmulticast mode [ 63.432117][ T4299] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.261: mark_inode_dirty error [ 63.459422][ T4299] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.461419][ T4299] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #15: comm syz.4.261: mark inode dirty (error -117) [ 63.486143][ T4299] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.487961][ T4299] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 63.511216][ T4299] EXT4-fs (loop4): 1 orphan inode deleted [ 63.540936][ T4299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 63.603407][ T4299] syz.4.261 (4299) used greatest stack depth: 9096 bytes left [ 63.611386][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.709664][ T4316] syzkaller0: entered promiscuous mode [ 63.715287][ T4316] syzkaller0: entered allmulticast mode [ 63.951030][ T4320] loop4: detected capacity change from 0 to 512 [ 63.962267][ T4320] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.049109][ T4321] loop1: detected capacity change from 0 to 512 [ 64.065780][ T4321] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.880512][ T4274] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 66.091962][ T4328] loop1: detected capacity change from 0 to 512 [ 66.102170][ T4328] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.154562][ T28] audit: type=1400 audit(1772261010.027:200): avc: denied { block_suspend } for pid=4325 comm="syz.3.271" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.121599][ T4348] netlink: 44 bytes leftover after parsing attributes in process `syz.4.277'. [ 67.157998][ T4348] netlink: 43 bytes leftover after parsing attributes in process `syz.4.277'. [ 67.190235][ T4350] loop2: detected capacity change from 0 to 512 [ 67.209627][ T4351] loop4: detected capacity change from 0 to 512 [ 67.226476][ T4350] EXT4-fs: Ignoring removed nobh option [ 67.246447][ T4348] netlink: 'syz.4.277': attribute type 5 has an invalid length. [ 67.255137][ T4348] netlink: 43 bytes leftover after parsing attributes in process `syz.4.277'. [ 67.277300][ T4350] EXT4-fs (loop2): orphan cleanup on readonly fs [ 67.298669][ T4350] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.278: EA inode hash validation failed [ 67.317523][ T4351] EXT4-fs: Ignoring removed nobh option [ 67.558318][ T4349] netlink: 44 bytes leftover after parsing attributes in process `syz.2.278'. [ 67.587492][ T4351] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.728055][ T4351] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.277: EA inode hash validation failed [ 67.744948][ T4342] loop3: detected capacity change from 0 to 8192 [ 67.764035][ T4350] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.278: corrupted inode contents [ 67.808501][ T4351] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.277: corrupted inode contents [ 67.838131][ T4349] netlink: 43 bytes leftover after parsing attributes in process `syz.2.278'. [ 67.881289][ T4351] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.881485][ T4351] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.277: mark_inode_dirty error [ 67.890821][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 67.890840][ C1] EXT4-fs (loop4): initial error at time 1772261011: ext4_do_update_inode:5569: inode 15 [ 67.890867][ C1] EXT4-fs (loop4): last error at time 1772261011: ext4_do_update_inode:5569: inode 15 [ 67.937348][ T4350] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.937744][ T4349] netlink: 'syz.2.278': attribute type 5 has an invalid length. [ 67.947124][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 67.947157][ C1] EXT4-fs (loop2): initial error at time 1772261011: ext4_do_update_inode:5569: inode 15 [ 67.947442][ C1] EXT4-fs (loop2): last error at time 1772261011: ext4_do_update_inode:5569: inode 15 [ 67.993984][ T3920] loop3: p1 p2 p3 p4 [ 68.123076][ T3920] loop3: p3 size 251658240 extends beyond EOD, truncated [ 68.160072][ T3920] loop3: p4 size 262144 extends beyond EOD, truncated [ 68.255264][ T4360] loop1: detected capacity change from 0 to 512 [ 68.270084][ T4360] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.617169][ T4344] loop0: detected capacity change from 0 to 512 [ 68.684091][ T4351] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.684362][ T4351] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.277: corrupted inode contents [ 68.710140][ T4344] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.722689][ T4350] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.278: mark_inode_dirty error [ 68.746454][ T4350] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.746648][ T4349] netlink: 43 bytes leftover after parsing attributes in process `syz.2.278'. [ 68.781098][ T4351] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.783442][ T4351] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.277: mark_inode_dirty error [ 68.827059][ T4350] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.278: corrupted inode contents [ 68.840643][ T4350] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.841014][ T4350] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.278: mark_inode_dirty error [ 68.855828][ T4351] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.907915][ T4350] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.917315][ T4350] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3002: inode #15: comm syz.2.278: mark inode dirty (error -117) [ 68.931752][ T4351] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #15: comm syz.4.277: mark inode dirty (error -117) [ 68.939136][ T4350] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.952135][ T4350] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 68.956362][ T4342] loop3: p1 p2 p3 p4 [ 68.990290][ T4351] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.991393][ T4351] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 69.001544][ T4350] EXT4-fs (loop2): 1 orphan inode deleted [ 69.015111][ T4342] loop3: p3 size 251658240 extends beyond EOD, truncated [ 69.029682][ T4350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 69.045592][ T4342] loop3: p4 size 262144 extends beyond EOD, truncated [ 69.099788][ T4351] EXT4-fs (loop4): 1 orphan inode deleted [ 69.106028][ T4351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 69.186329][ T4366] syzkaller0: entered promiscuous mode [ 69.206130][ T4366] syzkaller0: entered allmulticast mode [ 69.288664][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.397695][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.561605][ T4373] netlink: 44 bytes leftover after parsing attributes in process `syz.4.285'. [ 69.592575][ T4373] netlink: 43 bytes leftover after parsing attributes in process `syz.4.285'. [ 69.640310][ T4386] loop4: detected capacity change from 0 to 512 [ 69.647066][ T4386] EXT4-fs: Ignoring removed nobh option [ 69.663372][ T4373] netlink: 'syz.4.285': attribute type 5 has an invalid length. [ 69.677319][ T4387] loop0: detected capacity change from 0 to 512 [ 69.684314][ T4387] EXT4-fs: Ignoring removed nobh option [ 69.691972][ T4376] syzkaller0: entered promiscuous mode [ 69.699684][ T4387] EXT4-fs (loop0): orphan cleanup on readonly fs [ 69.706643][ T4373] netlink: 43 bytes leftover after parsing attributes in process `syz.4.285'. [ 69.709519][ T4387] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.287: EA inode hash validation failed [ 69.718193][ T4376] syzkaller0: entered allmulticast mode [ 69.738673][ T4387] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.287: corrupted inode contents [ 69.752866][ T4387] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.287: mark_inode_dirty error [ 69.756880][ T4389] xt_hashlimit: size too large, truncated to 1048576 [ 69.764193][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 69.777317][ C1] EXT4-fs (loop0): initial error at time 1772261013: ext4_do_update_inode:5569: inode 15 [ 69.787189][ C1] EXT4-fs (loop0): last error at time 1772261013: ext4_do_update_inode:5569: inode 15 [ 69.797233][ T4387] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.287: corrupted inode contents [ 69.798112][ T4385] netlink: 44 bytes leftover after parsing attributes in process `syz.0.287'. [ 69.810773][ T4387] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.287: mark_inode_dirty error [ 69.819406][ T4386] EXT4-fs (loop4): orphan cleanup on readonly fs [ 69.830318][ T4387] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.287: mark inode dirty (error -117) [ 69.851187][ T4387] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 69.861254][ T4386] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.285: EA inode hash validation failed [ 69.874405][ T4385] netlink: 'syz.0.287': attribute type 5 has an invalid length. [ 69.927252][ T4386] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.285: corrupted inode contents [ 69.933711][ T4387] EXT4-fs (loop0): 1 orphan inode deleted [ 69.945322][ T4387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 69.967155][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 69.973634][ C0] EXT4-fs (loop4): initial error at time 1772261013: ext4_do_update_inode:5569: inode 15 [ 69.983499][ C0] EXT4-fs (loop4): last error at time 1772261013: ext4_do_update_inode:5569: inode 15 [ 69.987196][ T4386] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.285: mark_inode_dirty error [ 70.001517][ T4380] loop3: detected capacity change from 0 to 512 [ 70.050340][ T4386] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.285: corrupted inode contents [ 70.073116][ T4380] EXT4-fs: Ignoring removed nobh option [ 70.202221][ T4386] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.285: mark_inode_dirty error [ 70.229028][ T4380] EXT4-fs (loop3): orphan cleanup on readonly fs [ 70.253420][ T4386] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #15: comm syz.4.285: mark inode dirty (error -117) [ 70.344761][ T4380] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.286: EA inode hash validation failed [ 70.358526][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.421954][ T4386] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 70.459706][ T4386] EXT4-fs (loop4): 1 orphan inode deleted [ 70.486604][ T4402] netlink: 'syz.1.291': attribute type 5 has an invalid length. [ 70.498180][ T4386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 70.514829][ T4380] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.286: corrupted inode contents [ 70.563290][ T4380] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.286: mark_inode_dirty error [ 70.575736][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 70.575926][ C1] EXT4-fs (loop3): initial error at time 1772261014: ext4_do_update_inode:5569: inode 15 [ 70.576058][ C1] EXT4-fs (loop3): last error at time 1772261014: ext4_do_update_inode:5569: inode 15 [ 70.826760][ T4402] loop1: detected capacity change from 0 to 512 [ 70.872144][ T4380] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.286: corrupted inode contents [ 71.105951][ T4402] EXT4-fs: Ignoring removed nobh option [ 71.122547][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.137031][ T4380] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.286: mark_inode_dirty error [ 71.166102][ T4402] EXT4-fs (loop1): orphan cleanup on readonly fs [ 71.175269][ T4380] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.286: mark inode dirty (error -117) [ 71.197074][ T4402] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.291: EA inode hash validation failed [ 71.246203][ T4380] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 71.281885][ T4402] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.291: corrupted inode contents [ 71.294711][ T4380] EXT4-fs (loop3): 1 orphan inode deleted [ 71.367152][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 71.373635][ C1] EXT4-fs (loop1): initial error at time 1772261015: ext4_do_update_inode:5569: inode 15 [ 71.383488][ C1] EXT4-fs (loop1): last error at time 1772261015: ext4_do_update_inode:5569: inode 15 [ 71.534804][ T4402] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.291: mark_inode_dirty error [ 71.537947][ T4380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 72.003129][ T4419] loop4: detected capacity change from 0 to 512 [ 72.017368][ T4419] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.042919][ T4402] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.291: corrupted inode contents [ 72.841788][ T4402] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.291: mark_inode_dirty error [ 72.882021][ T4417] __nla_validate_parse: 5 callbacks suppressed [ 72.882039][ T4417] netlink: 44 bytes leftover after parsing attributes in process `syz.0.295'. [ 72.908761][ T4402] fserror_report: 18 callbacks suppressed [ 72.908854][ T4402] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.942536][ T4402] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3002: inode #15: comm syz.1.291: mark inode dirty (error -117) [ 72.975407][ T4421] loop0: detected capacity change from 0 to 512 [ 72.982844][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.010735][ T4417] netlink: 43 bytes leftover after parsing attributes in process `syz.0.295'. [ 73.029217][ T4402] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.034233][ T4421] EXT4-fs: Ignoring removed nobh option [ 73.066068][ T4417] netlink: 'syz.0.295': attribute type 5 has an invalid length. [ 73.074921][ T4417] netlink: 43 bytes leftover after parsing attributes in process `syz.0.295'. [ 73.086902][ T4427] netlink: 44 bytes leftover after parsing attributes in process `syz.2.299'. [ 73.096615][ T4427] netlink: 43 bytes leftover after parsing attributes in process `syz.2.299'. [ 73.110530][ T4402] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117) [ 73.127012][ T4402] EXT4-fs (loop1): 1 orphan inode deleted [ 73.136321][ T4421] EXT4-fs (loop0): orphan cleanup on readonly fs [ 73.144749][ T4427] netlink: 'syz.2.299': attribute type 5 has an invalid length. [ 73.157807][ T4421] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.295: EA inode hash validation failed [ 73.174113][ T4402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.188410][ T4429] loop2: detected capacity change from 0 to 512 [ 73.195313][ T4421] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.295: corrupted inode contents [ 73.207392][ T4427] netlink: 43 bytes leftover after parsing attributes in process `syz.2.299'. [ 73.245346][ T4421] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.245552][ T4421] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.295: mark_inode_dirty error [ 73.254732][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 73.254751][ C1] EXT4-fs (loop0): initial error at time 1772261017: ext4_do_update_inode:5569: inode 15 [ 73.254793][ C1] EXT4-fs (loop0): last error at time 1772261017: ext4_do_update_inode:5569: inode 15 [ 73.292679][ T4429] EXT4-fs: Ignoring removed nobh option [ 73.322835][ T4429] EXT4-fs (loop2): orphan cleanup on readonly fs [ 73.331764][ T4429] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.299: EA inode hash validation failed [ 73.354927][ T4429] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.299: corrupted inode contents [ 73.381500][ T4429] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.381703][ T4429] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.299: mark_inode_dirty error [ 73.390914][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 73.390930][ C1] EXT4-fs (loop2): initial error at time 1772261017: ext4_do_update_inode:5569: inode 15 [ 73.390995][ C1] EXT4-fs (loop2): last error at time 1772261017: ext4_do_update_inode:5569: inode 15 [ 73.431281][ T4421] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.445808][ T4421] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.295: corrupted inode contents [ 73.479401][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.488876][ T4421] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.489413][ T4421] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.295: mark_inode_dirty error [ 73.512309][ T4429] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.512556][ T4429] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.299: corrupted inode contents [ 73.534344][ T4421] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.534508][ T4421] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.295: mark inode dirty (error -117) [ 73.557280][ T4429] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.557347][ T4421] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.576691][ T4429] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.299: mark_inode_dirty error [ 73.609987][ T4429] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3002: inode #15: comm syz.2.299: mark inode dirty (error -117) [ 73.610195][ T4429] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 73.610255][ T4429] EXT4-fs (loop2): 1 orphan inode deleted [ 73.610795][ T4429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.623872][ T4421] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 73.623918][ T4421] EXT4-fs (loop0): 1 orphan inode deleted [ 73.624334][ T4421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.708420][ T4435] netlink: 44 bytes leftover after parsing attributes in process `syz.1.300'. [ 73.708665][ T4435] netlink: 43 bytes leftover after parsing attributes in process `syz.1.300'. [ 73.708928][ T4435] netlink: 'syz.1.300': attribute type 5 has an invalid length. [ 73.709080][ T4435] netlink: 43 bytes leftover after parsing attributes in process `syz.1.300'. [ 73.771966][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.783612][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.793821][ T4442] loop4: detected capacity change from 0 to 1764 [ 73.839869][ T4442] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 73.847554][ T4442] isofs_fill_super: get root inode failed [ 73.873449][ T4436] syzkaller0: entered promiscuous mode [ 73.918694][ T4447] netlink: 44 bytes leftover after parsing attributes in process `syz.2.302'. [ 73.927727][ T4447] netlink: 'syz.2.302': attribute type 5 has an invalid length. [ 73.937016][ T4448] netlink: 'syz.0.303': attribute type 5 has an invalid length. [ 73.940263][ T4448] loop0: detected capacity change from 0 to 512 [ 73.940820][ T4447] loop2: detected capacity change from 0 to 512 [ 73.941066][ T4448] EXT4-fs: Ignoring removed nobh option [ 73.941288][ T4447] EXT4-fs: Ignoring removed nobh option [ 73.942856][ T4447] EXT4-fs (loop2): orphan cleanup on readonly fs [ 73.943383][ T4447] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.302: EA inode hash validation failed [ 73.943509][ T4447] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.302: corrupted inode contents [ 73.943637][ T4447] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.302: mark_inode_dirty error [ 73.943766][ T4447] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.302: corrupted inode contents [ 73.943901][ T4447] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.302: mark_inode_dirty error [ 73.944029][ T4447] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3002: inode #15: comm syz.2.302: mark inode dirty (error -117) [ 73.944172][ T4447] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 73.944208][ T4447] EXT4-fs (loop2): 1 orphan inode deleted [ 73.947585][ T4447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.950528][ T4436] syzkaller0: entered allmulticast mode [ 73.964535][ T4448] EXT4-fs (loop0): orphan cleanup on readonly fs [ 73.964954][ T4448] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.303: EA inode hash validation failed [ 73.965076][ T4448] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.303: corrupted inode contents [ 73.966269][ T4448] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.303: mark_inode_dirty error [ 73.967115][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 73.967133][ C0] EXT4-fs (loop0): initial error at time 1772261017: ext4_do_update_inode:5569: inode 15 [ 73.967162][ C0] EXT4-fs (loop0): last error at time 1772261017: ext4_dirty_inode:6450: inode 15 [ 73.982340][ T4448] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.303: corrupted inode contents [ 73.982535][ T4448] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.303: mark_inode_dirty error [ 73.985861][ T4448] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.303: mark inode dirty (error -117) [ 73.986001][ T4448] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 73.986042][ T4448] EXT4-fs (loop0): 1 orphan inode deleted [ 73.993411][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.995806][ T4448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 74.031438][ T4435] loop1: detected capacity change from 0 to 512 [ 74.049864][ T4442] loop4: detected capacity change from 0 to 8192 [ 74.089376][ T4435] EXT4-fs: Ignoring removed nobh option [ 74.388346][ T4435] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.399117][ T3900] loop4: p1 p2 p3 p4 [ 74.405438][ T3900] loop4: p3 size 251658240 extends beyond EOD, truncated [ 74.407748][ T4435] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.300: EA inode hash validation failed [ 74.430356][ T3900] loop4: p4 size 262144 extends beyond EOD, truncated [ 74.430632][ T4435] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.300: corrupted inode contents [ 74.457283][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 74.465445][ C1] EXT4-fs (loop1): initial error at time 1772261018: ext4_do_update_inode:5569: inode 15 [ 74.478124][ C1] EXT4-fs (loop1): last error at time 1772261018: ext4_do_update_inode:5569: inode 15 [ 74.492330][ T4435] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.300: mark_inode_dirty error [ 74.520475][ T4435] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.300: corrupted inode contents [ 74.536191][ T4435] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.300: mark_inode_dirty error [ 74.551539][ T4442] loop4: p1 p2 p3 p4 [ 74.556986][ T4435] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3002: inode #15: comm syz.1.300: mark inode dirty (error -117) [ 74.574537][ T4442] loop4: p3 size 251658240 extends beyond EOD, truncated [ 74.582002][ T4466] netlink: 'syz.3.306': attribute type 5 has an invalid length. [ 74.586867][ T4435] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117) [ 74.605117][ T4442] loop4: p4 size 262144 extends beyond EOD, truncated [ 74.607684][ T4435] EXT4-fs (loop1): 1 orphan inode deleted [ 74.638958][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.652189][ T4435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 74.738730][ T4468] syzkaller0: entered promiscuous mode [ 74.744247][ T4468] syzkaller0: entered allmulticast mode [ 74.893303][ T3900] udevd[3900]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 74.895943][ T3920] udevd[3920]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 74.908011][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 74.929181][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 74.946713][ T4476] loop4: detected capacity change from 0 to 512 [ 74.953617][ T4476] EXT4-fs: Ignoring removed nobh option [ 74.993854][ T4476] EXT4-fs (loop4): orphan cleanup on readonly fs [ 75.011128][ T4478] loop2: detected capacity change from 0 to 1764 [ 75.024564][ T4476] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.309: EA inode hash validation failed [ 75.025187][ T4466] loop3: detected capacity change from 0 to 512 [ 75.053184][ T4466] EXT4-fs: Ignoring removed nobh option [ 75.079588][ T4478] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 75.094559][ T4476] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.309: corrupted inode contents [ 75.113007][ T4466] EXT4-fs (loop3): orphan cleanup on readonly fs [ 75.121144][ T4476] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.309: mark_inode_dirty error [ 75.125199][ T4466] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.306: EA inode hash validation failed [ 75.132582][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 75.132605][ C1] EXT4-fs (loop4): initial error at time 1772261018: ext4_do_update_inode:5569: inode 15 [ 75.132657][ C1] EXT4-fs (loop4): last error at time 1772261018: ext4_do_update_inode:5569: inode 15 [ 75.157284][ T4476] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.309: corrupted inode contents [ 75.166714][ T4466] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.306: corrupted inode contents [ 75.175505][ T4478] isofs_fill_super: get root inode failed [ 75.199905][ T4476] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.309: mark_inode_dirty error [ 75.227116][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 75.233580][ C0] EXT4-fs (loop3): initial error at time 1772261019: ext4_do_update_inode:5569: inode 15 [ 75.243463][ C0] EXT4-fs (loop3): last error at time 1772261019: ext4_do_update_inode:5569: inode 15 [ 75.253334][ T4466] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.306: mark_inode_dirty error [ 75.255477][ T4476] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #15: comm syz.4.309: mark inode dirty (error -117) [ 75.297505][ T4476] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 75.307217][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.317082][ T4466] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.306: corrupted inode contents [ 75.330710][ T4476] EXT4-fs (loop4): 1 orphan inode deleted [ 75.336787][ T4476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 75.373915][ T4466] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.306: mark_inode_dirty error [ 75.388819][ T4466] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.306: mark inode dirty (error -117) [ 75.392415][ T4481] syzkaller0: entered promiscuous mode [ 75.417192][ T4466] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 75.421616][ T4481] syzkaller0: entered allmulticast mode [ 75.427444][ T3900] loop2: p1 p2 p3 p4 [ 75.507827][ T4466] EXT4-fs (loop3): 1 orphan inode deleted [ 75.522067][ T4466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 75.539716][ T3900] loop2: p3 size 251658240 extends beyond EOD, truncated [ 75.568219][ T3900] loop2: p4 size 262144 extends beyond EOD, truncated [ 75.782088][ T4486] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.135245][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.342770][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.384141][ T4488] netlink: 'syz.0.313': attribute type 5 has an invalid length. [ 76.564590][ T4478] loop2: p1 p2 p3 p4 [ 76.569743][ T4478] loop2: p3 size 251658240 extends beyond EOD, truncated [ 76.577422][ T4478] loop2: p4 size 262144 extends beyond EOD, truncated [ 76.757610][ T4491] syzkaller0: entered promiscuous mode [ 76.764145][ T4491] syzkaller0: entered allmulticast mode [ 76.896484][ T4488] EXT4-fs: Ignoring removed nobh option [ 77.037037][ T4488] EXT4-fs (loop0): orphan cleanup on readonly fs [ 77.050131][ T4497] syzkaller0: entered promiscuous mode [ 77.055662][ T4497] syzkaller0: entered allmulticast mode [ 77.075549][ T4488] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.313: EA inode hash validation failed [ 77.119180][ T4503] syzkaller1: entered promiscuous mode [ 77.136420][ T4488] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.313: corrupted inode contents [ 77.158481][ T4503] syzkaller1: entered allmulticast mode [ 77.188035][ T4488] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.313: mark_inode_dirty error [ 77.199966][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 77.200474][ C0] EXT4-fs (loop0): initial error at time 1772261021: ext4_do_update_inode:5569: inode 15 [ 77.200736][ C0] EXT4-fs (loop0): last error at time 1772261021: ext4_do_update_inode:5569: inode 15 [ 77.267983][ T4488] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.313: corrupted inode contents [ 77.305248][ T4488] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.313: mark_inode_dirty error [ 77.316461][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 77.327949][ T3900] udevd[3900]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 77.328911][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 77.373965][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 77.405666][ T4508] netlink: 'syz.1.319': attribute type 5 has an invalid length. [ 77.414247][ T4488] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.313: mark inode dirty (error -117) [ 77.432508][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 77.443929][ T3920] udevd[3920]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 77.497836][ T4514] EXT4-fs: Ignoring removed nobh option [ 77.518741][ T4512] syzkaller0: entered promiscuous mode [ 77.524247][ T4512] syzkaller0: entered allmulticast mode [ 77.534876][ T4488] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 77.551438][ T4488] EXT4-fs (loop0): 1 orphan inode deleted [ 77.553651][ T4514] EXT4-fs (loop1): orphan cleanup on readonly fs [ 77.564473][ T4488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 77.572964][ T4514] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.319: EA inode hash validation failed [ 77.593264][ T4514] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.319: corrupted inode contents [ 77.605599][ T4514] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.319: mark_inode_dirty error [ 77.616955][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 77.616993][ C1] EXT4-fs (loop1): initial error at time 1772261021: ext4_do_update_inode:5569: inode 15 [ 77.617022][ C1] EXT4-fs (loop1): last error at time 1772261021: ext4_do_update_inode:5569: inode 15 [ 77.716790][ T4514] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.319: corrupted inode contents [ 77.733835][ T4514] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.319: mark_inode_dirty error [ 77.746485][ T4514] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3002: inode #15: comm syz.1.319: mark inode dirty (error -117) [ 77.795932][ T4521] netlink: 'syz.2.322': attribute type 5 has an invalid length. [ 77.869570][ T4521] EXT4-fs: Ignoring removed nobh option [ 77.953413][ T4514] fserror_report: 36 callbacks suppressed [ 77.953438][ T4514] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.996816][ T4514] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117) [ 78.022891][ T4521] EXT4-fs (loop2): orphan cleanup on readonly fs [ 78.030983][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.040884][ T4521] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.322: EA inode hash validation failed [ 78.053629][ T4514] EXT4-fs (loop1): 1 orphan inode deleted [ 78.059607][ T4521] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.322: corrupted inode contents [ 78.071874][ T4514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 78.084600][ T4521] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.084774][ T4521] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.322: mark_inode_dirty error [ 78.093936][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 78.093952][ C1] EXT4-fs (loop2): initial error at time 1772261021: ext4_do_update_inode:5569: inode 15 [ 78.093989][ C1] EXT4-fs (loop2): last error at time 1772261021: ext4_do_update_inode:5569: inode 15 [ 78.141768][ T4521] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.144584][ T4521] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.322: corrupted inode contents [ 78.190195][ T4526] __nla_validate_parse: 18 callbacks suppressed [ 78.190318][ T4526] netlink: 44 bytes leftover after parsing attributes in process `syz.0.323'. [ 78.216253][ T4526] netlink: 43 bytes leftover after parsing attributes in process `syz.0.323'. [ 78.227113][ T4521] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.227406][ T4521] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.322: mark_inode_dirty error [ 78.257458][ T4521] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.257642][ T4526] netlink: 'syz.0.323': attribute type 5 has an invalid length. [ 78.276319][ T4521] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3002: inode #15: comm syz.2.322: mark inode dirty (error -117) [ 78.289030][ T4521] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.289194][ T4526] netlink: 43 bytes leftover after parsing attributes in process `syz.0.323'. [ 78.289326][ T4521] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 78.303020][ T4531] set_capacity_and_notify: 5 callbacks suppressed [ 78.303036][ T4531] loop0: detected capacity change from 0 to 512 [ 78.331225][ T4521] EXT4-fs (loop2): 1 orphan inode deleted [ 78.337566][ T4521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 78.342287][ T4531] EXT4-fs: Ignoring removed nobh option [ 78.355985][ T4534] loop3: detected capacity change from 0 to 512 [ 78.364165][ T4534] EXT4-fs: Ignoring removed nobh option [ 78.372598][ T4532] netlink: 44 bytes leftover after parsing attributes in process `syz.3.325'. [ 78.382834][ T4532] netlink: 43 bytes leftover after parsing attributes in process `syz.3.325'. [ 78.391745][ T4532] netlink: 'syz.3.325': attribute type 5 has an invalid length. [ 78.399641][ T4532] netlink: 43 bytes leftover after parsing attributes in process `syz.3.325'. [ 78.399860][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.417753][ T4531] EXT4-fs (loop0): orphan cleanup on readonly fs [ 78.432928][ T4531] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.323: EA inode hash validation failed [ 78.445797][ T4531] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.323: corrupted inode contents [ 78.457340][ T4534] EXT4-fs (loop3): orphan cleanup on readonly fs [ 78.457629][ T4531] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.467241][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 78.468758][ T4534] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.325: EA inode hash validation failed [ 78.476902][ C0] EXT4-fs (loop0): initial error at time 1772261022: ext4_do_update_inode:5569 [ 78.483498][ T4531] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.323: mark_inode_dirty error [ 78.483527][ T4531] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.483687][ T4531] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.323: corrupted inode contents [ 78.483715][ T4531] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.483900][ T4531] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.323: mark_inode_dirty error [ 78.483925][ T4531] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.484085][ T4531] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.323: mark inode dirty (error -117) [ 78.484281][ T4531] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 78.496811][ C0] : inode 15 [ 78.508724][ T4534] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.325: corrupted inode contents [ 78.517563][ C0] [ 78.526797][ T4534] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.325: mark_inode_dirty error [ 78.526974][ T4534] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.325: corrupted inode contents [ 78.527159][ C1] EXT4-fs (loop3): error count since last fsck: 3 [ 78.527176][ C1] EXT4-fs (loop3): initial error at time 1772261022: ext4_do_update_inode:5569: inode 15 [ 78.527225][ C1] EXT4-fs (loop3): last error at time 1772261022: ext4_do_update_inode:5569: inode 15 [ 78.527312][ T4534] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.325: mark_inode_dirty error [ 78.539139][ C0] EXT4-fs (loop0): last error at time 1772261022: ext4_xattr_delete_inode:3002 [ 78.548217][ T4531] EXT4-fs (loop0): 1 orphan inode deleted [ 78.548688][ T4531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 78.560479][ C0] : inode 15 [ 78.569737][ T4534] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.325: mark inode dirty (error -117) [ 78.569913][ T4534] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 78.569949][ T4534] EXT4-fs (loop3): 1 orphan inode deleted [ 78.570437][ T4534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 78.582600][ C0] [ 78.774126][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.781756][ T28] audit: type=1400 audit(1772261022.647:201): avc: denied { read } for pid=4541 comm="syz.1.327" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.813108][ T4542] loop1: detected capacity change from 0 to 512 [ 78.819827][ T4542] EXT4-fs: Ignoring removed i_version option [ 78.825949][ T4542] EXT4-fs: Ignoring removed bh option [ 78.935297][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.955134][ T4542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.145250][ T4554] loop2: detected capacity change from 0 to 512 [ 79.163024][ T4554] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.374880][ T4542] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.436773][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.483618][ T4557] syzkaller0: entered promiscuous mode [ 79.634557][ T4557] syzkaller0: entered allmulticast mode [ 80.532111][ T28] audit: type=1400 audit(1772261024.347:202): avc: denied { setopt } for pid=4541 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.551655][ T28] audit: type=1400 audit(1772261024.357:203): avc: denied { ioctl } for pid=4541 comm="syz.1.327" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.671985][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.251552][ T4581] loop4: detected capacity change from 0 to 512 [ 81.267563][ T4581] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.445250][ T4590] loop0: detected capacity change from 0 to 1764 [ 83.041819][ T4590] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 83.077008][ T28] audit: type=1326 audit(1772261026.317:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.3.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7d24c799 code=0x7ffc0000 [ 83.319905][ T28] audit: type=1326 audit(1772261026.317:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.3.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7d24c799 code=0x7ffc0000 [ 83.928819][ T4597] loop4: detected capacity change from 0 to 256 [ 83.963143][ T28] audit: type=1326 audit(1772261026.317:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.3.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7d24c799 code=0x7ffc0000 [ 84.157168][ T4590] isofs_fill_super: get root inode failed [ 84.291159][ T4597] FAT-fs (loop4): Directory bread(block 64) failed [ 84.297765][ T4597] FAT-fs (loop4): Directory bread(block 65) failed [ 84.304444][ T4597] FAT-fs (loop4): Directory bread(block 66) failed [ 84.311038][ T4597] FAT-fs (loop4): Directory bread(block 67) failed [ 84.317813][ T4597] FAT-fs (loop4): Directory bread(block 68) failed [ 84.324460][ T4597] FAT-fs (loop4): Directory bread(block 69) failed [ 84.331139][ T4597] FAT-fs (loop4): Directory bread(block 70) failed [ 84.337759][ T4597] FAT-fs (loop4): Directory bread(block 71) failed [ 84.344486][ T4597] FAT-fs (loop4): Directory bread(block 72) failed [ 84.351070][ T4597] FAT-fs (loop4): Directory bread(block 73) failed [ 84.373756][ T28] audit: type=1326 audit(1772261026.317:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.3.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7d24c799 code=0x7ffc0000 [ 84.399448][ T28] audit: type=1326 audit(1772261026.317:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.3.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6e7d24c799 code=0x7ffc0000 [ 84.889654][ T4597] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.900544][ T4597] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.295478][ T28] audit: type=1400 audit(1772261026.827:209): avc: denied { read } for pid=4584 comm="syz.1.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 85.426382][ T4597] bridge_slave_0: left allmulticast mode [ 85.494695][ T4597] bridge_slave_0: left promiscuous mode [ 85.505169][ T4597] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.677738][ T28] audit: type=1400 audit(1772261026.867:210): avc: denied { create } for pid=4584 comm="syz.1.335" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 85.798781][ T4597] bridge_slave_1: left allmulticast mode [ 85.806746][ T4597] bridge_slave_1: left promiscuous mode [ 85.818593][ T4597] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.096413][ T4608] loop2: detected capacity change from 0 to 512 [ 86.129673][ T4608] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.944963][ T28] audit: type=1400 audit(1772261026.867:211): avc: denied { write } for pid=4584 comm="syz.1.335" name="file0" dev="tmpfs" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.988656][ T28] audit: type=1400 audit(1772261026.867:212): avc: denied { open } for pid=4584 comm="syz.1.335" path="/65/file0" dev="tmpfs" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 87.020162][ T4597] bond0: (slave bond_slave_0): Releasing backup interface [ 87.071150][ T4597] bond0: (slave bond_slave_1): Releasing backup interface [ 87.133246][ T4597] team0: Port device team_slave_0 removed [ 87.180948][ T4597] team0: Port device team_slave_1 removed [ 87.208299][ T4597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.233868][ T4597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.270023][ T4597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.294827][ T4597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.359882][ T4597] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 87.432987][ T28] audit: type=1400 audit(1772261026.867:213): avc: denied { ioctl } for pid=4584 comm="syz.1.335" path="/65/file0" dev="tmpfs" ino=369 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 87.505976][ T28] audit: type=1326 audit(1772261026.877:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.3.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7d24c799 code=0x7ffc0000 [ 87.533333][ T4618] netlink: 'syz.0.346': attribute type 10 has an invalid length. [ 87.557170][ T4618] team0 (unregistering): Port device team_slave_0 removed [ 87.565126][ T28] audit: type=1326 audit(1772261026.907:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.3.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e7d20cfce code=0x7ffc0000 [ 87.635014][ T4618] team0 (unregistering): Port device team_slave_1 removed [ 87.676719][ T4604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.346'. [ 87.700916][ T4620] syzkaller0: entered promiscuous mode [ 87.701641][ T4624] loop3: detected capacity change from 0 to 128 [ 87.706612][ T4620] syzkaller0: entered allmulticast mode [ 87.713927][ T4624] msdos: Unknown parameter 'dos1xfl%›4?Ö…y' [ 87.886265][ T4630] syzkaller0: entered promiscuous mode [ 87.896500][ T4630] syzkaller0: entered allmulticast mode [ 88.024011][ T4643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.358'. [ 88.161100][ T4647] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 88.199448][ T4647] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 88.213769][ T4647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4647 comm=syz.1.359 [ 88.346636][ T4652] loop2: detected capacity change from 0 to 512 [ 88.367621][ T4652] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.079547][ T4647] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 89.148535][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 89.148551][ T28] audit: type=1400 audit(1772261033.027:278): avc: denied { kexec_image_load } for pid=4646 comm="syz.1.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 89.257438][ T4658] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 89.275902][ T4658] macvlan0: entered promiscuous mode [ 89.289702][ T4658] veth0_to_hsr: entered promiscuous mode [ 89.310628][ T4658] hsr1: Slave B (veth0_to_hsr) is not up; please bring it up to get a fully working HSR network [ 89.333149][ T4658] hsr1: entered promiscuous mode [ 89.333174][ T4658] hsr1: entered allmulticast mode [ 89.333186][ T4658] macvlan0: entered allmulticast mode [ 89.333264][ T4658] veth1_vlan: entered allmulticast mode [ 89.333279][ T4658] veth0_to_hsr: entered allmulticast mode [ 89.415195][ T4672] loop0: detected capacity change from 0 to 512 [ 89.440122][ T4672] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.366: invalid indirect mapped block 4294967295 (level 1) [ 89.440159][ T4672] fserror_report: 6 callbacks suppressed [ 89.440168][ T4672] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 89.440311][ T4672] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.366: invalid indirect mapped block 4294967295 (level 1) [ 89.440353][ T4672] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 89.440681][ T4672] EXT4-fs (loop0): 2 truncates cleaned up [ 89.441061][ T4672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.488684][ T4678] syzkaller0: entered promiscuous mode [ 89.488704][ T4678] syzkaller0: entered allmulticast mode [ 89.524561][ T4677] loop1: detected capacity change from 0 to 1764 [ 89.548566][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.705779][ T4677] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 89.705889][ T4677] isofs_fill_super: get root inode failed [ 89.906009][ T4684] loop4: detected capacity change from 0 to 512 [ 89.909380][ T4684] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.778174][ T4677] loop1: detected capacity change from 0 to 8192 [ 91.070539][ T28] audit: type=1400 audit(1772261034.947:279): avc: denied { associate } for pid=4692 comm="syz.0.368" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 91.545416][ T28] audit: type=1400 audit(1772261035.387:280): avc: denied { watch watch_reads } for pid=4689 comm="syz.2.370" path="/65" dev="tmpfs" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.845231][ T4677] loop1: p1 p2 p3 p4 [ 91.868461][ T4677] loop1: p3 size 251658240 extends beyond EOD, truncated [ 92.040792][ T4694] bond1: entered allmulticast mode [ 92.051923][ T4694] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.148827][ T4677] loop1: p4 size 262144 extends beyond EOD, truncated [ 92.160905][ T28] audit: type=1400 audit(1772261036.017:281): avc: denied { create } for pid=4700 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 92.209069][ T4703] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.687077][ T28] audit: type=1400 audit(1772261036.557:282): avc: denied { write } for pid=4700 comm="syz.3.373" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 92.947548][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 93.047406][ T28] audit: type=1400 audit(1772261036.857:283): avc: denied { create } for pid=4697 comm="syz.4.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.195295][ T4717] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4717 comm=syz.3.378 [ 93.254577][ T4718] syzkaller0: entered promiscuous mode [ 93.276904][ T28] audit: type=1400 audit(1772261036.887:284): avc: denied { ioctl } for pid=4697 comm="syz.4.372" path="socket:[8003]" dev="sockfs" ino=8003 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.316911][ T4718] syzkaller0: entered allmulticast mode [ 93.516049][ T28] audit: type=1400 audit(1772261037.387:285): avc: denied { name_connect } for pid=4721 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 93.556858][ T28] audit: type=1400 audit(1772261037.427:286): avc: denied { shutdown } for pid=4721 comm="syz.1.380" lport=55638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.648290][ T4724] loop3: detected capacity change from 0 to 512 [ 93.695062][ T4724] EXT4-fs: Ignoring removed nobh option [ 93.762621][ T4724] EXT4-fs (loop3): orphan cleanup on readonly fs [ 93.826146][ T4724] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.381: EA inode hash validation failed [ 93.848543][ T4724] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.381: corrupted inode contents [ 93.866124][ T4724] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.867338][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 93.885135][ C1] EXT4-fs (loop3): initial error at time 1772261037: ext4_do_update_inode:5569: inode 15 [ 93.896329][ C1] EXT4-fs (loop3): last error at time 1772261037: ext4_do_update_inode:5569: inode 15 [ 93.903194][ T4724] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.381: mark_inode_dirty error [ 93.925161][ T4724] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.978444][ T4724] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.381: corrupted inode contents [ 94.001499][ T4724] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.004122][ T4724] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.381: mark_inode_dirty error [ 94.032339][ T4734] FAULT_INJECTION: forcing a failure. [ 94.032339][ T4734] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 94.047240][ T4734] CPU: 1 UID: 0 PID: 4734 Comm: syz.0.384 Not tainted syzkaller #0 PREEMPT(full) [ 94.047269][ T4734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.047339][ T4734] Call Trace: [ 94.047346][ T4734] [ 94.047354][ T4734] __dump_stack+0x1d/0x30 [ 94.047382][ T4734] dump_stack_lvl+0x95/0xd0 [ 94.047407][ T4734] dump_stack+0x15/0x1b [ 94.047430][ T4734] should_fail_ex+0x263/0x280 [ 94.047492][ T4734] should_fail+0xb/0x20 [ 94.047512][ T4734] should_fail_usercopy+0x1a/0x20 [ 94.047537][ T4734] _copy_to_user+0x20/0xa0 [ 94.047651][ T4734] simple_read_from_buffer+0xb5/0x130 [ 94.047674][ T4734] proc_fail_nth_read+0x10e/0x150 [ 94.047705][ T4734] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.047751][ T4734] vfs_read+0x1ab/0x7f0 [ 94.047821][ T4734] ? __rcu_read_unlock+0x4e/0x70 [ 94.047843][ T4734] ? __fget_files+0x184/0x1c0 [ 94.047867][ T4734] ? mutex_lock+0x57/0x90 [ 94.047925][ T4734] ksys_read+0xdc/0x1a0 [ 94.047958][ T4734] __x64_sys_read+0x40/0x50 [ 94.048048][ T4734] x64_sys_call+0x2886/0x3020 [ 94.048117][ T4734] do_syscall_64+0x12c/0x370 [ 94.048138][ T4734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.048161][ T4734] RIP: 0033:0x7ff4e10bcfce [ 94.048179][ T4734] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 94.048257][ T4734] RSP: 002b:00007ff4dfb56fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.048279][ T4734] RAX: ffffffffffffffda RBX: 00007ff4dfb576c0 RCX: 00007ff4e10bcfce [ 94.048294][ T4734] RDX: 000000000000000f RSI: 00007ff4dfb570a0 RDI: 0000000000000004 [ 94.048307][ T4734] RBP: 00007ff4dfb57090 R08: 0000000000000000 R09: 0000000000000000 [ 94.048321][ T4734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.048333][ T4734] R13: 00007ff4e1376038 R14: 00007ff4e1375fa0 R15: 00007ffd89cdb938 [ 94.048354][ T4734] [ 94.048572][ T4724] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.206541][ T28] audit: type=1400 audit(1772261038.077:287): avc: denied { read write } for pid=4739 comm="syz.0.386" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 94.257389][ T4724] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.381: mark inode dirty (error -117) [ 94.258072][ T28] audit: type=1400 audit(1772261038.087:288): avc: denied { open } for pid=4739 comm="syz.0.386" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 94.258110][ T28] audit: type=1400 audit(1772261038.127:289): avc: denied { setopt } for pid=4739 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.398907][ T4724] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.400634][ T4724] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 94.450760][ T4724] EXT4-fs (loop3): 1 orphan inode deleted [ 94.473793][ T4724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 94.473985][ T4743] loop1: detected capacity change from 0 to 512 [ 94.489529][ T4743] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.706659][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.865801][ T4750] loop0: detected capacity change from 0 to 512 [ 94.882708][ T4750] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.028089][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.448230][ T3536] Bluetooth: hci0: command 0x1003 tx timeout [ 95.531265][ T4752] netlink: 40 bytes leftover after parsing attributes in process `syz.2.389'. [ 95.788358][ T28] audit: type=1400 audit(1772261039.657:290): avc: denied { create } for pid=4753 comm="syz.3.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 95.880365][ T28] audit: type=1400 audit(1772261039.697:291): avc: denied { append } for pid=4753 comm="syz.3.390" name="vsock" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.942091][ T4760] syzkaller0: entered promiscuous mode [ 95.983743][ T4760] syzkaller0: entered allmulticast mode [ 96.031792][ T4760] 0: reclassify loop, rule prio 0, protocol 800 [ 96.115290][ T4769] netlink: 388 bytes leftover after parsing attributes in process `syz.3.396'. [ 96.194034][ T28] audit: type=1400 audit(1772261040.067:292): avc: denied { read write } for pid=4770 comm="syz.3.397" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 96.239154][ T4771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.397'. [ 96.257184][ T4771] netlink: 196 bytes leftover after parsing attributes in process `syz.3.397'. [ 96.269573][ T28] audit: type=1400 audit(1772261040.097:293): avc: denied { open } for pid=4770 comm="syz.3.397" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 96.319583][ T4771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.397'. [ 96.353663][ T4771] netlink: 196 bytes leftover after parsing attributes in process `syz.3.397'. [ 96.368111][ T28] audit: type=1400 audit(1772261040.097:294): avc: denied { ioctl } for pid=4770 comm="syz.3.397" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 96.542138][ T28] audit: type=1400 audit(1772261040.417:295): avc: denied { mount } for pid=4778 comm="syz.2.400" name="/" dev="hugetlbfs" ino=9218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 96.596376][ T4779] loop2: detected capacity change from 0 to 512 [ 96.664145][ T28] audit: type=1400 audit(1772261040.467:296): avc: denied { mounton } for pid=4778 comm="syz.2.400" path="/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="hugetlbfs" ino=9235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 96.728549][ T4779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.728724][ T4779] ext4 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.729394][ T4779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.087376][ T4785] loop0: detected capacity change from 0 to 1764 [ 97.330629][ T4803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.605553][ T4785] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 97.768781][ T4785] isofs_fill_super: get root inode failed [ 97.819087][ T4807] x_tables: duplicate underflow at hook 2 [ 97.909700][ T4808] hub 8-0:1.0: USB hub found [ 97.914494][ T4808] hub 8-0:1.0: 8 ports detected [ 98.146904][ T4810] syzkaller0: entered promiscuous mode [ 98.163701][ T4810] syzkaller0: entered allmulticast mode [ 98.191172][ T4810] 0: reclassify loop, rule prio 0, protocol 800 [ 98.326305][ T4812] loop1: detected capacity change from 0 to 512 [ 98.353583][ T4812] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.408: invalid indirect mapped block 4294967295 (level 1) [ 98.405910][ T4812] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 98.406033][ T4812] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.408: invalid indirect mapped block 4294967295 (level 1) [ 98.415239][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 98.415259][ C1] EXT4-fs (loop1): initial error at time 1772261042: ext4_free_branches:1023: inode 11 [ 98.415293][ C1] EXT4-fs (loop1): last error at time 1772261042: ext4_free_branches:1023: inode 11 [ 98.554567][ T4812] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 98.554862][ T4812] EXT4-fs (loop1): 2 truncates cleaned up [ 98.570298][ T4812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.624036][ T4815] process 'syz.3.409' launched '/dev/fd/3' with NULL argv: empty string added [ 98.650490][ T4785] loop0: detected capacity change from 0 to 8192 [ 98.682614][ T4818] loop2: detected capacity change from 0 to 256 [ 98.690660][ T4815] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 98.735227][ T4820] loop4: detected capacity change from 0 to 1024 [ 98.788425][ T4820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.802394][ T3920] loop0: p1 p2 p3 p4 [ 98.807281][ T4820] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.411: missing EA_INODE flag [ 98.822436][ T3920] loop0: p3 size 251658240 extends beyond EOD, truncated [ 98.834595][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.840026][ T4820] EXT4-fs (loop4): Remounting filesystem read-only [ 98.846212][ T3920] loop0: p4 size 262144 extends beyond EOD, [ 98.850733][ T4820] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 98.856882][ T3920] truncated [ 98.909672][ T4785] loop0: p1 p2 p3 p4 [ 98.914002][ T3314] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 98.918655][ T4785] loop0: p3 size 251658240 extends beyond EOD, truncated [ 98.922331][ T3314] FAT-fs (loop2): Filesystem has been set read-only [ 98.936151][ T3314] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 98.967806][ T4785] loop0: p4 size 262144 extends beyond EOD, truncated [ 99.273358][ T4839] loop3: detected capacity change from 0 to 512 [ 99.287349][ T4839] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.024287][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 100.039829][ T3920] udevd[3920]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 100.050779][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 100.061826][ T4509] udevd[4509]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 100.074868][ T3900] udevd[3900]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 100.092089][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 100.103453][ T3920] udevd[3920]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 100.116367][ T4509] udevd[4509]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 100.128745][ T3900] udevd[3900]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 100.157943][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 100.157960][ T28] audit: type=1400 audit(1772261044.037:309): avc: denied { module_request } for pid=4841 comm="syz.0.417" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 100.190562][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.252713][ T4846] syzkaller0: entered promiscuous mode [ 100.258563][ T4846] syzkaller0: entered allmulticast mode [ 100.266646][ T4850] syzkaller0: entered promiscuous mode [ 100.272550][ T4850] syzkaller0: entered allmulticast mode [ 100.292239][ T4850] 0: reclassify loop, rule prio 0, protocol 800 [ 100.302946][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.399070][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.473814][ T4855] loop1: detected capacity change from 0 to 736 [ 100.506543][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.601389][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.725667][ T50] bridge_slave_1: left allmulticast mode [ 100.743265][ T50] bridge_slave_1: left promiscuous mode [ 100.756284][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.771549][ T50] bridge_slave_0: left allmulticast mode [ 100.782566][ T50] bridge_slave_0: left promiscuous mode [ 100.794595][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.901622][ T28] audit: type=1326 audit(1772261044.307:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94490c799 code=0x7ffc0000 [ 100.924944][ T28] audit: type=1326 audit(1772261044.307:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94490c799 code=0x7ffc0000 [ 100.945253][ T4881] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 100.948333][ T28] audit: type=1326 audit(1772261044.307:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd94490c799 code=0x7ffc0000 [ 100.979296][ T4881] audit: out of memory in audit_log_start [ 101.018936][ T28] audit: type=1326 audit(1772261044.307:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94490c799 code=0x7ffc0000 [ 101.042434][ T28] audit: type=1326 audit(1772261044.307:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd94490c799 code=0x7ffc0000 [ 101.066420][ T28] audit: type=1326 audit(1772261044.307:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94490c799 code=0x7ffc0000 [ 101.090977][ T28] audit: type=1326 audit(1772261044.307:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd94490c799 code=0x7ffc0000 [ 101.115516][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.125844][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.135561][ T50] bond0 (unregistering): Released all slaves [ 101.143933][ T50] bond1 (unregistering): Released all slaves [ 101.168845][ T4856] chnl_net:caif_netlink_parms(): no params data found [ 101.199806][ T50] hsr_slave_0: left promiscuous mode [ 101.205153][ T50] hsr_slave_1: left promiscuous mode [ 101.205495][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.219030][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.219433][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.264753][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.376435][ T4910] loop3: detected capacity change from 0 to 1764 [ 101.410995][ T4910] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 101.440383][ T4910] isofs_fill_super: get root inode failed [ 101.468648][ T50] veth1_macvtap: left promiscuous mode [ 101.491561][ T50] veth0_macvtap: left promiscuous mode [ 101.500560][ T50] veth1_vlan: left promiscuous mode [ 101.507155][ T50] veth0_vlan: left promiscuous mode [ 101.635648][ T4910] loop3: detected capacity change from 0 to 8192 [ 101.655535][ T4915] loop0: detected capacity change from 0 to 8192 [ 101.662902][ T50] team0 (unregistering): Port device team_slave_1 removed [ 101.673636][ T50] team0 (unregistering): Port device team_slave_0 removed [ 101.706950][ T4910] loop3: p1 p2 p3 p4 [ 101.707727][ T3920] loop0: p2 p3 [ 101.720419][ T3920] loop0: p2 start 16777216 is beyond EOD, truncated [ 101.730538][ T4910] loop3: p3 size 251658240 extends beyond EOD, truncated [ 101.737950][ T3920] loop0: p3 size 196608 extends beyond EOD, truncated [ 101.757007][ T4910] loop3: p4 size 262144 extends beyond EOD, truncated [ 101.760454][ T4916] syzkaller0: entered promiscuous mode [ 101.771412][ T4915] loop0: p2 p3 [ 101.774973][ T4915] loop0: p2 start 16777216 is beyond EOD, truncated [ 101.792408][ T4915] loop0: p3 size 196608 extends beyond EOD, truncated [ 101.820249][ T4916] syzkaller0: entered allmulticast mode [ 102.008474][ T3900] udevd[3900]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 102.083193][ T4856] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.103323][ T4856] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.118804][ T4856] bridge_slave_0: entered allmulticast mode [ 102.326349][ T4943] loop1: detected capacity change from 0 to 512 [ 102.345788][ T4943] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 102.996489][ T4966] tmpfs: Bad value for 'mpol' [ 103.003724][ T4966] netlink: 32 bytes leftover after parsing attributes in process `syz.3.443'. [ 103.074234][ T4856] bridge_slave_0: entered promiscuous mode [ 103.082556][ T4856] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.090832][ T4856] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.104822][ T4856] bridge_slave_1: entered allmulticast mode [ 103.112566][ T4856] bridge_slave_1: entered promiscuous mode [ 103.134004][ T4945] syzkaller0: entered promiscuous mode [ 103.147224][ T4945] syzkaller0: entered allmulticast mode [ 103.203641][ T4856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.228784][ T4856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.288679][ T4856] team0: Port device team_slave_0 added [ 103.320309][ T4856] team0: Port device team_slave_1 added [ 103.385207][ T4856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.403523][ T4856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.453905][ T4856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.500183][ T4856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.521668][ T4856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.549805][ T4856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.650886][ T4856] hsr_slave_0: entered promiscuous mode [ 103.662510][ T4856] hsr_slave_1: entered promiscuous mode [ 103.676688][ T4856] debugfs: 'hsr0' already exists in 'hsr' [ 103.689210][ T4856] Cannot create hsr debugfs directory [ 103.730616][ T5000] syzkaller0: entered promiscuous mode [ 103.741236][ T5002] mmap: syz.0.446 (5002) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.753208][ T5000] syzkaller0: entered allmulticast mode [ 103.912311][ T5016] netlink: 388 bytes leftover after parsing attributes in process `syz.4.449'. [ 103.919173][ T4997] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 104.076632][ T4856] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.472888][ T4997] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.503610][ T4997] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.758519][ T4856] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.767234][ T4856] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.809930][ T4856] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.951385][ T4856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.986430][ T4856] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.031556][ T5071] syzkaller0: entered promiscuous mode [ 105.107500][ T5072] loop1: detected capacity change from 0 to 512 [ 105.122444][ T5072] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.136148][ T5071] syzkaller0: entered allmulticast mode [ 105.574272][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.581567][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.865798][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.872920][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.890675][ T5077] netlink: 388 bytes leftover after parsing attributes in process `syz.3.460'. [ 106.006453][ T5083] FAULT_INJECTION: forcing a failure. [ 106.006453][ T5083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.029386][ T4856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.046487][ T5083] CPU: 1 UID: 0 PID: 5083 Comm: syz.0.462 Not tainted syzkaller #0 PREEMPT(full) [ 106.046585][ T5083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.046598][ T5083] Call Trace: [ 106.046605][ T5083] [ 106.046614][ T5083] __dump_stack+0x1d/0x30 [ 106.046677][ T5083] dump_stack_lvl+0x95/0xd0 [ 106.046700][ T5083] dump_stack+0x15/0x1b [ 106.046719][ T5083] should_fail_ex+0x263/0x280 [ 106.046744][ T5083] should_fail+0xb/0x20 [ 106.046813][ T5083] should_fail_usercopy+0x1a/0x20 [ 106.046842][ T5083] _copy_from_user+0x1c/0xb0 [ 106.046869][ T5083] __copy_msghdr+0x244/0x300 [ 106.046900][ T5083] ___sys_sendmsg+0x10c/0x1e0 [ 106.047019][ T5083] __x64_sys_sendmsg+0xd4/0x160 [ 106.047051][ T5083] x64_sys_call+0x194c/0x3020 [ 106.047126][ T5083] do_syscall_64+0x12c/0x370 [ 106.047208][ T5083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.047229][ T5083] RIP: 0033:0x7ff4e10fc799 [ 106.047246][ T5083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.047265][ T5083] RSP: 002b:00007ff4dfb57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.047288][ T5083] RAX: ffffffffffffffda RBX: 00007ff4e1375fa0 RCX: 00007ff4e10fc799 [ 106.047376][ T5083] RDX: 0000000000000884 RSI: 0000200000000380 RDI: 0000000000000003 [ 106.047391][ T5083] RBP: 00007ff4dfb57090 R08: 0000000000000000 R09: 0000000000000000 [ 106.047404][ T5083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.047417][ T5083] R13: 00007ff4e1376038 R14: 00007ff4e1375fa0 R15: 00007ffd89cdb938 [ 106.047509][ T5083] [ 106.317285][ T5095] netlink: 'syz.4.465': attribute type 1 has an invalid length. [ 106.388972][ T5095] bond1: entered promiscuous mode [ 106.394107][ T5095] bond1: entered allmulticast mode [ 106.399846][ T5095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.436033][ T5105] macvlan2: entered promiscuous mode [ 106.443750][ T5105] macvlan2: entered allmulticast mode [ 106.450971][ T5105] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 106.521480][ T4856] veth0_vlan: entered promiscuous mode [ 106.538513][ T4856] veth1_vlan: entered promiscuous mode [ 106.579493][ T4856] veth0_macvtap: entered promiscuous mode [ 106.600368][ T4856] veth1_macvtap: entered promiscuous mode [ 106.626803][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 106.626818][ T28] audit: type=1400 audit(1772261050.497:374): avc: denied { create } for pid=5114 comm="syz.4.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.656643][ T4856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.685957][ T4856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.708557][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.717800][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.726552][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.737563][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.779041][ T28] audit: type=1400 audit(1772261050.657:375): avc: denied { mounton } for pid=4856 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 106.989076][ T5134] loop5: detected capacity change from 0 to 1764 [ 107.001994][ T5134] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 107.011403][ T5134] isofs_fill_super: get root inode failed [ 107.058785][ T5132] loop5: detected capacity change from 0 to 8192 [ 107.087451][ T3900] loop5: p1 p2 p3 p4 [ 107.092650][ T3900] loop5: p3 size 251658240 extends beyond EOD, truncated [ 107.100651][ T3900] loop5: p4 size 262144 extends beyond EOD, truncated [ 107.111292][ T5132] loop5: p1 p2 p3 p4 [ 107.116365][ T5132] loop5: p3 size 251658240 extends beyond EOD, truncated [ 107.124167][ T5132] loop5: p4 size 262144 extends beyond EOD, truncated [ 107.265941][ T5139] syzkaller0: entered promiscuous mode [ 107.271833][ T5139] syzkaller0: entered allmulticast mode [ 107.408483][ T5144] netlink: 'syz.0.475': attribute type 29 has an invalid length. [ 107.421037][ T5143] netlink: 'syz.0.475': attribute type 29 has an invalid length. [ 107.429280][ T5143] netlink: 500 bytes leftover after parsing attributes in process `syz.0.475'. [ 107.439029][ T5143] unsupported nla_type 58 [ 107.444990][ T28] audit: type=1400 audit(1772261051.317:376): avc: denied { create } for pid=5142 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 107.464566][ T28] audit: type=1400 audit(1772261051.317:377): avc: denied { write } for pid=5142 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 107.772076][ T28] audit: type=1400 audit(1772261051.647:378): avc: denied { block_suspend } for pid=5151 comm="syz.5.478" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.837371][ T5152] loop5: detected capacity change from 0 to 512 [ 107.847319][ T5152] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.856597][ T5152] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 107.865000][ T5152] System zones: 1-2, 4-12, 8-8 [ 107.870496][ T5152] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.478: iget: bad i_size value: 38620345925642 [ 107.883083][ T5152] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 107.884117][ T5152] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.478: couldn't read orphan inode 15 (err -117) [ 107.893321][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 107.893342][ C0] EXT4-fs (loop5): initial error at time 1772261051: ext4_orphan_get:1391: inode 15 [ 107.893362][ C0] EXT4-fs (loop5): last error at time 1772261051: ext4_orphan_get:1391: inode 15 [ 107.930220][ T5152] loop5: lost filesystem error report for type 5 error -117 [ 107.930658][ T5152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.953453][ T28] audit: type=1400 audit(1772261051.827:379): avc: denied { read write open } for pid=5151 comm="syz.5.478" path="/2/file1/file1" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 108.442324][ T28] audit: type=1400 audit(1772261052.317:380): avc: denied { write } for pid=5156 comm="syz.4.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.515130][ T28] audit: type=1400 audit(1772261052.387:381): avc: denied { write } for pid=5156 comm="syz.4.479" name="tcp6" dev="proc" ino=4026532967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 108.561492][ T28] audit: type=1400 audit(1772261052.437:382): avc: denied { ioctl } for pid=5156 comm="syz.4.479" path="socket:[9796]" dev="sockfs" ino=9796 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.749090][ T5165] loop0: detected capacity change from 0 to 512 [ 108.767605][ T5165] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.114301][ T5166] loop4: detected capacity change from 0 to 512 [ 109.159581][ T5166] EXT4-fs: Ignoring removed nobh option [ 109.215463][ T5166] EXT4-fs (loop4): orphan cleanup on readonly fs [ 109.247246][ T5166] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.482: EA inode hash validation failed [ 109.295352][ T5166] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 109.313015][ T5166] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.482: corrupted inode contents [ 109.326292][ T5166] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 109.327522][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 109.344382][ C0] EXT4-fs (loop4): initial error at time 1772261053: ext4_do_update_inode:5569: inode 15 [ 109.355637][ C0] EXT4-fs (loop4): last error at time 1772261053: ext4_do_update_inode:5569: inode 15 [ 109.372338][ T5166] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.482: mark_inode_dirty error [ 109.388392][ T5166] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 109.389622][ T5166] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.482: corrupted inode contents [ 109.412452][ T5166] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 109.413874][ T5166] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.482: mark_inode_dirty error [ 109.437441][ T5166] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 109.438486][ T5166] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #15: comm syz.4.482: mark inode dirty (error -117) [ 109.462546][ T5166] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 109.464076][ T5166] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 109.486742][ T5166] EXT4-fs (loop4): 1 orphan inode deleted [ 109.502193][ T5166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 109.591571][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.764391][ T5120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.808286][ T4856] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.850894][ T5171] syzkaller0: entered promiscuous mode [ 109.856549][ T5171] syzkaller0: entered allmulticast mode [ 109.908614][ T5173] syzkaller1: entered promiscuous mode [ 109.914207][ T5173] syzkaller1: entered allmulticast mode [ 109.986275][ T5175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.487'. [ 110.404064][ T5198] loop5: detected capacity change from 0 to 512 [ 110.419229][ T5198] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 111.164455][ T5218] syzkaller1: entered promiscuous mode [ 111.177800][ T5218] syzkaller1: entered allmulticast mode [ 111.285943][ T5228] FAULT_INJECTION: forcing a failure. [ 111.285943][ T5228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.322738][ T5228] CPU: 0 UID: 0 PID: 5228 Comm: syz.3.500 Not tainted syzkaller #0 PREEMPT(full) [ 111.322797][ T5228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 111.322809][ T5228] Call Trace: [ 111.322817][ T5228] [ 111.322826][ T5228] __dump_stack+0x1d/0x30 [ 111.322859][ T5228] dump_stack_lvl+0x95/0xd0 [ 111.322880][ T5228] dump_stack+0x15/0x1b [ 111.322916][ T5228] should_fail_ex+0x263/0x280 [ 111.322942][ T5228] should_fail+0xb/0x20 [ 111.322961][ T5228] should_fail_usercopy+0x1a/0x20 [ 111.323051][ T5228] _copy_from_iter+0xcf/0xea0 [ 111.323128][ T5228] ? __alloc_skb+0x4f6/0x690 [ 111.323269][ T5228] ? __alloc_skb+0x200/0x690 [ 111.323295][ T5228] netlink_sendmsg+0x4ae/0x6f0 [ 111.323392][ T5228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.323455][ T5228] ____sys_sendmsg+0x5af/0x600 [ 111.323488][ T5228] ___sys_sendmsg+0x195/0x1e0 [ 111.323549][ T5228] __x64_sys_sendmsg+0xd4/0x160 [ 111.323578][ T5228] x64_sys_call+0x194c/0x3020 [ 111.323608][ T5228] do_syscall_64+0x12c/0x370 [ 111.323628][ T5228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.323713][ T5228] RIP: 0033:0x7f6e7d24c799 [ 111.323732][ T5228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.323754][ T5228] RSP: 002b:00007f6e7bc9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.323777][ T5228] RAX: ffffffffffffffda RBX: 00007f6e7d4c5fa0 RCX: 00007f6e7d24c799 [ 111.323794][ T5228] RDX: 0000000024008084 RSI: 0000200000000300 RDI: 0000000000000004 [ 111.323838][ T5228] RBP: 00007f6e7bc9f090 R08: 0000000000000000 R09: 0000000000000000 [ 111.323850][ T5228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.323862][ T5228] R13: 00007f6e7d4c6038 R14: 00007f6e7d4c5fa0 R15: 00007ffde3bfef48 [ 111.323881][ T5228] [ 111.627324][ T28] audit: type=1400 audit(1772261055.507:383): avc: denied { create } for pid=5229 comm="syz.3.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 111.661220][ T28] audit: type=1400 audit(1772261055.527:384): avc: denied { write } for pid=5229 comm="syz.3.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 112.075522][ T5236] loop3: detected capacity change from 0 to 512 [ 112.089272][ T5236] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 113.174069][ T5257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.508'. [ 113.316421][ T5261] syzkaller1: entered promiscuous mode [ 113.322017][ T5261] syzkaller1: entered allmulticast mode [ 113.389569][ T5263] loop5: detected capacity change from 0 to 512 [ 113.401479][ T5263] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.511: invalid indirect mapped block 256 (level 2) [ 113.415004][ T5263] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 113.415445][ T5263] EXT4-fs (loop5): 2 truncates cleaned up [ 113.424639][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 113.424663][ C0] EXT4-fs (loop5): initial error at time 1772261057: ext4_free_branches:1023: inode 11 [ 113.424696][ C0] EXT4-fs (loop5): last error at time 1772261057: ext4_free_branches:1023: inode 11 [ 113.458840][ T5263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.473958][ T28] audit: type=1400 audit(1772261057.347:385): avc: denied { create } for pid=5262 comm="syz.5.511" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 113.474088][ T5263] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.511: bg 0: block 5: invalid block bitmap [ 113.698033][ T3413] IPVS: starting estimator thread 0... [ 113.811295][ T5268] IPVS: using max 2640 ests per chain, 132000 per kthread [ 114.111872][ T5213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.448591][ T5286] loop3: detected capacity change from 0 to 512 [ 114.463738][ T5286] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.058228][ T4856] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.412425][ T5300] loop5: detected capacity change from 0 to 512 [ 115.471608][ T5300] EXT4-fs: Ignoring removed nobh option [ 115.601863][ T5300] EXT4-fs (loop5): orphan cleanup on readonly fs [ 115.628694][ T5300] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.518: EA inode hash validation failed [ 115.680003][ T5300] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.518: corrupted inode contents [ 115.724568][ T5300] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 115.724807][ T5300] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.518: mark_inode_dirty error [ 115.734046][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 115.734084][ C1] EXT4-fs (loop5): initial error at time 1772261059: ext4_do_update_inode:5569: inode 15 [ 115.734116][ C1] EXT4-fs (loop5): last error at time 1772261059: ext4_do_update_inode:5569: inode 15 [ 115.930615][ T5300] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 115.930832][ T5300] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.518: corrupted inode contents [ 115.955129][ T5315] syzkaller1: entered promiscuous mode [ 115.978356][ T5300] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 115.981112][ T5300] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.518: mark_inode_dirty error [ 115.999626][ T5315] syzkaller1: entered allmulticast mode [ 116.002480][ T5300] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 116.010930][ T5300] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.518: mark inode dirty (error -117) [ 116.036786][ T5300] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 116.037042][ T5300] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 116.055356][ T5300] EXT4-fs (loop5): 1 orphan inode deleted [ 116.061722][ T5300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 116.271134][ T4856] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.330451][ T5342] netlink: 356 bytes leftover after parsing attributes in process `syz.5.525'. [ 116.452471][ T5361] loop5: detected capacity change from 0 to 1024 [ 116.464137][ T5361] EXT4-fs: Ignoring removed oldalloc option [ 116.470790][ T5361] EXT4-fs: Ignoring removed bh option [ 116.495651][ T5361] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.768033][ T5361] ================================================================== [ 116.776147][ T5361] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 116.785602][ T5361] [ 116.787914][ T5361] read to 0xffff88811cf76c00 of 1024 bytes by task 36 on cpu 1: [ 116.795530][ T5361] copy_folio_from_iter_atomic+0x75f/0x1170 [ 116.801422][ T5361] generic_perform_write+0x2c1/0x490 [ 116.806703][ T5361] shmem_file_write_iter+0xc5/0xf0 [ 116.811812][ T5361] lo_rw_aio+0x67d/0x730 [ 116.816058][ T5361] loop_process_work+0x56c/0xac0 [ 116.820990][ T5361] loop_workfn+0x31/0x40 [ 116.825244][ T5361] process_scheduled_works+0x4de/0x9e0 [ 116.830705][ T5361] worker_thread+0x581/0x770 [ 116.835306][ T5361] kthread+0x22a/0x280 [ 116.839370][ T5361] ret_from_fork+0x150/0x360 [ 116.843991][ T5361] ret_from_fork_asm+0x1a/0x30 [ 116.848770][ T5361] [ 116.851085][ T5361] write to 0xffff88811cf76df0 of 20 bytes by task 5361 on cpu 0: [ 116.858799][ T5361] copy_folio_from_iter_atomic+0x75f/0x1170 [ 116.864703][ T5361] generic_perform_write+0x2c1/0x490 [ 116.870081][ T5361] ext4_buffered_write_iter+0x1ee/0x3c0 [ 116.875627][ T5361] ext4_file_write_iter+0x380/0xfa0 [ 116.880822][ T5361] iter_file_splice_write+0x6c4/0xa80 [ 116.886205][ T5361] direct_splice_actor+0x156/0x2a0 [ 116.891311][ T5361] splice_direct_to_actor+0x311/0x670 [ 116.896723][ T5361] do_splice_direct+0x119/0x1a0 [ 116.901565][ T5361] do_sendfile+0x382/0x650 [ 116.905976][ T5361] __x64_sys_sendfile64+0x105/0x150 [ 116.911175][ T5361] x64_sys_call+0x2dc4/0x3020 [ 116.915863][ T5361] do_syscall_64+0x12c/0x370 [ 116.920462][ T5361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.926353][ T5361] [ 116.928666][ T5361] Reported by Kernel Concurrency Sanitizer on: [ 116.934804][ T5361] CPU: 0 UID: 0 PID: 5361 Comm: syz.5.529 Not tainted syzkaller #0 PREEMPT(full) [ 116.943997][ T5361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 116.954057][ T5361] ================================================================== [ 117.213814][ T5361] ================================================================== [ 117.221943][ T5361] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 117.229972][ T5361] [ 117.232313][ T5361] write to 0xffff88811b00dccc of 4 bytes by task 5375 on cpu 1: [ 117.239967][ T5361] xas_set_mark+0x12b/0x140 [ 117.244491][ T5361] tag_pages_for_writeback+0xe3/0x2e0 [ 117.249889][ T5361] ext4_do_writepages+0x6b9/0x2840 [ 117.255025][ T5361] ext4_writepages+0x18f/0x320 [ 117.259801][ T5361] do_writepages+0x1c6/0x310 [ 117.264419][ T5361] file_write_and_wait_range+0x178/0x2f0 [ 117.270088][ T5361] generic_buffers_fsync_noflush+0x45/0x130 [ 117.276016][ T5361] ext4_sync_file+0x1aa/0x6b0 [ 117.280705][ T5361] vfs_fsync_range+0xc5/0xe0 [ 117.285327][ T5361] ext4_buffered_write_iter+0x34f/0x3c0 [ 117.290910][ T5361] ext4_file_write_iter+0x380/0xfa0 [ 117.295664][ T5375] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.529: Allocating blocks 1-17 which overlap fs metadata [ 117.296126][ T5361] iter_file_splice_write+0x6c4/0xa80 [ 117.314963][ T5361] direct_splice_actor+0x156/0x2a0 [ 117.320106][ T5361] splice_direct_to_actor+0x311/0x670 [ 117.325507][ T5361] do_splice_direct+0x119/0x1a0 [ 117.325535][ T5361] do_sendfile+0x382/0x650 [ 117.334806][ T5361] __x64_sys_sendfile64+0x105/0x150 [ 117.340022][ T5361] x64_sys_call+0x2dc4/0x3020 [ 117.344727][ T5361] do_syscall_64+0x12c/0x370 [ 117.349346][ T5361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.355245][ T5361] [ 117.357569][ T5361] read to 0xffff88811b00dccc of 4 bytes by task 5361 on cpu 0: [ 117.365109][ T5361] file_write_and_wait_range+0x130/0x2f0 [ 117.370756][ T5361] generic_buffers_fsync_noflush+0x45/0x130 [ 117.376657][ T5361] ext4_sync_file+0x1aa/0x6b0 [ 117.381333][ T5361] vfs_fsync_range+0xc5/0xe0 [ 117.385926][ T5361] ext4_buffered_write_iter+0x34f/0x3c0 [ 117.391492][ T5361] ext4_file_write_iter+0x380/0xfa0 [ 117.396700][ T5361] iter_file_splice_write+0x6c4/0xa80 [ 117.402075][ T5361] direct_splice_actor+0x156/0x2a0 [ 117.407188][ T5361] splice_direct_to_actor+0x311/0x670 [ 117.412568][ T5361] do_splice_direct+0x119/0x1a0 [ 117.417452][ T5361] do_sendfile+0x382/0x650 [ 117.421875][ T5361] __x64_sys_sendfile64+0x105/0x150 [ 117.427076][ T5361] x64_sys_call+0x2dc4/0x3020 [ 117.431770][ T5361] do_syscall_64+0x12c/0x370 [ 117.436361][ T5361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.442255][ T5361] [ 117.444578][ T5361] value changed: 0x02000021 -> 0x04000021 [ 117.450295][ T5361] [ 117.452622][ T5361] Reported by Kernel Concurrency Sanitizer on: [ 117.458769][ T5361] CPU: 0 UID: 0 PID: 5361 Comm: syz.5.529 Not tainted syzkaller #0 PREEMPT(full) [ 117.467970][ T5361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.478028][ T5361] ================================================================== [ 117.504336][ T4856] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.460673][ T5349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512