last executing test programs: 7.326155602s ago: executing program 1 (id=917): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x40, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x18}, {0x0, 0x7, 0x0, 0x2, 0x1000000, 0x2, 0x2}, {0x1, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x40004}, 0xc000) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f0000000240)=0xe9, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4, 0x2}, @struct={0xa, 0xa, 0x0, 0x4, 0x1, 0x1, [{0x8, 0x5, 0x2}, {0xe, 0x0, 0x1ff}, {0xf, 0x3, 0x5}, {0x8, 0x2, 0x3}, {0x5, 0x4, 0x4}, {0xb, 0x3, 0x5}, {0x4, 0x2, 0xfc45}, {0x10, 0x1, 0x4e}, {0xe, 0x2, 0x7242b624}, {0xa, 0x5, 0x4}]}, @typedef={0x10, 0x0, 0x0, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0xca}, 0x28) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40000d1}, 0x40) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a000140063f0d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x70, 0x1, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x400}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x44140}, 0x20000000) close(0x3) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 7.045195568s ago: executing program 1 (id=918): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0x0, 0x0, 0x0, 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x90ff, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 7.044789898s ago: executing program 0 (id=919): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @sk_reuseport=0x78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x68f, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x888) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6bf0, 0x9}, 0x110060}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0xfffffffffffffebe) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="0000000000000001000080000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x64020600) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.02151707s ago: executing program 1 (id=920): r0 = gettid() signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb}) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000840)={[{@user_xattr}, {@usrjquota_path={'usrjquota', 0x3d, '\xe9\x1fq\x89Y\x1e\x923aK'}}, {@grpquota}, {@nombcache}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@usrjquota_path={'usrjquota', 0x3d, '\xe9\x1fq\x89Y\x1e\x923aK'}}, {@i_version}], [{@dont_hash}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}, 0x1, 0x59d, &(0x7f0000001100)="$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") flock(r2, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0xd}}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000100)={0x17c04, 0xffffffffffffffff, 0xb, 0x41000ff7ff, 0xc, 0x6d3}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48000) 6.149419241s ago: executing program 0 (id=925): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000540)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xc, 0x5}, 0x180b, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x501400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 6.049133247s ago: executing program 2 (id=926): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @sk_reuseport=0x78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x68f, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x888) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6bf0, 0x9}, 0x110060}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0xfffffffffffffebe) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="0000000000000001000080000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x64020600) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.012773079s ago: executing program 1 (id=927): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800082, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x1, 0x191, &(0x7f00000002c0)="$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") sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20040094}, 0x4) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x81, 0x7602, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) ptrace(0x4207, r1) unshare(0x22020400) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x29}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40), 0x0, 0x4000000) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1c0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") 6.008969019s ago: executing program 0 (id=929): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x16, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 5.837107409s ago: executing program 0 (id=930): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @sk_reuseport=0x78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x68f, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x888) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6bf0, 0x9}, 0x110060}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0xfffffffffffffebe) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="0000000000000001000080000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x64020600) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.778898929s ago: executing program 2 (id=932): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000100), 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674"], 0xf4}, 0x7ffffffe}, 0x10) 3.677067635s ago: executing program 2 (id=933): r0 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2014c00, &(0x7f0000000200)={[{@errors_remount}]}, 0x1, 0x4fc, &(0x7f00000003c0)="$eJzs3WFrHGkdAPD/TLKXtM25ORQ5C94dNpIe2t3k4t0FkfME0VcH6vk+xmQTQjbZkN3UJhRN8QMIIir4yle+EfwAgvQjiFDQ96JFEW1VENGO7OyENu1usjZptrf5/eDpPs88M/N/nmn22Z2dh5kAzq3XIuLdiBiJiNcjolwsT4u0UKT2evfv3VxqpySy7P2/JpEUyw721S6PRsSliNiPiPGI+NqXI76ZPBm3ubu3vliv17aLcrW1sVVt7u5dW9tYXK2t1jbn5mbfmn97/s35maxwon5ejoh3vnj3h9/72Zfe+dWnv/X7hT9f/Xa7WZ/7aKfdEbF0ogBt/35yUWffpfxYHGgfo+0TB3s+jBT9KQ26IQAA9GUqIq5ExCfy7//lGMm/zQEAAADDJPv8RPwnicgAAACAoZVGxEQkaaWY7zsRaVqpdObwfiQupvVGs/WplcbO5nK7LmIySunKWr02U8wVnoxS0i7P5vmH5TceK89FxEsR8YPyhbxcWWrUlwf94wcAAACcE5dePXz+/49ymucBAACAITPZswAAAAAMC6f8AAAAMPyc/wMAAMBQ+8p777VTdvAc7+XruzvrjevXlmvN9crGzlJlqbG9VVltNFbze/ZtHLe/eqOx9ZnY3LlRbdWarWpzd29ho7Gz2VpYO/QIbAAAAOAMvfTq7d8lEbH/2Qt5iuI+gACH/HHQDQBO08igGwAMzOigGwAMTOnYNYwQMOySY+p7Tt759em3BQAAeDamP/bk9f8XirrjfxsAPsjM9QGA88fVPTi/SmYAwrk31XkZ61U/Hj0mAfR9/T/LnqphAADAqZnIU5JWimuBE5GmlUrEi/ljAUrJylq9NhMRH4qI35ZLY+3ybL5lcuycYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAIChFpH+Kcnv5h8xXZ6aePz3gReSf5XjblH4yfs/urHYam3Ptpf/rZzXR0Trx8XyNzKPBAAAAIDnQOc8vXidHXRrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg29+/dXDpIZxn3L1+IiMlu8UdjPH8dj1JEXPx7EqOPbJdExMgpxN+/FREvd4ufxIMsyyaLVnSLf+EZx5/MD033+GlEXDqF+HCe3W6PP+92e/+l8Vr+2v39N1qkk+o9/qV55H/GeD7OdRt/Xuwrwq24fOcX1Z7xb0VcHu0+/hyMv0mP+Ff67OM3vr6316su+2nEdNfPn+RQrGprY6va3N27traxuFpbrW3Ozc2+Nf/2/JvzM9WVtXqt+LdrjO9//JcPjur/xR7xJ4/p/1Sf/f/vnRv3PtzJlrrFv3ql++fvyz3ip8Vn3yeLfLt++iC/38k/6pWf/+aVo/q/3KP/x/3/X+2z/69/9bt/6HNVAOAMNHf31hfr9dr2EZnxPtaRkTmcGYuI/rfKvtP5ezxZ0J6bp0+3w+x5OZj/fybihPvpMWCMneXoBAAAnKaHX/oH3RIAAAAAAAAAAAAAAAAAAAA4v87ibmSPx9wfTFcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI70vwAAAP//7j7dxQ==") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000240)={'veth0_macvtap\x00', 0x61}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_timeval(r1, 0x1, 0x4a, &(0x7f0000abaff9), 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @remote}, 0x14) sendmmsg$sock(r2, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14, 0x1, 0x24, 0x1}}], 0x18}}], 0x1, 0x20000874) io_getevents(0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x3, 0x0, 0x6, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0xfffc, 0x0, 0x4, 0x6916, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x11dc, &(0x7f0000001280)="$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") socket$nl_route(0x10, 0x3, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x2, r4, 0xffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) getgroups(0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff]) r9 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000380)={'fscrypt:', @desc3}, &(0x7f00000003c0)={0x0, "98bcb94a4fdb3c8d33f986d2b6572f61fda1b1a60174e5015d5352217a274cd410ea0c76b32ac45e65b92df28b6f297396c8569e175ad27f118f7a96f5f9264a", 0x2c}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r9, 0x0, r8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x7, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f0000000240)="98750f50aade73db0f0100008005f4ea", 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) close(r7) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000002005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x4) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="b18753e3000b3a7df2ccedeb91df936a99c469d14146c3bfdbcb5e6874e1eb09e64701cdd774c12be852bf", 0x2b}], 0x1, 0x8) 3.362619564s ago: executing program 3 (id=934): r0 = socket(0x1e, 0x1, 0x0) r1 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) waitid(0x0, 0x0, 0x0, 0x80000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="4c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4000800}, 0x14008000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x10, 0x2, 0x0, &(0x7f0000003240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0x353, @time={0x95}}) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r6, 0x10f, 0x85) syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00') finit_module(r1, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080), 0x2000011a) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', 0x0}) mlockall(0x7) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x400454a4, 0x0) 3.347063614s ago: executing program 1 (id=935): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000040)=0x28) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000080)={0x0, 0x0, "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", "b4d2c9c22276e1989192e0316b85459e54a4f6fb7f407fa7b1fdb692f58b64b84cf46a1146b61b7ef86046b2c008402f5c251fda31ca5cdbbdec1e725b8cb409485afcd1e1ff112e14c6cac641925c249af70c423965c34608dc8c5f4546ff1c02646013cb0b65c4e1299051b280326fbe2f45e02b2b9f7fade8c6e196add7754b3753a2da9a48649605a9fb2ce9a9f5af8dd87e3672eb8165efe1801c71bc46835ede3c4e806c0cc4934f9ea3e71baf8fb434b79b858efa595ce47098d46e30f1258cbff69117c70a34bdb51cf0fd981ed7c0811f3bcdcf9fcf1ba7d5e336f7f9d943cd6df53d8fb2d2f0c801fdacfe04b7f7ffb6290a7a691724a25fe6b8838114e884a9cac7c3c1bde75bea95a470fecf2b693ce4e0c522491e8ecfe5680d64bdd3dad89000e66f80fb8b12dff335432690cdb6d830f65b273b114732e0b6a48d89262b3899b9c42635e00b642f67164030c23ce9727792066b0a0139c8cb4b6c07282227bf104b3d1c98efc1135dec196edd894d308e02c668a3fe12cd5fe996eba7ce0718f2598d06c2fb28bebc747070e2d04604fd6affe248e166c5d5865396aca3b961b107297849fbed183055f635683d90c2be252669e2ed78d602883d3b1325eff325ea2a920c65cbeea16a3a02ab3e61ede270b15c3a4fe9bb27f27cad487d662e88b0d8f7314299e588e2801449e1f91f93cc719645bb72d1870e85003dd02bac3b39c6317fe4b0114a7d965e1673b3bbc239c9f216f115611ec73acac51fb4f289ec57867aee6a5231cf83fc1c837bcffc359694d8f07a1d03fe285f70e9a7b0b3537a4c47d72154bab60ecc94e52d65e71d75a1d56d4bd5e339df0252391e82040a7238d78f46d81c7042678768a1ce710d01cf112354795f51562bb494a5cb28ef487828ac3f422a8409711d722be2d5de78ff624faf320617704251e1e27518c335c623da3d8b5fcc9295d01267ff698e9389bd8ffa091a95b60a0173a255a4e8b5771c631fe79531ce1d663fc46ea00db10c29ba3c4139d9bedddc4686c684e719ac8923f8df6bb5cbfae3bb68e89377915913a2fee068e6c1bd63c94d05e3261b10392cd721603b433d9bc35f2605971e37c95353e10270095655a78b7bc5f6f77e0e06eeae80f587bce901ec83915908ff5c5e24624b0a13516a11c10b81cf265e95d59d7921bbf627169af32219ca771cac2e90a4d6cf9e93765eadf026a404d08c6b12bcd4b364493f3719e3a44d280107bdf7543cda431c401869873df1098de1f11789bc85e224e28dc49c274f2a59c05b8cf6e7b80d2f9c550be5a7fc14590bc67e16484647337f3b545a071f2f3fc85da209d7ccd4bab7f7d2784ba7aa2c797ea257f5340393944ea331586b5058762e317fd12b1c75ec6e58b6c82d1473075178f8b5aa4aa0ad234a843083c9618defe9cd65be4b789d9d1c19f0bdefda5400ba2f355f1c29faf48c0c2a0a90fefdb203d9aa9d7757628bb68410302a2a9c9542f44b3d73b594b6956deb765331cef8c216a0fca3d039503075336a503941f644ad45cc1f5c32633154d8f3656b1a08a72488a7bb34f841472e5be0fbf6015d3fdb216d2eb507291a6f2aef961ac2a2cd30830e7d2a69f329a2d0fcd4a3f0720f2924c0d660a0bbe765bdd485e17d5c0f1a88e5e5530d8a3d77efa19c7231e1b047acf685a215c9baf2021d9ee9c6579c625028499a6c9dbe58647a5707ce0f35bf791a335b2358c643864d77bc4fcdf701a94c60b8283a1acc20a0e37904b6715c04da9c39e718512e95402c76c3b6837e0f26ec9c8290986348654aed3bcb7b499af8531c8a059c86a78447ac6a4e09d5c4ec691d9c9c4a31f4e082ac611d9a980b78bbdd9627f95692c23d53e4d9d67cce0a1a50fb1b7d19540423dc55c6d82dcb6bf6868ca239c4ecc5c363db40d6ac94068983258069147bf3039f98f12a0860cbe557f757674cc67917c44a543e424b2bc3835d92a5df66216da521b1504d250bcb672b5677bbfbd8fb300114d45b343711417162c76935e4321bb71ad631d57e0dfbed01ad574266be48a0c18586174b89fb01c2bae19707ee2a55d8137015b57288d1858162a58c7c5fc4c6637299bd3773748ce003348fda59ae6656b4878b714345ecd6411c4afaa4d591ac5814120a388ff2fdf92aa999373d41cdccc457596bd7d6eaa08277a4124bded453156eb30a135c7de82e52b0c02a0ca5ff0ac780fe6b40cda29c4538f9db939d6bc428eea84ceedec183a73644a45cd18b2618abc873459fad9d1e66b1cc3e943deb17e39424a8bb2981dba01764956f0c0cb0308377b28d941f0bf201529bcbd4a6d72248e2addc787df1a4b4598c498980bfe0583af3009056b9533c9ee3c7f14ac8dc05b75bcbab254b113c2645c21a27539344a4a2b79f5c9b4f4d235e3f5ed891b3053d353008373d5dbfa6e09ca7f4450190241b31e4d02e21b0cd2308977f92dfdb7cfa27515e792f6cd2d4ef8732701dd82f5cf29ed7ba7157b5bd81df9a6dde7ece8364c5e2b9bc2b8585d8594f99b41f024ae50016c993608fd9a31ef40df1c509952e4e1ada7e7321809d4e6d49c9d663d9a00335a50e008d220e4f4b6b7fa838860ded4280be3daf4cefa1466062d6c19d1c7302b01df9fb28dbe1b113b42d590ba9e813e70ca27d48872e363f336e99c12f63adc9870b656d6b33f876cecd20c1e38174a1b7541eec34d64d61b4b96fdc036e3aba44888d300918949b0fdc74b70c55957996a8027611935d404f68a7f020b771e8afec7cfdf25620b0d6b9c50db73293603ae83e4d669f29bde8aa5ca581f6824f02a814e423e8d2b8c95f23c9fa98063ed343611d702ea34af90b31f4b5232a5aaa3181a72f24bf44b18f3af6c527820ad528728cee575da769cc807bdba72ca0025ced0b0cf0a5d894b5e1bc2b7c0704f4e939a24ab8d36695c24a8bf8d3db963a433985f3370ba4bc3e6343ddd4930ffebc66e4d696dabcaec5940ec829373d2494cf5ca503b35099f1c9be97471d9be85b3ac9f49f380b7f8c0343ac2b5fb8fa5780529b9d9ce94947cb17a95db55e89b1180b6c75fb7874390ded6480c6ad9a92e7bb57f8fe3c0a01a84d9e871671ffe9e55fbc2f303f6382211465aa74fb2b62e797b4fcaa41d47311631aa19212001382ec09fe0751344e6b52a2d73d85618c8409220c764c06cb57391dffe827035c355e6ea3a7b3100352235a51515a7a7227280fbbf67f50b167fc9fdb6f3b96d17643c1577752885532f19522c2d257f986b1eac7e910aca601b08313e48a60a83d89b20035a768b9d013a1fbaa29b4c10c423ac94bb34112bd72dd574d0b030c18290d25a7297cec9a55e1b58f0467b47ae8c37103b83b7c49f9d4aae2f468a919a8b6f49d67709b3caebead11b1fc7734dee7e9ad2ad089223192c606de2b1bd81ea009e666bfac216b1bde02c45e17d3265bb8e07b20acc01adba70085eb4adfd65d9d596112cb9fc5c1a038346afb11c0406e43e46cbc8ecafc7891819da8ab6fc6ea3cdeaf6e3440c7c86a191d6681ee200275d51e54104fd31678f5d98078b9e0706e2b0575a75ba858ba2caf908c3e76023eb78f85ba5f79efcae8037de838bb6cfb46e8f7a187b411c41e2813ce699ae2074e0c4d63ea232883fdba9647ec501485d1bb094b83a70662e732748c607285b8ff068c83cbaba83a7e6c15de7d70dd1445bf7306739607b1f83c84b3474dcc6959b8b7e2607d63bf652cd940684021186d85bbf724a0014be45055b425985ccd311d5258672ac5b2059a351a7f96ba4f43ec1b141a056e5d402265a0cb55acada3a522f0fe3faeed0180c5fbaabd35748f40b5ba884413e42419baa685da10eef252dc8a360ddf3c218fa5c406607979c3706f003bf65c318bd81dfa460c63d385267a86dd9e7c26f4cb3572ee631b7be90f2b4274cf9ac41388c13cd0b1dfac792caec246e3bec9ba1695ef486ea641a23ab1992009edebf64aea159d3566add0b9f95bbc294623c431ab00d868a2333b9d789f06c161aee48a3fa06af9c6608b9d13426983902d654368d3fa041a38c90259b0de1cfd02b4f0933eee38675d64f62670a64e054248c9b3c8749ec51ef2aeeba878834035175eb28b2a2f2932c513866c7b37858bac8c8edf6726ce0336ebee65fa63d5ee67c6a7775548e26e9155a98df1725379614d3a8eadf1fdd52a8f3f78d2b3cfb354b6faaebf1bc1eeb00c89af8f3326074cce33625d7a77785f8e8e8a48e41e903898c483abef0da3494c92a09302fd3b5ca7b13b9a4ff3ca923247e5a1bba140850b9e5ccda644969c95cf461d1bd01fb05e6897996e0a40bf44cb7384e61cf233b5275630b6b18bad5fc97c95989b6e889ef55adb8771455d3fee3a22849460402bb39920dbdd775190adc7731d3a56876503f880da67f26600456feac13dbcddf6cfa649fc43d1c84ebdb829cde7e50632d9ccfa5a34ae455c98ae24b712236a5c981d6356a6142b3f12d5cca1063df0aea69fdc3fb5fbedcf5f0a14829a6cbe2118ef52ecdfcd0ac26fb911a29d535b7ca524e8325c272d055b1d23f8234bb6e50082db7a5b568ee172a0f5357334df2ef663eee0342e736b03ae50907f0b58a28259fbb947a996b1e7f6b50e96232b6eb3431a663e50906460ada6015f3e5dc1487d9146fd966fb52346254fa9a3c14a064919021bd4d75250588a3100f4396a05ed71aa5dfd939bcf028163233d81d9792eb6aa3074fb1d5f0473f2c92747a6983c663f5bf76bd7c5cbd89faa882b759da1fd3b56c7877dd222970de14edf48a1d3aa5f87e01e14c38b52a88bf7d273e61814ef3de50b7ae8ddc217b9dd30f1477701610804673eb754d86bdad755165c7185058ae2b1a3df19962d4febc8304e1098a39f40980111c88da4b000b026f413f36c25a8cf64724dd60ea55244efbb935d5090c11e5475016b293b6c1569ae7521a1984d05798aeb23366b8b9392b921931713f941fad87fe6d61c2b98e782ea7fc9bc7d948417e1598afdfde9d3e6088bfcd4d0a63af25220f97ac18b9850f66f8e1c2826af2df5faf402fe59bbf8c665daf1cbe06101e08bb1384dc26ccd6267e823bc8c212618e69ff45cd6455c251dc34d79c08ebef206712d26cef9e2338c5909ed2ab3bd66877ae02f93cad26a4841d2f25d56c3f03d672d91ac47e03a41b59f4625ea8848726e9bbfadfac917cfc67aeb45d4f77e765d85427c264b23fe72a665445679dad86ccc1a0209af7c4c637cdb725e6b5336d184d750cb28cfeb00950541de70fc8aca618ef67fcd3d0f373dedf78d1c9b1abef4ab841ebbb5ed91fed51db6039ab87e4ca6c8ae8611cbc7b5c48d174f568c2a745c3939319560481301"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001080)={r1, 0x6}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0)={0x2080, 0x60, 0x10}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000002140)={{0x1, 0x1, 0x18, r0, {0x4000, 0x6}}, './file0\x00'}) mount_setattr(r2, &(0x7f0000002100)='./file0\x00', 0x8000, &(0x7f0000002180)={0x4, 0x1f0, 0x60000, {r3}}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) futex(&(0x7f0000002200)=0x1, 0x1, 0x1, &(0x7f0000002240), &(0x7f0000002280)=0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000022c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) gettid() socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002300)={0xffffffffffffffff}) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000002340), 0x42103, 0x0) r8 = socket(0x25, 0x1, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) fcntl$getownex(r5, 0x10, &(0x7f0000002380)) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) recvmsg$can_j1939(r3, &(0x7f0000003800)={&(0x7f00000023c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000003700)=[{&(0x7f0000002440)=""/34, 0x22}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/203, 0xcb}, {&(0x7f0000003580)=""/87, 0x57}, {&(0x7f0000003600)=""/194, 0xc2}], 0x5, &(0x7f0000003780)=""/91, 0x5b}, 0x141) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003840)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_EXPIRE(r8, 0x810c9365, &(0x7f0000003880)={{0xffff7fff}, 0x100, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000039c0)={{0x1, 0x1, 0x18, r7, {0x40, 0x7fff}}, './file0\x00'}) r10 = openat$cgroup_ro(r9, &(0x7f0000003a00)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) getsockname$unix(r4, &(0x7f0000003a40), &(0x7f0000003ac0)=0x6e) r11 = signalfd(r3, &(0x7f0000003b00)={[0x3]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r0, &(0x7f0000003b40)={0x10}) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000003b80)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private2}}, &(0x7f0000003c80)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000003cc0)={{{@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x6bd5, 0x4e23, 0xfe01, 0x2, 0x20, 0x20, 0x3b, 0x0, r12}, {0x6, 0x9, 0x6, 0x6, 0x3, 0x168a, 0x100, 0x3}, {0x68bdc132, 0x100, 0x10001, 0xea}, 0x42, 0x6e6bbb, 0x2, 0x0, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x4d2, 0x3c}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3501, 0x0, 0x3, 0x10, 0x9, 0xfffffffa, 0x8}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000003dc0)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0\x00'}) ioctl$BLKGETDISKSEQ(r13, 0x80081280, &(0x7f0000003e00)) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000003e40)) 2.766197528s ago: executing program 2 (id=937): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000480)='\x00', 0x89901) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x10, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @empty}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x10, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08001a"], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.642656906s ago: executing program 1 (id=938): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) 2.600696468s ago: executing program 32 (id=938): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) 2.338906323s ago: executing program 4 (id=940): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x90ff, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2.332459164s ago: executing program 0 (id=941): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @sk_reuseport=0x78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000002940), 0x40000000000017d, 0x888) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6bf0, 0x9}, 0x110060}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000090000000000000000000000850000001300090095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) 2.263083048s ago: executing program 4 (id=942): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_clone(0x80100, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004b40)) migrate_pages(r4, 0xb, 0x0, &(0x7f0000005080)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r5, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0) (async) cachestat(r5, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd2a, 0x25dfdbfc, {0x7, r1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4008004}, 0xc001) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @remote}, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa00}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa00}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 2.001202743s ago: executing program 3 (id=943): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) r0 = socket(0x10, 0x803, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1e, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x80}}) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x8, 0x1, 0x4, 0x400, 0xbffffffffffffff7], 0x1, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f0000000340)={[{@fat=@nfs_stale_rw}, {@dots}, {@dots}, {@nodots}, {@dots}, {@fat=@discard}, {@nodots}, {@dots}, {@nodots}]}, 0x1, 0x24d, &(0x7f00000005c0)="$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") r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet6(0xa, 0x2, 0x0) capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x288, 0x0, &(0x7f0000000180)="b44c806748f06309624431ed3373010001000000bf7e47d5fe008c6390009c4ebd873094563683b7ee0fae7a6a53200386ce51def6a4effb9de8b4645c2b9c0614907dac12c6d34a8266e6124b925240080cd4f4e5b5da601596c31f137d2ce6ca74fd87f90ea0be786fe13ac0805807dd6853458eccc84575e9af5fee93c9427fc0bd19ccae5d3bc54f9bdf5cf073b5a597a9df9cb422ce2ab5ff0700001130ef7824c0d3af6a0000000093b110a54f32ad69d05a805194380816a626940f4b74417bcc7ebcdf627041732f2eb0e4c6b6ed2449161c8b447829e7110b031b2e42528ed9aacbacae558272260c6b6ab183dd433a628de952e48f76d92cb36789fa2048c18441e99f6d3928bbcba48129e9c76ea7bafde2f322a406679edc8807a1ac048371092e1545d4feae4e5cc5d59840916e65ca94a1543a0ceb72c7342ce4f36d2a0d920d256eb72edc1b5d501eedc374c9ecf7c9ea0f5b494802a0365859c94850e0b20ad984b7b20dec8b6880e17e7638b63daa1d02f17ede125f97fec2bae28917819041750faee85b9e12f969c2acb24d6bdd83ab595c535fd20eec50cd53db292baaecb91e26df80c19eb88382dec1b5293c061833a33546fc699dcb187b66c91d23bb498494b0d45ad577c4a70f7fc82f5538eb7f3753f8f609377d2b5893d99c69ddc1dce10a0396f20c0a3e9fa981b642abda8753f155a7e0b829359617ade0749518458238ef376274b342c827199a5fa19c09c010e6759a045c5a15c1bdaaf707919ea5950adcad65dc128370ae91022956e9f55eee4a7b3aa2dbf8e2ec52e064d37c372db525ed9ee97aec279340dca0962c1470e8d3bda2da435703e76409bceadae533b484703a4af966187106d4efdda76c521ac0b2106c6728ee650c7001", 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffff6}, 0x50) r3 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) close(0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 1.940394537s ago: executing program 4 (id=944): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x80800) recvmmsg(r0, &(0x7f0000004900)=[{{&(0x7f0000000100)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000f80)=""/207, 0xcf}, 0x8}, {{&(0x7f0000001080)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001100)=""/68, 0x44}, {&(0x7f0000001180)=""/111, 0x6f}, {&(0x7f0000001200)=""/36, 0x24}, {&(0x7f0000001240)=""/77, 0x4d}, {&(0x7f00000012c0)=""/64, 0x40}, {&(0x7f0000001300)=""/108, 0x6c}, {&(0x7f0000001380)=""/236, 0xec}, {&(0x7f0000001480)=""/163, 0xa3}], 0x8, &(0x7f0000001880)=""/4096, 0x1000}, 0x4}, {{0x0, 0x0, &(0x7f0000004880)=[{&(0x7f00000015c0)=""/180, 0xb4}, {&(0x7f0000001680)=""/148, 0x94}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000001740)=""/22, 0x16}, {&(0x7f0000001780)=""/15, 0xf}, {&(0x7f0000003880)=""/4096, 0x1000}], 0x6}, 0x3ff}], 0x3, 0x100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0xff2dda2768f9b4be, 0x2, 0xfffffffe, 0x0, 0x0, 0x204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) stat(0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0xffffffffffffff8d) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x2}]}, {0x0, [0x30, 0x61, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0x7}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb6, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000180)={'hsr0\x00', @ifru_flags=0x2}) 1.521553731s ago: executing program 4 (id=945): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000007a000000e9d0be2c1d1fd900", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000200000085000000330000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000180)) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1) 1.440976216s ago: executing program 2 (id=946): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) inotify_init() r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) tgkill(r0, r0, 0x35) ptrace$peeksig(0x4209, r0, 0x0, &(0x7f0000000fc0)) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x500, &(0x7f0000000400)="$eJzs3c9vG1kdAPDvOHFIdlOSBQ7LSuxGiFV3BbWTDbuNOLRFQnCqBJR7CIkTRXHiKHbaJqpQKs4ICSFAcIETFyT+ACTUPwEhVYJ7hRCogrYcOBSMxh63wdhJqtpx6nw+0uu8efPj+32uPPabmXgCOLdmIuJaRIxExPsRMZW157ISB82Srvf40Z3ltCRRr9/4exJJ1tbaV5JNX882G4+Ib34t4jtJ0mw4pLq3v7FULpd2svlibXO7WN3bv7S+ubRWWittzc/PfbRweeHDhdme9fXKV/7y4x/86qtXfveFWw8W//bed9N8J7Nlh/vRS83XJN94LVpGI2KnH8EGYCTrT/4kKyf9zwcAgKOl3/E/ERGfjYgnPxt0NgAAAEA/1K9OxtMkog4AAAAMrVzjHtgkV8juBZiMXK5QaN7D+6m4GuVKtfb51cru1krzXtnpyOdW18ul2exe4enIJ+n8XKP+fP6Dtvn5iHgjIn40NdGYLyxXyiuDPvkBAAAA50Q6zp/MNevp5J9TzfE/AAAAMGSmB50AAAAA0HfG/wAAADD8/n/8P9OcJKOnnwwAAADQa1+/fj0t9dbzr1du7u1uVG5eWilVNwqbu8uF5crOdmGtUllr/Gbf5nH7K1cq21+Mrd3bxVqpWitW9/YXNyu7W7XFxnO9F0snek40AAAA0FNvvHPvT0lEHHxpolFSY9kyY3UYbrkXWz3pVx7A6RsZdALAwLjBF84v73/guIH9+CnlAQAA9M/FTz+7/j8Rh67/X3jg+j8Muxe8/g8MEdf/4fxqu/73ixNt9LTen2SAU2WMDxx3HqDD9f/mV4ff9ycfAACg9yYbJckVsjHAZORyhULEhcZjAfLJ6nq5NBsRH4+IP07lP5bOzw06aQAAAAAAAAAAAAAAAAAAAAAAAAB4xdTrSdQBAACAoRaR+2sSEUmMR0x9brL9/MBY8q+pxjQibv38xk9uL9VqO3Np+z+etdd+mrV/MIgzGAAAAEC71ji9NY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF56/OjOcqscan6333EffjkipjvFH43xxnQ88hHx2pMkRg9tl0TESA/iH9yNiDc7xU/StGI6y6I9fi4iJgYc//UexIfz7F56/LnW6f2Xi5nGtPP7bzQrL+vhTLfjX+7Z8W+ky/HvwjH7Hsumb93/TbFr/LsRb412Pv604o+95PH329/a3++2rP7LiIsdP3+S/4lVrG1uF6t7+5fWN5fWSmulrfn5uY8WLi98uDBbXF0vl7J/O8b44Wd++5+j+v9al/jTWf+T9v4nzZzq9c77fKdt/t/3bz/6ZKcVk4iH38/qHf7/3+wWP3vt380+B9LlF1v1g2b9sLd//Ye3j+r/Spf+jx8RP217r9tO27z/je/9uVnLn3ALAKCfqnv7G0vlcmnnVa+knTkDafSuMjJzJtIY+kprFHVW8jkrlcEelwAAgN57/qV/0JkAAAAAAAAAAAAAAAAAAADA+dX6+//Wbzn34+fEDscbb1WS5NT7CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwlP8GAAD//5Oqz6o=") unshare(0x26020400) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.38218264s ago: executing program 0 (id=947): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @sk_reuseport=0x78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x68f, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x888) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6bf0, 0x9}, 0x110060}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0xfffffffffffffebe) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="0000000000000001000080000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x64020600) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.192499381s ago: executing program 4 (id=948): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1218e09, &(0x7f0000000500)={[{@abort}, {@barrier}, {@inlinecrypt}, {@min_batch_time={'min_batch_time', 0x3d, 0x102}}, {@errors_remount}, {@bh}]}, 0x6, 0x600, &(0x7f0000001200)="$eJzs3c9rHGUfAPDvzCZ5kzbvm/ZFxBbFgIcWpGlSi1UvtvVgDwUL9iDioaFJauj2B00KthZMwYOCgohXkV78B7xL795EUG+ehSpSUVDpyuzOtptkN92m2Z008/nAZp/nmdl9nu9OnswzM3l2Aiit8exHGrEr4s6pJGKsZdloNBaO5+vd/u3a6eyRRK32+q9JJHlZc/0kf96eZ4Yj4tujEf+vrK534crVs9PVWsN7EfsXz13cv3Dl6r75c9NnZs/Mnp868MLBQ5MvTh2c2pA4t+fPx46/9uTH77/9/Nx31X1JHI6Tg+/OxIo4Nsp4jMedPMTW8oGIOJQl2nwuj5oHCmGkd+1gfSr57+NgRDweY1Gp5xrGYv6jQhsH9FStElEDSirR/6GkmuOA5rF9d8fBJ3s8KumfW0caB0Cr4x9onBuJ4fqx0bbbScuRUePcxo4NqD+r459ruz/PHrHsPMSfd7fOwAbU08nS9Yh4ol38Sb1tO+qRZvGny9qRRMRkRAzl7XvlIdqQtKR7cR5mLeuNP42Iw/lzVn50nfWPr8j3O34AyunmkXxHvpTl7u3/srFHc/wTbcY/o232XetR9P6v8/ivub8frp8jT1eMw7Ixy4n2bzm4suCnD4992qn+1vFf9sjqb44F++HW9YjdK+L/IAs2H/9k8Sdttn+2yqnD3dXx6ve/HOu0rOj4azci9rQ9/rk3Ks1Sa1yf3D83X52dbPxsW8fX37z1Zaf6i44/2/7bOsTfsv3Tla/LPpOLXdbx1Ykb5zotG71v/OnPQ0njeHMoL3lnenHx0lTEUHI8X6Wl/MDabWmu03yPLP69z7Tv/8t+/68vf5+R5p/MLlx84+ztTsvWs/1bLibfqXXZhk6y+Gfuv/1X9f+s7JMu6/jjzctPdVq2VvwuFwMAAAAAAMCDSevXYJN04m46TScmGvNlH4ttafXCwuKzcxcun5+J2Fv/f8jBtHmle6yRT7L8VP7/sM38gRX55yJiZ0R8Vhmp5ydOX6jOFB08AAAAAAAAAAAAAAAAAAAAbBLb8/n/zftU/15pzP8HSqKXN5gDNjf9H8qr3v9X3eIJKAP7fygv/R/KS/+H8tL/obz0fygv/R/KS/+H8tL/AQAAAGBL2vn0zR+TiFh6aaT+yAzly8wIgq1tsOgGAIWpFN0AoDB3L/0b7EPpdDX+/yv/csDeNwcoQNKusD44qK3d+W+2fSUAAAAAAAAAAAAA0AN7dnWe/29uMGxtpv1BeT3E/H9fHQCPOF/9D+XlGB+43yz+4U4LzP8HAAAAAAAAAAAAgL4ZrT+SdCKfCzwaaToxEfHfiNgRg8ncfHV2MiL+FxE/VAb/k+Wnim40AAAAAAAAAAAAAAAAAAAAbDELV66ena5WZy+1Jv5eVbK1E827oPahrpfjAV8VSf8/lpGIKHyj9Cwx0FKSRCxlW35TNOzSQmyOZtQTBf9hAgAAAAAAAAAAAAAAAACAEmqZe9ze7i/63CIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6L979//vXaLoGAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAR9O/AQAA//9/3EA1") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x3, 0x80}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000440)=0x4) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x4007fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x8}, 0x10183, 0x2e, 0xfffffbff, 0x1, 0x2, 0x0, 0x6, 0x0, 0x3, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x7, @perf_config_ext={0x407fff, 0xaea}, 0x14b3d, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x830, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4400, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x3, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}, 0x80, 0x0}, 0x844) listen(r0, 0x7e0b) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xffffff78, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r3, 0x2) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4db, &(0x7f00000005c0)="$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") r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) 551.494578ms ago: executing program 3 (id=949): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974"], 0x38}, 0x1, 0x0, 0x6000000}, 0x0) 411.045776ms ago: executing program 2 (id=950): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @sk_reuseport=0x78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x68f, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x888) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0xfffffffffffffebe) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="0000000000000001000080000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x64020600) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 368.867488ms ago: executing program 3 (id=951): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x90ff, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 368.240658ms ago: executing program 4 (id=952): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000840)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000dc0)={0xffffffff, 0x0, &(0x7f0000000cc0)=[{0x0}, {&(0x7f0000002340)=""/4096, 0x1000}], 0x0, 0x2}, 0x20) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind(r0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) mbind(&(0x7f0000171000/0x2000)=nil, 0x2000, 0x2, 0x0, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) lseek(r2, 0x101, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") getdents(r2, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}, {[@cipso={0x86, 0x6}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}, '\x00\x00\x00\x00'}}}}}, 0x0) 328.589471ms ago: executing program 3 (id=953): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000001000000080000000400000000000000100000000000000020"], 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0x901) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000300)=0x80001e07) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000da080808030047571e41ce8c1240ceecb41c3c3ecde299fb3abe8fff3997d77019616f207d565341effe12f7d86269d8f8101b20e454c52a2746d32465712042a497f108cee95c9c1c13301a06e7dd18d7e34d37585f6354c9842da989b25233becf44b818", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000500", @ANYRES32=r3, @ANYBLOB="1b0000000000000000"], 0x54, 0x1) 0s ago: executing program 3 (id=954): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x6533, 0x4) sched_setscheduler(0x0, 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000000240)="53d38327618ea978d262acb7d75f89c7802d", 0x12) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0xfffffe01}], 0x1, 0x2000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x28, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x5, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xa8a}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans', @ANYBLOB=',wfd']) getdents(r3, &(0x7f0000000000)=""/77, 0x4d) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x20) kernel console output (not intermixed with test programs): 18.900317][ T28] audit: type=1400 audit(1771216161.379:387): avc: denied { add_name } for pid=5073 comm="syz.3.421" name="freezer.self_freezing" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.932380][ T28] audit: type=1400 audit(1771216161.409:388): avc: denied { create } for pid=5073 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.961969][ T28] audit: type=1400 audit(1771216161.429:389): avc: denied { setopt } for pid=5073 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.983812][ T28] audit: type=1400 audit(1771216161.459:390): avc: denied { bind } for pid=5073 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.051224][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.079440][ T5081] loop3: detected capacity change from 0 to 1024 [ 119.095727][ T5081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.127564][ T5063] syz.1.418: attempt to access beyond end of device [ 119.127564][ T5063] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 119.141383][ T5063] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 119.150218][ T5072] syz.1.418: attempt to access beyond end of device [ 119.150218][ T5072] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 119.163963][ T5072] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 119.181743][ T5072] syz.1.418: attempt to access beyond end of device [ 119.181743][ T5072] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 119.214188][ T5072] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 119.296217][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.332938][ T5091] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 119.448815][ T5099] netlink: 68 bytes leftover after parsing attributes in process `syz.1.429'. [ 119.516588][ T5102] netlink: 44 bytes leftover after parsing attributes in process `syz.4.430'. [ 119.535721][ T5102] netlink: 44 bytes leftover after parsing attributes in process `syz.4.430'. [ 120.000882][ T5108] netlink: 52 bytes leftover after parsing attributes in process `syz.3.432'. [ 120.085292][ T28] audit: type=1326 audit(1771216162.529:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5103 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2af41bf79 code=0x7ffc0000 [ 120.131922][ T28] audit: type=1326 audit(1771216162.529:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5103 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2af41bf79 code=0x7ffc0000 [ 120.155267][ T28] audit: type=1326 audit(1771216162.529:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5103 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2af41bf79 code=0x7ffc0000 [ 120.331704][ T5118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.435'. [ 120.340824][ T5118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'. [ 120.418747][ T5107] syzkaller0: entered promiscuous mode [ 120.424333][ T5107] syzkaller0: entered allmulticast mode [ 120.446392][ T5120] loop3: detected capacity change from 0 to 128 [ 120.458937][ T5124] loop4: detected capacity change from 0 to 1024 [ 120.501856][ T5124] EXT4-fs: Ignoring removed oldalloc option [ 120.508011][ T5124] EXT4-fs: Ignoring removed bh option [ 120.542477][ T5124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.538409][ T5136] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 121.554515][ T5136] FAT-fs (loop3): Filesystem has been set read-only [ 122.937057][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.119961][ T5142] veth0: entered promiscuous mode [ 124.104635][ T5140] veth0: left promiscuous mode [ 126.089786][ T5171] team_slave_1: entered promiscuous mode [ 126.103238][ T5171] team_slave_1: entered allmulticast mode [ 126.372540][ T5193] netlink: 36 bytes leftover after parsing attributes in process `syz.4.456'. [ 126.490641][ T5201] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5201 comm=syz.0.457 [ 126.658436][ T5199] veth0: entered promiscuous mode [ 126.684097][ T5198] veth0: left promiscuous mode [ 127.290559][ T5226] netlink: 'syz.3.467': attribute type 10 has an invalid length. [ 127.324298][ T5228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.468'. [ 127.337070][ T5228] netlink: 28 bytes leftover after parsing attributes in process `syz.4.468'. [ 127.436972][ T5238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 127.474990][ T5242] loop3: detected capacity change from 0 to 1024 [ 127.502111][ T5242] EXT4-fs error (device loop3): ext4_quota_enable:7194: inode #4: comm syz.3.473: iget: checksum invalid [ 127.513651][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 127.513668][ T28] audit: type=1326 audit(1771216169.979:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.1.472" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6375d6bf79 code=0x0 [ 127.546639][ T5242] loop3: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -74 [ 127.553943][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 127.569574][ C1] EXT4-fs (loop3): initial error at time 1771216170: ext4_quota_enable:7194: inode 4 [ 127.579100][ C1] EXT4-fs (loop3): last error at time 1771216170: ext4_quota_enable:7194: inode 4 [ 127.588452][ T5242] EXT4-fs error (device loop3): ext4_quota_enable:7197: comm syz.3.473: Bad quota inode: 4, type: 1 [ 127.606878][ T5248] loop1: detected capacity change from 0 to 512 [ 127.617203][ T5242] loop3: lost filesystem error report for type 5 error -117 [ 127.619161][ T5242] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 127.649770][ T5252] loop2: detected capacity change from 0 to 128 [ 127.674499][ T5242] EXT4-fs (loop3): mount failed [ 127.697039][ T28] audit: type=1400 audit(1771216170.179:433): avc: denied { append } for pid=5239 comm="syz.1.472" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.765420][ T5258] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 127.783597][ T5258] FAT-fs (loop2): Filesystem has been set read-only [ 127.825555][ T28] audit: type=1400 audit(1771216170.179:434): avc: denied { map } for pid=5239 comm="syz.1.472" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.880402][ T5263] veth0: entered promiscuous mode [ 127.909913][ T28] audit: type=1400 audit(1771216170.389:435): avc: denied { accept } for pid=5249 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.205402][ T5252] syz.2.475: attempt to access beyond end of device [ 128.205402][ T5252] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 128.219524][ T5252] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 128.259737][ T5256] syz.2.475: attempt to access beyond end of device [ 128.259737][ T5256] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 128.309486][ T5256] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 128.332991][ T5249] veth0: left promiscuous mode [ 128.521666][ T5274] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.579688][ T28] audit: type=1400 audit(1771216171.059:436): avc: denied { read write } for pid=5273 comm="syz.2.482" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.634311][ T28] audit: type=1400 audit(1771216171.059:437): avc: denied { open } for pid=5273 comm="syz.2.482" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.659293][ T28] audit: type=1400 audit(1771216171.059:438): avc: denied { ioctl } for pid=5273 comm="syz.2.482" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.820190][ T5282] loop4: detected capacity change from 0 to 128 [ 128.915648][ T5282] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.928280][ T5282] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.955009][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.053085][ T5302] loop3: detected capacity change from 0 to 512 [ 130.074872][ T5287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.486'. [ 130.088766][ T5302] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 130.097368][ T5302] EXT4-fs (loop3): orphan cleanup on readonly fs [ 130.114381][ T5302] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 130.139289][ T5306] syzkaller0: entered promiscuous mode [ 130.145007][ T5306] syzkaller0: entered allmulticast mode [ 130.159357][ T5302] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 130.184577][ T5287] hub 1-0:1.0: USB hub found [ 130.189409][ T5287] hub 1-0:1.0: 8 ports detected [ 130.254038][ T5302] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.491: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 130.402900][ T5302] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 130.403180][ T5302] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.491: couldn't read orphan inode 13 (err -117) [ 130.412468][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 130.412489][ C1] EXT4-fs (loop3): last error at time 1771216172: ext4_ext_check_inode:521: inode 13 [ 130.667952][ T5302] loop3: lost filesystem error report for type 5 error -117 [ 130.857656][ T5302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.030784][ T5319] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.491'. [ 131.169701][ T5324] netlink: 64 bytes leftover after parsing attributes in process `syz.4.496'. [ 131.175165][ T5325] loop0: detected capacity change from 0 to 128 [ 131.185553][ T5316] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5316 comm=syz.1.494 [ 131.208299][ T5324] netlink: 64 bytes leftover after parsing attributes in process `syz.4.496'. [ 131.251031][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.306763][ T5328] loop4: detected capacity change from 0 to 128 [ 131.317855][ T5333] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 131.363944][ T5333] FAT-fs (loop0): Filesystem has been set read-only [ 131.524073][ T28] audit: type=1400 audit(1771216173.999:439): avc: denied { write } for pid=5335 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 131.953078][ T5336] loop1: detected capacity change from 0 to 2048 [ 132.056560][ T5341] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 132.067715][ T5341] FAT-fs (loop4): Filesystem has been set read-only [ 132.076325][ T5336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.113327][ T5336] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 132.214692][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.443222][ T28] audit: type=1326 audit(1771216174.919:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874683bf79 code=0x7ffc0000 [ 132.962823][ T28] audit: type=1326 audit(1771216174.919:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f874683bf79 code=0x7ffc0000 [ 132.995666][ T28] audit: type=1326 audit(1771216174.919:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874683bf79 code=0x7ffc0000 [ 133.019068][ T28] audit: type=1326 audit(1771216174.919:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874683bf79 code=0x7ffc0000 [ 133.042778][ T28] audit: type=1326 audit(1771216174.919:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f874683bf79 code=0x7ffc0000 [ 133.265250][ T5369] loop1: detected capacity change from 0 to 128 [ 133.295347][ T5369] vfat: Unknown parameter 'ÿÿÿÿgÔ­¬aÆPpá0å‰úšpº–.{í6›' [ 133.320264][ T5371] loop2: detected capacity change from 0 to 1024 [ 133.354965][ T5371] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29845!=20869) [ 133.417672][ T5371] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 133.457034][ T5371] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz.2.509: Invalid inode table block 0 in block_group 0 [ 133.521456][ T5371] loop2: lost filesystem error report for type 5 error -117 [ 133.523890][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 133.537730][ C1] EXT4-fs (loop2): initial error at time 1771216175: __ext4_get_inode_loc:4782 [ 133.546748][ C1] EXT4-fs (loop2): last error at time 1771216175: __ext4_get_inode_loc:4782 [ 133.564606][ T5371] EXT4-fs (loop2): no journal found [ 133.573947][ T5371] EXT4-fs (loop2): can't get journal size [ 133.660281][ T5374] loop4: detected capacity change from 0 to 512 [ 133.736796][ T5371] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz.2.509: Invalid inode table block 0 in block_group 0 [ 133.759721][ T5371] loop2: lost filesystem error report for type 5 error -117 [ 133.767973][ T5371] EXT4-fs (loop2): get root inode failed [ 133.806810][ T5371] EXT4-fs (loop2): mount failed [ 133.816111][ T5380] loop0: detected capacity change from 0 to 128 [ 133.866485][ T5383] loop1: detected capacity change from 0 to 128 [ 133.946210][ T5385] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 133.954138][ T5385] FAT-fs (loop0): Filesystem has been set read-only [ 134.005558][ T5387] loop2: detected capacity change from 0 to 512 [ 134.047080][ T5389] loop3: detected capacity change from 0 to 256 [ 134.047818][ T5387] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.514: bad orphan inode 26 [ 134.074626][ T5387] loop2: lost filesystem error report for type 5 error -117 [ 134.074930][ T5387] ext4_test_bit(bit=25, block=63) = 0 [ 134.087813][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 134.087833][ C0] EXT4-fs (loop2): initial error at time 1771216176: ext4_orphan_get:1417 [ 134.087860][ C0] EXT4-fs (loop2): last error at time 1771216176: ext4_orphan_get:1417 [ 134.109873][ T5393] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 134.112344][ T5387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.131812][ T5374] ------------[ cut here ]------------ [ 134.136212][ T5387] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.138833][ T5374] EA inode 11 i_nlink=2 [ 134.148630][ T5374] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.4.510/5374 [ 134.164947][ T5374] Modules linked in: [ 134.169322][ T5374] CPU: 1 UID: 0 PID: 5374 Comm: syz.4.510 Not tainted syzkaller #0 PREEMPT(full) [ 134.171532][ T5393] FAT-fs (loop1): Filesystem has been set read-only [ 134.179056][ T5374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 134.197292][ T5374] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 134.204694][ T28] audit: type=1400 audit(1771216176.669:445): avc: denied { append } for pid=5388 comm="syz.3.515" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 134.228960][ T5374] Code: e4 7e 99 ff 4c 8d 2d cd 1b 5e 05 49 8d 7e 40 e8 74 11 b6 ff 49 8b 6e 40 4c 89 e7 e8 a8 0c b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 4f 1f dc 03 66 66 66 66 66 66 2e [ 134.249246][ T5374] RSP: 0018:ffffc9000f86f778 EFLAGS: 00010246 [ 134.256070][ T5374] RAX: ffff888101d31af8 RBX: ffff88811b85c608 RCX: ffffffff81bfc048 [ 134.264622][ T5374] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871ddc00 [ 134.273011][ T5374] RBP: 000000000000000b R08: 000188811b85c5bb R09: 0000000000000000 [ 134.281935][ T5374] R10: ffffc9000f86f6a8 R11: 0001c9000f86f6a8 R12: ffff88811b85c5b8 [ 134.290155][ T5374] R13: ffffffff871ddc00 R14: ffff88811b85c570 R15: 0000000000000001 [ 134.298331][ T5374] FS: 00007f7bbb4976c0(0000) GS:ffff8882ae9e4000(0000) knlGS:0000000000000000 [ 134.308570][ T5374] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.315710][ T5374] CR2: 0000000034747865 CR3: 000000011f03c000 CR4: 00000000003506f0 [ 134.323882][ T5374] Call Trace: [ 134.327671][ T5374] [ 134.331189][ T5374] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 134.337929][ T5374] ? errseq_check+0x2c/0x50 [ 134.343031][ T5374] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 134.349411][ T5374] ? ext4_truncate+0x92b/0xb00 [ 134.354841][ T5374] ext4_evict_inode+0xa1f/0xd60 [ 134.360545][ T5374] ? __pfx_ext4_evict_inode+0x10/0x10 [ 134.366720][ T5374] evict+0x2af/0x510 [ 134.371150][ T5374] ? __dquot_initialize+0x146/0x7c0 [ 134.377062][ T5374] iput+0x41a/0x580 [ 134.381525][ T5374] ext4_process_orphan+0x1a9/0x1c0 [ 134.387360][ T5374] ext4_orphan_cleanup+0x6a8/0xa00 [ 134.393029][ T5374] ext4_fill_super+0x3408/0x37c0 [ 134.398609][ T5374] ? set_blocksize+0x14c/0x270 [ 134.403821][ T5374] ? setup_bdev_super+0x30e/0x370 [ 134.409481][ T5374] ? __pfx_ext4_fill_super+0x10/0x10 [ 134.415390][ T5374] get_tree_bdev_flags+0x291/0x300 [ 134.421322][ T5374] ? __pfx_ext4_fill_super+0x10/0x10 [ 134.427430][ T5374] get_tree_bdev+0x1f/0x30 [ 134.432302][ T5374] ext4_get_tree+0x1c/0x30 [ 134.437561][ T5374] vfs_get_tree+0x57/0x1d0 [ 134.442622][ T5374] do_new_mount+0x288/0x8d0 [ 134.448231][ T5374] path_mount+0x4d0/0xbc0 [ 134.453248][ T5374] __se_sys_mount+0x28c/0x2e0 [ 134.458988][ T5374] __x64_sys_mount+0x67/0x80 [ 134.464219][ T5374] x64_sys_call+0x2d61/0x3020 [ 134.469780][ T5374] do_syscall_64+0x12c/0x370 [ 134.475082][ T5374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.481429][ T5374] RIP: 0033:0x7f7bbca3d20a [ 134.487292][ T5374] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.508161][ T5374] RSP: 002b:00007f7bbb496e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 134.517457][ T5374] RAX: ffffffffffffffda RBX: 00007f7bbb496ee0 RCX: 00007f7bbca3d20a [ 134.525792][ T5374] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f7bbb496ea0 [ 134.534310][ T5374] RBP: 00002000000009c0 R08: 00007f7bbb496ee0 R09: 0000000000800718 [ 134.542620][ T5374] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 134.551741][ T5374] R13: 00007f7bbb496ea0 R14: 000000000000048d R15: 0000200000000200 [ 134.560580][ T5374] [ 134.564489][ T5374] ---[ end trace 0000000000000000 ]--- [ 134.571448][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.573560][ T5374] EXT4-fs (loop4): 1 orphan inode deleted [ 134.597164][ T5374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.751619][ T5400] netlink: 444 bytes leftover after parsing attributes in process `syz.3.517'. [ 134.761161][ T5400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 135.221430][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.223843][ T5402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.518'. [ 135.412452][ T5413] loop0: detected capacity change from 0 to 1024 [ 135.419469][ T5413] EXT4-fs: inline encryption not supported [ 135.435683][ T5413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.445504][ T5407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.519'. [ 135.475625][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.488843][ T5407] hub 1-0:1.0: USB hub found [ 135.495732][ T5407] hub 1-0:1.0: 8 ports detected [ 135.540520][ T5421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 135.656149][ T5435] loop2: detected capacity change from 0 to 128 [ 135.801703][ T5439] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 135.830379][ T5439] FAT-fs (loop2): Filesystem has been set read-only [ 135.894168][ T5433] loop1: detected capacity change from 0 to 512 [ 135.931489][ T5433] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 135.943308][ T5433] EXT4-fs (loop1): Invalid default hash set in the superblock [ 135.998987][ T5443] veth0: entered promiscuous mode [ 136.022609][ T5442] veth0: left promiscuous mode [ 137.442382][ T5438] syz.2.529: attempt to access beyond end of device [ 137.442382][ T5438] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 137.465170][ T5438] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 137.504586][ T5438] syz.2.529: attempt to access beyond end of device [ 137.504586][ T5438] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 137.537783][ T5438] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 137.547820][ T5459] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5459 comm=syz.3.535 [ 137.881479][ T5471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'. [ 137.894774][ T5471] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 137.908080][ T5471] EXT4-fs (loop1): orphan cleanup on readonly fs [ 137.914853][ T5471] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.539: inode #15: comm syz.1.539: iget: illegal inode # [ 137.929718][ T5471] loop1: lost filesystem error report for type 5 error -117 [ 137.930186][ T5471] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.539: couldn't read orphan inode 15 (err -117) [ 137.937604][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 137.937625][ C0] EXT4-fs (loop1): initial error at time 1771216180: ext4_orphan_get:1391 [ 137.937653][ C0] EXT4-fs (loop1): last error at time 1771216180: ext4_orphan_get:1391 [ 138.374584][ T5471] loop1: lost filesystem error report for type 5 error -117 [ 138.400596][ T5471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 138.436266][ T5476] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5476 comm=syz.4.536 [ 138.551411][ T5478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5478 comm=syz.1.539 [ 138.626986][ T5471] ipip0: entered promiscuous mode [ 138.699451][ T5484] veth0: entered promiscuous mode [ 138.704815][ T5483] veth0: left promiscuous mode [ 138.840840][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.853311][ T5496] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5496 comm=syz.0.548 [ 139.606392][ T5505] set_capacity_and_notify: 1 callbacks suppressed [ 139.606408][ T5505] loop0: detected capacity change from 0 to 1024 [ 139.780989][ T5510] loop1: detected capacity change from 0 to 128 [ 139.812456][ T5505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.836539][ T5510] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.623128][ T28] audit: type=1400 audit(1771216183.099:446): avc: denied { read } for pid=5507 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.663770][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.239842][ T5532] netlink: 16 bytes leftover after parsing attributes in process `syz.4.556'. [ 141.297495][ T5532] gtp0: entered promiscuous mode [ 141.336297][ T5538] loop4: detected capacity change from 0 to 1024 [ 141.357895][ T5530] loop1: detected capacity change from 0 to 512 [ 141.380885][ T5538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.539240][ T5534] loop2: detected capacity change from 0 to 512 [ 141.614558][ T5534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.619827][ T5530] EXT4-fs (loop1): 1 orphan inode deleted [ 141.640574][ T5530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.641299][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.669191][ T5534] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.677653][ T5557] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5557 comm=syz.3.559 [ 141.697084][ T5559] loop0: detected capacity change from 0 to 512 [ 141.719712][ T5559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.748195][ T5562] loop4: detected capacity change from 0 to 128 [ 141.752793][ T5559] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.773271][ T5564] netlink: 44 bytes leftover after parsing attributes in process `syz.3.564'. [ 141.790813][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.840586][ T5564] netlink: 44 bytes leftover after parsing attributes in process `syz.3.564'. [ 141.850162][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.892708][ T5569] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 141.901099][ T5569] FAT-fs (loop4): Filesystem has been set read-only [ 141.950166][ T5566] EXT4-fs error (device loop0): ext4_generic_delete_entry:2666: inode #12: block 32: comm syz.0.563: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=8, size=2048 fake=0 [ 141.952228][ T28] audit: type=1400 audit(1771216184.429:447): avc: denied { remove_name } for pid=5558 comm="syz.0.563" name="file1" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.045066][ T5566] EXT4-fs error (device loop0) in ext4_delete_entry:2737: Corrupt filesystem [ 142.053683][ T5559] netlink: 'syz.0.563': attribute type 1 has an invalid length. [ 142.063765][ T5576] loop1: detected capacity change from 0 to 1024 [ 142.071710][ T5578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.568'. [ 142.085734][ T5568] loop3: detected capacity change from 0 to 128 [ 142.093509][ T5576] EXT4-fs: inline encryption not supported [ 142.100884][ T5578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 142.123230][ T5568] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.140613][ T5576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.201346][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.366196][ T5565] syz.4.562: attempt to access beyond end of device [ 142.366196][ T5565] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 142.379959][ T5565] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 142.388719][ T5562] syz.4.562: attempt to access beyond end of device [ 142.388719][ T5562] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 142.402376][ T5562] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 142.413028][ T5565] syz.4.562: attempt to access beyond end of device [ 142.413028][ T5565] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 142.427287][ T5565] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 142.936110][ T5593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.575'. [ 142.972775][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.011663][ T5597] loop2: detected capacity change from 0 to 1024 [ 143.027288][ T5599] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 143.067433][ T5599] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 143.076011][ T5597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.098638][ T5599] System zones: 1-12 [ 143.102749][ T5599] EXT4-fs (loop0): orphan cleanup on readonly fs [ 143.131928][ T5599] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.573: bg 0: block 361: padding at end of block bitmap is not set [ 143.166592][ T5599] loop0: lost filesystem error report for type 5 error -117 [ 143.171241][ T5599] EXT4-fs (loop0): Remounting filesystem read-only [ 143.178679][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 143.178697][ C0] EXT4-fs (loop0): initial error at time 1771216185: ext4_validate_block_bitmap:441 [ 143.178723][ C0] EXT4-fs (loop0): last error at time 1771216185: ext4_validate_block_bitmap:441 [ 143.210451][ T5599] EXT4-fs (loop0): 1 truncate cleaned up [ 143.226428][ T5599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 143.261195][ T5609] forcing mempool usage for bio_alloc_bioset+0x453/0x9a0 [ 143.356015][ T28] audit: type=1400 audit(1771216185.829:448): avc: denied { accept } for pid=5607 comm="syz.4.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.411252][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 143.461769][ T5612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.506011][ T5616] netlink: 'syz.0.580': attribute type 11 has an invalid length. [ 143.531773][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.970108][ T28] audit: type=1400 audit(1771216186.069:449): avc: denied { map } for pid=5611 comm="syz.4.581" path="/proc/437/task/439/cmdline" dev="proc" ino=13514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 143.970189][ T5626] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 144.034440][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.084542][ T5626] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.120101][ T5626] ext2 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 144.153365][ T28] audit: type=1400 audit(1771216186.629:450): avc: denied { setattr } for pid=5625 comm="syz.0.583" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.265610][ T5631] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 144.323201][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.500826][ T5639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.585'. [ 144.727676][ T5648] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 144.774065][ T5648] FAT-fs (loop4): Filesystem has been set read-only [ 145.744488][ T28] audit: type=1400 audit(1771216188.219:451): avc: denied { create } for pid=5646 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 145.898641][ T28] audit: type=1400 audit(1771216188.219:452): avc: denied { ioctl } for pid=5646 comm="syz.0.589" path="socket:[13605]" dev="sockfs" ino=13605 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 146.740153][ T28] audit: type=1400 audit(1771216188.219:453): avc: denied { write } for pid=5646 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 149.133303][ T5693] set_capacity_and_notify: 4 callbacks suppressed [ 149.133322][ T5693] loop2: detected capacity change from 0 to 128 [ 149.310800][ T5696] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 149.319117][ T5696] FAT-fs (loop2): Filesystem has been set read-only [ 149.411358][ T5699] syzkaller1: entered promiscuous mode [ 149.417012][ T5699] syzkaller1: entered allmulticast mode [ 149.795597][ T5693] syz.2.601: attempt to access beyond end of device [ 149.795597][ T5693] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 149.833118][ T5693] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 149.858726][ T5695] syz.2.601: attempt to access beyond end of device [ 149.858726][ T5695] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 150.345790][ T5695] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 151.256226][ T5706] loop3: detected capacity change from 0 to 512 [ 151.302341][ T5706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.320546][ T5706] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.908115][ T28] audit: type=1400 audit(1771216194.389:454): avc: denied { create } for pid=5728 comm="syz.1.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 152.030512][ T5732] veth0: entered promiscuous mode [ 152.046911][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.074758][ T5728] veth0: left promiscuous mode [ 152.083402][ T5743] loop4: detected capacity change from 0 to 1024 [ 152.124891][ T5743] EXT4-fs error (device loop4): ext4_quota_enable:7194: inode #4: comm syz.4.615: iget: checksum invalid [ 152.162315][ T5743] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -74 [ 152.163612][ T5743] EXT4-fs error (device loop4): ext4_quota_enable:7197: comm syz.4.615: Bad quota inode: 4, type: 1 [ 152.172638][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 152.172662][ C1] EXT4-fs (loop4): initial error at time 1771216194: ext4_quota_enable:7194: inode 4 [ 152.172705][ C1] EXT4-fs (loop4): last error at time 1771216194: ext4_quota_enable:7194: inode 4 [ 152.283971][ T5743] loop4: lost filesystem error report for type 5 error -117 [ 152.284935][ T5743] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 152.356373][ T5743] EXT4-fs (loop4): mount failed [ 152.737147][ T5755] hub 1-0:1.0: USB hub found [ 152.800847][ T5755] hub 1-0:1.0: 8 ports detected [ 152.881993][ T5760] loop1: detected capacity change from 0 to 512 [ 152.926607][ T5760] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 152.954374][ T5760] EXT4-fs (loop1): orphan cleanup on readonly fs [ 152.966802][ T5764] netlink: 64 bytes leftover after parsing attributes in process `syz.4.619'. [ 152.984333][ T5760] EXT4-fs warning (device loop1): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 153.014449][ T5764] netlink: 64 bytes leftover after parsing attributes in process `syz.4.619'. [ 153.027578][ T5760] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 153.037905][ T5760] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.618: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 153.087995][ T5760] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 153.088263][ T5760] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.618: couldn't read orphan inode 13 (err -117) [ 153.097456][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 153.097472][ C1] EXT4-fs (loop1): last error at time 1771216195: ext4_ext_check_inode:521: inode 13 [ 153.159555][ T5760] loop1: lost filesystem error report for type 5 error -117 [ 153.160291][ T5760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.171218][ T5770] loop3: detected capacity change from 0 to 512 [ 153.215501][ T5770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.230053][ T5777] loop0: detected capacity change from 0 to 128 [ 153.238504][ T5779] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.618'. [ 153.244450][ T5770] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.279093][ T28] audit: type=1326 audit(1771216195.759:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbca3bf79 code=0x7ffc0000 [ 153.374013][ T28] audit: type=1326 audit(1771216195.759:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbca3bf79 code=0x7ffc0000 [ 153.423999][ T5783] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 153.431977][ T5783] FAT-fs (loop0): Filesystem has been set read-only [ 153.457408][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.486995][ T28] audit: type=1326 audit(1771216195.799:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbca3bf79 code=0x7ffc0000 [ 153.559684][ T28] audit: type=1326 audit(1771216195.799:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbca3bf79 code=0x7ffc0000 [ 153.584522][ T28] audit: type=1326 audit(1771216195.799:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7bbca3bf79 code=0x7ffc0000 [ 153.607807][ T28] audit: type=1326 audit(1771216195.799:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbca3bf79 code=0x7ffc0000 [ 153.631191][ T28] audit: type=1326 audit(1771216195.799:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbca3bf79 code=0x7ffc0000 [ 153.655456][ T28] audit: type=1326 audit(1771216195.799:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbca3bf79 code=0x7ffc0000 [ 153.678923][ T28] audit: type=1326 audit(1771216195.799:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f7bbca3bf79 code=0x7ffc0000 [ 153.946109][ T5786] veth0: entered promiscuous mode [ 153.948919][ T5777] syz.0.622: attempt to access beyond end of device [ 153.948919][ T5777] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 153.965440][ T5777] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 153.974264][ T5781] syz.0.622: attempt to access beyond end of device [ 153.974264][ T5781] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 153.988203][ T5781] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 153.997570][ T5777] syz.0.622: attempt to access beyond end of device [ 153.997570][ T5777] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 154.043735][ T5777] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 154.060818][ T208] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 154.096867][ T208] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 154.127733][ T5790] loop1: detected capacity change from 0 to 128 [ 154.129000][ T208] EXT4-fs (loop3): This should not happen!! Data will be lost [ 154.129000][ T208] [ 154.146216][ T5790] vfat: Unknown parameter 'ÿÿÿÿgÔ­¬aÆPpá0å‰úšpº–.{í6›' [ 154.174303][ T208] EXT4-fs (loop3): Total free blocks count 0 [ 154.180511][ T208] EXT4-fs (loop3): Free/Dirty block details [ 154.193905][ T208] EXT4-fs (loop3): free_blocks=65280 [ 154.209472][ T208] EXT4-fs (loop3): dirty_blocks=6392 [ 154.233574][ T208] EXT4-fs (loop3): Block reservation details [ 154.247855][ T208] EXT4-fs (loop3): i_reserved_data_blocks=6392 [ 154.302777][ T208] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2068 with max blocks 2048 with error 28 [ 154.546528][ T5780] veth0: left promiscuous mode [ 154.658031][ T5801] dummy0: entered promiscuous mode [ 154.675421][ T5801] dummy0: left promiscuous mode [ 154.747808][ T5803] loop0: detected capacity change from 0 to 512 [ 154.762476][ T5803] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.631: inode has both inline data and extents flags [ 154.780515][ T5803] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 154.780777][ T5803] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.631: couldn't read orphan inode 15 (err -117) [ 154.790128][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 154.790147][ C0] EXT4-fs (loop0): initial error at time 1771216197: ext4_orphan_get:1391: inode 15 [ 154.790204][ C0] EXT4-fs (loop0): last error at time 1771216197: ext4_orphan_get:1391: inode 15 [ 154.827589][ T5803] loop0: lost filesystem error report for type 5 error -117 [ 154.829230][ T5803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.879200][ T5811] capability: warning: `syz.2.633' uses 32-bit capabilities (legacy support in use) [ 154.926380][ T5803] netlink: 28 bytes leftover after parsing attributes in process `syz.0.631'. [ 154.958389][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.096032][ T5795] loop3: detected capacity change from 0 to 512 [ 155.110198][ T5828] loop4: detected capacity change from 0 to 512 [ 155.131780][ T5795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.165727][ T5795] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.203988][ T5821] netlink: 20 bytes leftover after parsing attributes in process `syz.0.635'. [ 155.216242][ T5826] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5826 comm=syz.1.637 [ 155.229969][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.294033][ T5821] hub 1-0:1.0: USB hub found [ 155.300474][ T5821] hub 1-0:1.0: 8 ports detected [ 156.915231][ T5859] loop1: detected capacity change from 0 to 512 [ 156.945730][ T5859] ext4: Unknown parameter 'olda' [ 156.998368][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 156.998388][ T28] audit: type=1400 audit(1771216199.459:485): avc: denied { read } for pid=5856 comm="syz.1.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 157.045592][ T5851] loop0: detected capacity change from 0 to 128 [ 157.052904][ T5859] netlink: 52 bytes leftover after parsing attributes in process `syz.1.647'. [ 157.084921][ T5851] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.147406][ T5859] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 157.415829][ T5876] loop1: detected capacity change from 0 to 1024 [ 157.432302][ T5878] loop2: detected capacity change from 0 to 512 [ 157.434096][ T5876] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 157.459945][ T5878] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.655: inode has both inline data and extents flags [ 157.497413][ T5876] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #3: block 3: comm syz.1.652: lblock 3 mapped to illegal pblock 3 (length 1) [ 157.514616][ T5876] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 157.515653][ T5876] Quota error (device loop1): write_blk: dquota write failed [ 157.524760][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 157.524811][ C1] EXT4-fs (loop1): initial error at time 1771216199: ext4_map_blocks:818: inode 3: block 3 [ 157.524848][ C1] EXT4-fs (loop1): last error at time 1771216199: ext4_map_blocks:818: inode 3: block 3 [ 157.550506][ T5878] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 157.578920][ T5878] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.655: couldn't read orphan inode 15 (err -117) [ 157.579351][ T5876] Quota error (device loop1): find_free_dqentry: Can't write quota data block 3 [ 157.588156][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 157.588177][ C0] EXT4-fs (loop2): initial error at time 1771216200: ext4_orphan_get:1391: inode 15 [ 157.588204][ C0] EXT4-fs (loop2): last error at time 1771216200: ext4_orphan_get:1391: inode 15 [ 157.595058][ T5883] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5883 comm=syz.0.656 [ 157.610961][ T5876] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 157.634410][ T5878] loop2: lost filesystem error report for type 5 error -117 [ 157.664202][ T5876] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.652: Failed to acquire dquot type 0 [ 157.685905][ T5878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.701035][ T5876] loop1: lost filesystem error report for type 5 error -117 [ 157.703138][ T5876] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 3: comm syz.1.652: lblock 3 mapped to illegal pblock 3 (length 1) [ 157.749085][ T5876] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 157.749328][ T5876] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 157.782306][ T5876] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.652: Failed to acquire dquot type 0 [ 157.817224][ T5876] loop1: lost filesystem error report for type 5 error -117 [ 157.832439][ T5876] EXT4-fs error (device loop1): ext4_free_blocks:6726: comm syz.1.652: Freeing blocks not in datazone - block = 0, count = 4096 [ 157.867883][ T5876] loop1: lost filesystem error report for type 5 error -117 [ 157.868109][ T5876] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 3: comm syz.1.652: lblock 3 mapped to illegal pblock 3 (length 1) [ 157.904254][ T5876] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 157.904618][ T5876] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 157.934712][ T5876] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.652: Failed to acquire dquot type 0 [ 157.954694][ T5876] loop1: lost filesystem error report for type 5 error -117 [ 157.965089][ T5876] EXT4-fs (loop1): 1 orphan inode deleted [ 157.978727][ T5876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.047534][ T5892] loop0: detected capacity change from 0 to 128 [ 158.154724][ T5869] loop3: detected capacity change from 0 to 512 [ 158.168108][ T5898] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 158.176222][ T5898] FAT-fs (loop0): Filesystem has been set read-only [ 158.186386][ T5869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.260151][ T5869] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.317060][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.388320][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.485338][ T5892] syz.0.659: attempt to access beyond end of device [ 158.485338][ T5892] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 158.499206][ T5892] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 158.509628][ T5896] syz.0.659: attempt to access beyond end of device [ 158.509628][ T5896] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 158.528127][ T5896] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 158.540406][ T5896] syz.0.659: attempt to access beyond end of device [ 158.540406][ T5896] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 158.560733][ T5896] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 158.579784][ T28] audit: type=1400 audit(1771216201.059:486): avc: denied { write } for pid=5904 comm="syz.3.661" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 158.734414][ T28] audit: type=1326 audit(1771216201.209:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.3.662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2af41bf79 code=0x0 [ 158.819433][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'. [ 158.855543][ T5914] macvlan2: entered promiscuous mode [ 158.860924][ T5914] macvlan2: entered allmulticast mode [ 158.866526][ T5914] veth0_virt_wifi: entered allmulticast mode [ 158.906269][ T5916] loop1: detected capacity change from 0 to 1024 [ 158.947322][ T5916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.990908][ T5911] FAULT_INJECTION: forcing a failure. [ 158.990908][ T5911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.016322][ T5911] CPU: 1 UID: 0 PID: 5911 Comm: syz.3.662 Tainted: G W syzkaller #0 PREEMPT(full) [ 159.016440][ T5911] Tainted: [W]=WARN [ 159.016449][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 159.016478][ T5911] Call Trace: [ 159.016486][ T5911] [ 159.016522][ T5911] __dump_stack+0x1d/0x30 [ 159.016592][ T5911] dump_stack_lvl+0x95/0xd0 [ 159.016621][ T5911] dump_stack+0x15/0x1b [ 159.016642][ T5911] should_fail_ex+0x263/0x280 [ 159.016722][ T5911] should_fail+0xb/0x20 [ 159.016742][ T5911] should_fail_usercopy+0x1a/0x20 [ 159.016846][ T5911] _copy_to_user+0x20/0xa0 [ 159.016930][ T5911] simple_read_from_buffer+0xb5/0x130 [ 159.016973][ T5911] proc_fail_nth_read+0x10e/0x150 [ 159.017006][ T5911] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.017167][ T5911] vfs_read+0x1ab/0x7f0 [ 159.017205][ T5911] ? __rcu_read_unlock+0x4e/0x70 [ 159.017231][ T5911] ? __fget_files+0x184/0x1c0 [ 159.017259][ T5911] ? mutex_lock+0x57/0x90 [ 159.017287][ T5911] ksys_read+0xdc/0x1a0 [ 159.017328][ T5911] __x64_sys_read+0x40/0x50 [ 159.017364][ T5911] x64_sys_call+0x2886/0x3020 [ 159.017396][ T5911] do_syscall_64+0x12c/0x370 [ 159.017494][ T5911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.017523][ T5911] RIP: 0033:0x7fe2af3dc84e [ 159.017544][ T5911] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 159.017643][ T5911] RSP: 002b:00007fe2ade76fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.017670][ T5911] RAX: ffffffffffffffda RBX: 00007fe2ade776c0 RCX: 00007fe2af3dc84e [ 159.017712][ T5911] RDX: 000000000000000f RSI: 00007fe2ade770a0 RDI: 0000000000000004 [ 159.017729][ T5911] RBP: 00007fe2ade77090 R08: 0000000000000000 R09: 0000000000000000 [ 159.017745][ T5911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.017761][ T5911] R13: 00007fe2af696038 R14: 00007fe2af695fa0 R15: 00007ffd69cfc598 [ 159.017788][ T5911] [ 159.298397][ T5922] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 159.352144][ T5925] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 159.362842][ T5925] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.375178][ T5925] ext2 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 159.457043][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.571934][ T5931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.667'. [ 159.632932][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.684554][ T5939] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 159.774447][ T5943] veth0: entered promiscuous mode [ 159.842972][ T5939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.864411][ T5939] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.366913][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.495515][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.623118][ T28] audit: type=1400 audit(1771216203.079:488): avc: denied { setopt } for pid=5952 comm="syz.2.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 160.756337][ T28] audit: type=1400 audit(1771216203.229:489): avc: denied { write } for pid=5956 comm="syz.1.676" path="socket:[14321]" dev="sockfs" ino=14321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 160.783232][ T5934] veth0: left promiscuous mode [ 160.800812][ T5963] set_capacity_and_notify: 3 callbacks suppressed [ 160.800874][ T5963] loop2: detected capacity change from 0 to 128 [ 160.848352][ T5963] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.883269][ T5967] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 160.955671][ T5972] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 161.189689][ T5981] loop0: detected capacity change from 0 to 128 [ 161.224394][ T5979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.685'. [ 161.250552][ T5979] hub 1-0:1.0: USB hub found [ 161.255944][ T5979] hub 1-0:1.0: 8 ports detected [ 161.311382][ T5985] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 161.319799][ T5985] FAT-fs (loop0): Filesystem has been set read-only [ 161.415473][ T5987] netlink: 20 bytes leftover after parsing attributes in process `syz.2.687'. [ 161.522178][ T6001] syzkaller1: entered promiscuous mode [ 161.528145][ T6001] syzkaller1: entered allmulticast mode [ 161.809455][ T5982] syz.0.686: attempt to access beyond end of device [ 161.809455][ T5982] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 161.825897][ T6006] loop2: detected capacity change from 0 to 1024 [ 161.835395][ T6008] netlink: 36 bytes leftover after parsing attributes in process `syz.4.696'. [ 161.844246][ T5982] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 161.846339][ T6006] EXT4-fs: inline encryption not supported [ 162.036423][ T6006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.049103][ T5981] syz.0.686: attempt to access beyond end of device [ 162.049103][ T5981] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 162.075115][ T5981] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 163.040087][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.155598][ T6026] netlink: 'syz.2.701': attribute type 10 has an invalid length. [ 163.220970][ T6030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.702'. [ 163.347265][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.706'. [ 163.538542][ T6048] loop2: detected capacity change from 0 to 512 [ 163.558221][ T6044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.589819][ T6052] netlink: 64 bytes leftover after parsing attributes in process `syz.1.710'. [ 163.599402][ T6048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.605986][ T6052] netlink: 64 bytes leftover after parsing attributes in process `syz.1.710'. [ 163.635980][ T6044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.668371][ T6054] loop1: detected capacity change from 0 to 128 [ 163.679436][ T6048] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.827834][ T6060] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 163.857730][ T6062] xt_TPROXY: Can be used only with -p tcp or -p udp [ 163.864960][ T6060] FAT-fs (loop1): Filesystem has been set read-only [ 163.914525][ T6064] loop3: detected capacity change from 0 to 2048 [ 163.954467][ T6064] loop3: p1 p2 < > p4 < p5 > [ 163.959575][ T6064] loop3: partition table partially beyond EOD, truncated [ 163.969788][ T6064] loop3: p1 start 8388607 is beyond EOD, truncated [ 163.977618][ T6064] loop3: p2 start 4294902784 is beyond EOD, truncated [ 163.987466][ T6064] loop3: p5 start 8388607 is beyond EOD, truncated [ 164.018640][ T3000] loop3: p1 p2 < > p4 < p5 > [ 164.025158][ T3000] loop3: partition table partially beyond EOD, truncated [ 164.037874][ T3000] loop3: p1 start 8388607 is beyond EOD, truncated [ 164.049168][ T3000] loop3: p2 start 4294902784 is beyond EOD, truncated [ 164.125588][ T3000] loop3: p5 start 8388607 is beyond EOD, truncated [ 164.139738][ T28] audit: type=1400 audit(1771216206.619:490): avc: denied { ioctl } for pid=6063 comm="syz.3.714" path="socket:[15743]" dev="sockfs" ino=15743 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 164.191202][ T6069] loop3: detected capacity change from 0 to 512 [ 164.236177][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 164.261985][ T6069] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 164.334092][ T6069] EXT4-fs (loop3): orphan cleanup on readonly fs [ 164.352634][ T6054] syz.1.711: attempt to access beyond end of device [ 164.352634][ T6054] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 164.366778][ T6069] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 164.392829][ T6054] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 164.503988][ T6059] syz.1.711: attempt to access beyond end of device [ 164.503988][ T6059] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 164.517868][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.527283][ T6069] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 164.534652][ T6069] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.715: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 164.558098][ T6059] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 164.579681][ T6069] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 164.583869][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 164.599532][ C0] EXT4-fs (loop3): last error at time 1771216207: ext4_ext_check_inode:521: inode 13 [ 164.609546][ T6069] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.715: couldn't read orphan inode 13 (err -117) [ 164.641958][ T6069] loop3: lost filesystem error report for type 5 error -117 [ 164.652469][ T6069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.751383][ T6069] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.715'. [ 165.233456][ T6075] netlink: 44 bytes leftover after parsing attributes in process `syz.1.718'. [ 165.257398][ T6077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.717'. [ 165.352005][ T28] audit: type=1400 audit(1771216207.829:491): avc: denied { setopt } for pid=6080 comm="syz.1.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 165.380564][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.512097][ T6090] loop0: detected capacity change from 0 to 512 [ 165.572337][ T6090] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 165.584711][ T6092] loop4: detected capacity change from 0 to 128 [ 165.591334][ T6092] vfat: Unknown parameter 'ÿÿÿÿgÔ­¬aÆPpá0å‰úšpº–.{í6›' [ 165.613936][ T6090] EXT4-fs (loop0): group descriptors corrupted! [ 166.375146][ T28] audit: type=1400 audit(1771216208.859:492): avc: denied { getopt } for pid=6099 comm="syz.3.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.394547][ T28] audit: type=1400 audit(1771216208.859:493): avc: denied { ioctl } for pid=6099 comm="syz.3.725" path="socket:[16016]" dev="sockfs" ino=16016 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.419365][ T28] audit: type=1400 audit(1771216208.859:494): avc: denied { write } for pid=6099 comm="syz.3.725" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 166.452740][ T6096] veth0: entered promiscuous mode [ 166.473931][ T28] audit: type=1400 audit(1771216208.859:495): avc: denied { open } for pid=6099 comm="syz.3.725" path="/dev/input/event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 166.521456][ T28] audit: type=1400 audit(1771216208.859:496): avc: denied { write } for pid=6099 comm="syz.3.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 166.544163][ T6088] veth0: left promiscuous mode [ 166.571235][ T6107] kthread_run failed with err -4 [ 166.623441][ T6115] dummy0: entered promiscuous mode [ 166.630478][ T6115] dummy0: left promiscuous mode [ 167.232863][ T6120] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1538 sclass=netlink_tcpdiag_socket pid=6120 comm=syz.3.731 [ 167.302718][ T6120] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6120 comm=syz.3.731 [ 167.386746][ T6126] netlink: 96 bytes leftover after parsing attributes in process `syz.4.732'. [ 167.477893][ T6128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.733'. [ 167.487447][ T6137] loop1: detected capacity change from 0 to 128 [ 167.515478][ T6128] hub 1-0:1.0: USB hub found [ 167.520515][ T6128] hub 1-0:1.0: 8 ports detected [ 167.531535][ T28] audit: type=1400 audit(1771216209.989:497): avc: denied { allowed } for pid=6119 comm="syz.3.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 167.599186][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.739'. [ 167.649486][ T6149] loop3: detected capacity change from 0 to 1024 [ 167.661592][ T6149] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29845!=20869) [ 167.676638][ T28] audit: type=1326 audit(1771216210.159:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6146 comm="syz.4.740" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bbca3bf79 code=0x0 [ 167.714068][ T6149] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 167.742712][ T6154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.743'. [ 167.764341][ T6149] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz.3.741: Invalid inode table block 0 in block_group 0 [ 167.800836][ T6149] loop3: lost filesystem error report for type 5 error -117 [ 167.801030][ T6149] EXT4-fs (loop3): no journal found [ 167.808524][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 167.808544][ C0] EXT4-fs (loop3): initial error at time 1771216210: __ext4_get_inode_loc:4782 [ 167.808569][ C0] EXT4-fs (loop3): last error at time 1771216210: __ext4_get_inode_loc:4782 [ 167.853889][ T6149] EXT4-fs (loop3): can't get journal size [ 167.863024][ T6149] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz.3.741: Invalid inode table block 0 in block_group 0 [ 167.913912][ T6149] loop3: lost filesystem error report for type 5 error -117 [ 167.914242][ T6149] EXT4-fs (loop3): get root inode failed [ 167.927644][ T6149] EXT4-fs (loop3): mount failed [ 167.997788][ T6164] loop0: detected capacity change from 0 to 1024 [ 168.015034][ T6164] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 168.056553][ T6164] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 168.070324][ T28] audit: type=1400 audit(1771216210.539:499): avc: denied { create } for pid=6165 comm="syz.4.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 168.076465][ T6166] veth0: entered promiscuous mode [ 168.092868][ T6164] EXT4-fs (loop0): orphan cleanup on readonly fs [ 168.112769][ T6165] veth0: left promiscuous mode [ 168.118255][ T6164] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz.0.746: Invalid inode table block 0 in block_group 0 [ 168.135793][ T6169] loop3: detected capacity change from 0 to 1024 [ 168.184880][ T6164] loop0: lost filesystem error report for type 5 error -117 [ 168.185147][ T6164] EXT4-fs (loop0): Remounting filesystem read-only [ 168.199057][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 168.199081][ C1] EXT4-fs (loop0): initial error at time 1771216210: __ext4_get_inode_loc:4782 [ 168.199104][ C1] EXT4-fs (loop0): last error at time 1771216210: __ext4_get_inode_loc:4782 [ 168.223396][ T6164] EXT4-fs (loop0): 1 truncate cleaned up [ 168.230079][ T6164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.243559][ T6169] EXT4-fs error (device loop3): ext4_quota_enable:7194: inode #4: comm syz.3.748: iget: checksum invalid [ 168.264207][ T6169] loop3: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -74 [ 168.264456][ T6169] EXT4-fs error (device loop3): ext4_quota_enable:7197: comm syz.3.748: Bad quota inode: 4, type: 1 [ 168.284361][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 168.284386][ C1] EXT4-fs (loop3): initial error at time 1771216210: ext4_quota_enable:7194: inode 4 [ 168.284429][ C1] EXT4-fs (loop3): last error at time 1771216210: ext4_quota_enable:7194: inode 4 [ 168.309854][ T6169] loop3: lost filesystem error report for type 5 error -117 [ 168.310008][ T6169] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 168.332389][ T6169] EXT4-fs (loop3): mount failed [ 168.423771][ T6143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.440684][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.495170][ T6180] loop0: detected capacity change from 0 to 128 [ 168.573772][ T6170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.708750][ T6174] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 168.792802][ T6193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6193 comm=syz.4.754 [ 168.847324][ T6202] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 168.855183][ T6203] netlink: 136 bytes leftover after parsing attributes in process `syz.2.758'. [ 168.873839][ T6202] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 168.969712][ T6214] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 169.025733][ T6216] tipc: Started in network mode [ 169.030675][ T6216] tipc: Node identity 000000005f0000000000000000000001, cluster identity 4711 [ 169.039962][ T6216] tipc: Enabling of bearer rejected, failed to enable media [ 169.049697][ T6212] netlink: 20 bytes leftover after parsing attributes in process `syz.2.762'. [ 169.059900][ T6212] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.762' sets config #0 [ 169.069320][ T6212] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.762' sets config #1 [ 169.139466][ T6222] netlink: 64 bytes leftover after parsing attributes in process `syz.2.766'. [ 169.161793][ T6223] syzkaller1: entered promiscuous mode [ 169.167466][ T6223] syzkaller1: entered allmulticast mode [ 169.172936][ T6220] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6220 comm=syz.0.765 [ 169.253056][ T6230] loop0: detected capacity change from 0 to 128 [ 169.411636][ T6236] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 169.433969][ T6236] FAT-fs (loop0): Filesystem has been set read-only [ 169.494531][ T6232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.503146][ T6232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.658150][ T6241] syzkaller1: entered promiscuous mode [ 169.663714][ T6241] syzkaller1: entered allmulticast mode [ 169.670978][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 169.670996][ T28] audit: type=1400 audit(1771216212.139:510): avc: denied { ioctl } for pid=6240 comm="syz.2.772" path="socket:[16287]" dev="sockfs" ino=16287 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.849446][ T6233] syz.0.769: attempt to access beyond end of device [ 169.849446][ T6233] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 169.863732][ T6233] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 169.910955][ T6230] syz.0.769: attempt to access beyond end of device [ 169.910955][ T6230] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 169.962760][ T6241] bond1 (unregistering): Released all slaves [ 170.016880][ T6244] loop3: detected capacity change from 0 to 1024 [ 170.057678][ T6244] EXT4-fs error (device loop3): ext4_quota_enable:7194: inode #4: comm syz.3.773: iget: checksum invalid [ 170.104821][ T6244] loop3: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -74 [ 170.105373][ T6244] EXT4-fs error (device loop3): ext4_quota_enable:7197: comm syz.3.773: Bad quota inode: 4, type: 1 [ 170.114410][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 170.114449][ C1] EXT4-fs (loop3): initial error at time 1771216212: ext4_quota_enable:7194: inode 4 [ 170.114476][ C1] EXT4-fs (loop3): last error at time 1771216212: ext4_quota_enable:7194: inode 4 [ 170.201152][ T6230] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 170.221428][ T6244] loop3: lost filesystem error report for type 5 error -117 [ 170.225917][ T28] audit: type=1400 audit(1771216212.669:511): avc: denied { bind } for pid=6246 comm="syz.4.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.252574][ T6244] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 170.279552][ T6249] loop2: detected capacity change from 0 to 1024 [ 170.288615][ T6244] EXT4-fs (loop3): mount failed [ 170.291890][ T6249] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29845!=20869) [ 170.304310][ T6249] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 170.319848][ T6249] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz.2.775: Invalid inode table block 0 in block_group 0 [ 170.332865][ T6249] loop2: lost filesystem error report for type 5 error -117 [ 170.333867][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 170.347664][ C0] EXT4-fs (loop2): initial error at time 1771216212: __ext4_get_inode_loc:4782 [ 170.356674][ C0] EXT4-fs (loop2): last error at time 1771216212: __ext4_get_inode_loc:4782 [ 170.420000][ T6253] loop4: detected capacity change from 0 to 128 [ 170.434137][ T6253] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.447930][ T6253] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.583946][ T6249] EXT4-fs (loop2): no journal found [ 170.595312][ T6249] EXT4-fs (loop2): can't get journal size [ 170.632654][ T6249] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz.2.775: Invalid inode table block 0 in block_group 0 [ 170.701506][ T6249] loop2: lost filesystem error report for type 5 error -117 [ 170.702024][ T6249] EXT4-fs (loop2): get root inode failed [ 170.857045][ T6249] EXT4-fs (loop2): mount failed [ 171.646927][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.776693][ T6264] ipt_ECN: cannot use operation on non-tcp rule [ 171.833953][ T6265] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6265 comm=syz.2.779 [ 171.996828][ T6273] loop4: detected capacity change from 0 to 512 [ 172.034355][ T6273] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 172.042622][ T6273] EXT4-fs (loop4): orphan cleanup on readonly fs [ 172.084266][ T6273] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 172.124374][ T6273] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 172.131316][ T6273] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.780: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 172.149353][ T6273] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 172.149554][ T6273] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.780: couldn't read orphan inode 13 (err -117) [ 172.158893][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 172.158916][ C1] EXT4-fs (loop4): last error at time 1771216214: ext4_ext_check_inode:521: inode 13 [ 172.186954][ T6273] loop4: lost filesystem error report for type 5 error -117 [ 172.188190][ T6273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.211364][ T6273] __nla_validate_parse: 3 callbacks suppressed [ 172.211380][ T6273] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.780'. [ 172.275113][ T6275] syz.3.783: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 172.300060][ T6275] CPU: 1 UID: 0 PID: 6275 Comm: syz.3.783 Tainted: G W syzkaller #0 PREEMPT(full) [ 172.300098][ T6275] Tainted: [W]=WARN [ 172.300105][ T6275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.300118][ T6275] Call Trace: [ 172.300124][ T6275] [ 172.300132][ T6275] __dump_stack+0x1d/0x30 [ 172.300237][ T6275] dump_stack_lvl+0x95/0xd0 [ 172.300265][ T6275] dump_stack+0x15/0x1b [ 172.300289][ T6275] warn_alloc+0x145/0x1c0 [ 172.300315][ T6275] ? __schedule+0x85a/0xd40 [ 172.300346][ T6275] ? __rcu_read_unlock+0x4e/0x70 [ 172.300396][ T6275] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 172.300419][ T6275] ? __futex_wait+0x1fd/0x260 [ 172.300459][ T6275] ? __pfx_futex_wake_mark+0x10/0x10 [ 172.300498][ T6275] ? __rcu_read_unlock+0x4e/0x70 [ 172.300555][ T6275] ? avc_has_perm_noaudit+0xab/0x130 [ 172.300581][ T6275] ? should_fail_ex+0x30/0x280 [ 172.300609][ T6275] ? xskq_create+0x36/0xe0 [ 172.300733][ T6275] vmalloc_user_noprof+0x7d/0xb0 [ 172.300762][ T6275] ? xskq_create+0x80/0xe0 [ 172.300864][ T6275] xskq_create+0x80/0xe0 [ 172.300895][ T6275] xsk_init_queue+0x70/0xb0 [ 172.300930][ T6275] xsk_setsockopt+0x3f5/0x640 [ 172.300974][ T6275] ? __pfx_xsk_setsockopt+0x10/0x10 [ 172.301084][ T6275] __sys_setsockopt+0x184/0x200 [ 172.301115][ T6275] __x64_sys_setsockopt+0x64/0x80 [ 172.301140][ T6275] x64_sys_call+0x2327/0x3020 [ 172.301175][ T6275] do_syscall_64+0x12c/0x370 [ 172.301337][ T6275] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 172.301366][ T6275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.301388][ T6275] RIP: 0033:0x7fe2af41bf79 [ 172.301403][ T6275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.301421][ T6275] RSP: 002b:00007fe2ade56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 172.301517][ T6275] RAX: ffffffffffffffda RBX: 00007fe2af696090 RCX: 00007fe2af41bf79 [ 172.301535][ T6275] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 172.301549][ T6275] RBP: 00007fe2af4b27e0 R08: 0000000000000004 R09: 0000000000000000 [ 172.301563][ T6275] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.301576][ T6275] R13: 00007fe2af696128 R14: 00007fe2af696090 R15: 00007ffd69cfc598 [ 172.301601][ T6275] [ 172.559426][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.564722][ T6275] Mem-Info: [ 172.571575][ T6275] active_anon:13435 inactive_anon:0 isolated_anon:0 [ 172.571575][ T6275] active_file:22628 inactive_file:2594 isolated_file:0 [ 172.571575][ T6275] unevictable:0 dirty:344 writeback:0 [ 172.571575][ T6275] slab_reclaimable:3428 slab_unreclaimable:20261 [ 172.571575][ T6275] mapped:37197 shmem:6298 pagetables:3149 [ 172.571575][ T6275] sec_pagetables:0 bounce:0 [ 172.571575][ T6275] kernel_misc_reclaimable:0 [ 172.571575][ T6275] free:1870715 free_pcp:5373 free_cma:0 [ 172.620953][ T28] audit: type=1400 audit(1771216215.099:512): avc: denied { execute } for pid=6270 comm="syz.3.783" path="/151/rdma.current" dev="tmpfs" ino=824 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 172.645276][ T6275] Node 0 active_anon:53740kB inactive_anon:0kB active_file:90512kB inactive_file:10376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150412kB dirty:1376kB writeback:0kB shmem:25308kB kernel_stack:3488kB pagetables:12712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 172.689984][ T6280] loop4: detected capacity change from 0 to 512 [ 172.697191][ T6275] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.762953][ T6275] lowmem_reserve[]: 0 2879 7857 7857 [ 172.769828][ T6275] Node 0 DMA32 free:2944800kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948324kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 172.804308][ T28] audit: type=1400 audit(1771216215.249:513): avc: denied { create } for pid=6268 comm="syz.2.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 172.825099][ T6275] lowmem_reserve[]: 0 0 4978 4978 [ 172.830286][ T6275] Node 0 Normal free:4525748kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54704kB inactive_anon:0kB active_file:90512kB inactive_file:10340kB unevictable:0kB writepending:1380kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:10756kB local_pcp:5132kB free_cma:0kB [ 172.831715][ T6280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.877516][ T6275] lowmem_reserve[]: 0 0 0 0 [ 172.882307][ T6275] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 172.895416][ T6275] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 5*16kB (M) 2*32kB (M) 2*64kB (M) 4*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944800kB [ 172.903283][ T6289] loop1: detected capacity change from 0 to 512 [ 172.931073][ T6275] Node 0 Normal: 0*4kB 264*8kB (UME) 178*16kB (M) 134*32kB (UM) 208*64kB (UM) 107*128kB (UM) 83*256kB (ME) 33*512kB (UM) 11*1024kB (UME) 5*2048kB (ME) 1081*4096kB (M) = 4523680kB [ 172.949235][ T6275] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 172.949238][ T28] audit: type=1400 audit(1771216215.279:514): avc: denied { bind } for pid=6268 comm="syz.2.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 172.960129][ T6289] /dev/loop1: Can't open blockdev [ 172.995025][ T6280] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.019499][ T6291] No such timeout policy "syz0" [ 173.025349][ T6290] No such timeout policy "syz0" [ 173.037576][ T6275] 31343 total pagecache pages [ 173.067172][ T6275] 0 pages in swap cache [ 173.071405][ T6275] Free swap = 124992kB [ 173.076037][ T6275] Total swap = 124996kB [ 173.080231][ T6275] 2097051 pages RAM [ 173.084302][ T6280] support for cryptoloop has been removed. Use dm-crypt instead. [ 173.092540][ T6275] 0 pages HighMem/MovableOnly [ 173.097508][ T6275] 81570 pages reserved [ 173.138422][ T28] audit: type=1400 audit(1771216215.619:515): avc: denied { rmdir } for pid=3314 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 173.164328][ T28] audit: type=1400 audit(1771216215.639:516): avc: denied { setopt } for pid=6268 comm="syz.2.782" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 173.165407][ T6293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6293 comm=syz.1.787 [ 173.210242][ T6269] loop2: detected capacity change from 0 to 512 [ 173.217974][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.235467][ T6295] netlink: 20 bytes leftover after parsing attributes in process `syz.3.789'. [ 173.263531][ T28] audit: type=1400 audit(1771216215.739:517): avc: denied { read } for pid=6292 comm="syz.1.787" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 173.294492][ T28] audit: type=1400 audit(1771216215.739:518): avc: denied { open } for pid=6292 comm="syz.1.787" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 173.320963][ T6269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.326472][ T28] audit: type=1400 audit(1771216215.739:519): avc: denied { ioctl } for pid=6292 comm="syz.1.787" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 173.378493][ T6269] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.051386][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.086062][ T6312] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6312 comm=syz.3.792 [ 174.216063][ T6301] loop4: detected capacity change from 0 to 512 [ 174.251974][ T6324] loop3: detected capacity change from 0 to 128 [ 174.269333][ T6324] FAT-fs (loop3): Directory bread(block 32) failed [ 174.276157][ T6324] FAT-fs (loop3): Directory bread(block 33) failed [ 174.282827][ T6324] FAT-fs (loop3): Directory bread(block 34) failed [ 174.289901][ T6324] FAT-fs (loop3): Directory bread(block 35) failed [ 174.324634][ T6324] FAT-fs (loop3): Directory bread(block 36) failed [ 174.335219][ T6301] EXT4-fs (loop4): 1 truncate cleaned up [ 174.343991][ T6324] FAT-fs (loop3): Directory bread(block 37) failed [ 174.350812][ T6324] FAT-fs (loop3): Directory bread(block 38) failed [ 174.364501][ T6324] FAT-fs (loop3): Directory bread(block 39) failed [ 174.374623][ T6324] FAT-fs (loop3): Directory bread(block 40) failed [ 174.389311][ T6301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.389628][ T6324] FAT-fs (loop3): Directory bread(block 41) failed [ 174.468166][ T6320] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 174.481159][ T6320] FAT-fs (loop3): Filesystem has been set read-only [ 174.506319][ T6334] loop1: detected capacity change from 0 to 512 [ 174.670859][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.189713][ T6344] loop4: detected capacity change from 0 to 512 [ 175.197000][ T6344] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 175.227464][ T6344] EXT4-fs (loop4): 1 truncate cleaned up [ 175.245981][ T6344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.506976][ T6350] loop2: detected capacity change from 0 to 128 [ 175.569291][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.590403][ T6353] loop3: detected capacity change from 0 to 512 [ 175.628929][ T6357] loop0: detected capacity change from 0 to 512 [ 175.637959][ T6353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.651606][ T6357] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 175.656933][ T6353] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.691698][ T6363] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 175.694952][ T6357] EXT4-fs (loop0): 1 truncate cleaned up [ 175.746838][ T6357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.767603][ T6363] FAT-fs (loop2): Filesystem has been set read-only [ 175.928568][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.990743][ T6378] FAULT_INJECTION: forcing a failure. [ 175.990743][ T6378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.124098][ T6378] CPU: 1 UID: 0 PID: 6378 Comm: syz.0.812 Tainted: G W syzkaller #0 PREEMPT(full) [ 176.124220][ T6378] Tainted: [W]=WARN [ 176.124244][ T6378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 176.124261][ T6378] Call Trace: [ 176.124268][ T6378] [ 176.124278][ T6378] __dump_stack+0x1d/0x30 [ 176.124310][ T6378] dump_stack_lvl+0x95/0xd0 [ 176.124474][ T6378] dump_stack+0x15/0x1b [ 176.124498][ T6378] should_fail_ex+0x263/0x280 [ 176.124566][ T6378] should_fail+0xb/0x20 [ 176.124592][ T6378] should_fail_usercopy+0x1a/0x20 [ 176.124677][ T6378] _copy_to_user+0x20/0xa0 [ 176.124735][ T6378] simple_read_from_buffer+0xb5/0x130 [ 176.124828][ T6378] proc_fail_nth_read+0x10e/0x150 [ 176.124862][ T6378] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.125014][ T6378] vfs_read+0x1ab/0x7f0 [ 176.125042][ T6378] ? __rcu_read_unlock+0x4e/0x70 [ 176.125064][ T6378] ? __fget_files+0x184/0x1c0 [ 176.125090][ T6378] ? mutex_lock+0x57/0x90 [ 176.125148][ T6378] ksys_read+0xdc/0x1a0 [ 176.125249][ T6378] __x64_sys_read+0x40/0x50 [ 176.125284][ T6378] x64_sys_call+0x2886/0x3020 [ 176.125319][ T6378] do_syscall_64+0x12c/0x370 [ 176.125363][ T6378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.125431][ T6378] RIP: 0033:0x7fa17c1ec84e [ 176.125452][ T6378] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 176.125473][ T6378] RSP: 002b:00007fa17ac7efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.125513][ T6378] RAX: ffffffffffffffda RBX: 00007fa17ac7f6c0 RCX: 00007fa17c1ec84e [ 176.125528][ T6378] RDX: 000000000000000f RSI: 00007fa17ac7f0a0 RDI: 0000000000000004 [ 176.125545][ T6378] RBP: 00007fa17ac7f090 R08: 0000000000000000 R09: 0000000000000000 [ 176.125561][ T6378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.125577][ T6378] R13: 00007fa17c4a6038 R14: 00007fa17c4a5fa0 R15: 00007ffc9c960c38 [ 176.125622][ T6378] [ 176.204040][ T6350] syz.2.803: attempt to access beyond end of device [ 176.204040][ T6350] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 176.355982][ T6350] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 176.356180][ T6358] syz.2.803: attempt to access beyond end of device [ 176.356180][ T6358] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 176.356219][ T6358] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 176.356508][ T6358] syz.2.803: attempt to access beyond end of device [ 176.356508][ T6358] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 176.356539][ T6358] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 176.500573][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 176.500624][ T28] audit: type=1400 audit(1771216218.979:522): avc: denied { map } for pid=6381 comm="syz.0.814" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 176.501911][ T28] audit: type=1400 audit(1771216218.979:523): avc: denied { getopt } for pid=6381 comm="syz.0.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 176.590941][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.675942][ T6389] EXT4-fs: inline encryption not supported [ 176.685226][ T6389] EXT4-fs: Ignoring removed orlov option [ 176.702183][ T28] audit: type=1326 audit(1771216219.179:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.3.815" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2af41bf79 code=0x0 [ 176.727763][ T6389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.792168][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.906706][ T6402] tipc: Enabling of bearer rejected, failed to enable media [ 177.133739][ T6419] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.400401][ T6425] dummy0: entered promiscuous mode [ 177.407751][ T6425] dummy0: left promiscuous mode [ 177.459356][ T6427] netlink: 220 bytes leftover after parsing attributes in process `syz.1.829'. [ 177.712821][ T6435] set_capacity_and_notify: 3 callbacks suppressed [ 177.713054][ T6435] loop3: detected capacity change from 0 to 512 [ 178.873901][ T28] audit: type=1400 audit(1771216221.349:525): avc: denied { getopt } for pid=6440 comm="syz.1.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 179.745972][ T6446] loop2: detected capacity change from 0 to 128 [ 179.877303][ T6448] ------------[ cut here ]------------ [ 179.882862][ T6448] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0) [ 179.900825][ T6448] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.4.833/6448 [ 179.911659][ T6448] Modules linked in: [ 179.915722][ T6448] CPU: 1 UID: 0 PID: 6448 Comm: syz.4.833 Tainted: G W syzkaller #0 PREEMPT(full) [ 179.926549][ T6448] Tainted: [W]=WARN [ 179.930399][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 179.940642][ T6448] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 179.947015][ T6448] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 179.966788][ T6448] RSP: 0018:ffffc9001096b368 EFLAGS: 00010246 [ 179.973005][ T6448] RAX: ffff888101d34c78 RBX: 0000000000000000 RCX: 0000000004000000 [ 179.981042][ T6448] RDX: ffffffff8681261d RSI: ffffffff867e6bc9 RDI: ffffffff871d3750 [ 179.989193][ T6448] RBP: ffff8881053a0ae0 R08: 0000000000000000 R09: 0000000004000000 [ 179.997255][ T6448] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff8881053a0aa0 [ 180.005280][ T6448] R13: 0000000000000000 R14: ffff8881053a0aec R15: ffff8881053a0ad8 [ 180.013287][ T6448] FS: 00007f7bbb4556c0(0000) GS:ffff8882ae9e4000(0000) knlGS:0000000000000000 [ 180.022301][ T6448] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.029033][ T6448] CR2: 00007f7bbb454ff8 CR3: 000000011be5a000 CR4: 00000000003506f0 [ 180.037129][ T6448] Call Trace: [ 180.040478][ T6448] [ 180.043463][ T6448] reg_set_min_max+0x21c/0x260 [ 180.048326][ T6448] check_cond_jmp_op+0x1355/0x1ab0 [ 180.053514][ T6448] do_check+0x4a9b/0x9860 [ 180.057964][ T6448] do_check_common+0xd0b/0x1630 [ 180.063048][ T6448] bpf_check+0x2f6d/0xcc10 [ 180.067589][ T6448] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 180.073685][ T6448] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 180.079432][ T6448] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 180.085439][ T6448] ? pcpu_block_update+0x377/0x3b0 [ 180.090603][ T6448] ? pcpu_block_refresh_hint+0x10b/0x170 [ 180.096335][ T6448] ? _find_next_zero_bit+0x64/0xa0 [ 180.101514][ T6448] ? pcpu_block_refresh_hint+0x157/0x170 [ 180.107254][ T6448] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 180.113475][ T6448] ? css_rstat_updated+0xbb/0x280 [ 180.118666][ T6448] ? mod_memcg_state+0x182/0x270 [ 180.123659][ T6448] ? __rcu_read_unlock+0x4e/0x70 [ 180.128679][ T6448] ? avc_has_perm_noaudit+0xab/0x130 [ 180.134123][ T6448] ? avc_has_perm+0x101/0x190 [ 180.138913][ T6448] ? selinux_bpf_prog_load+0x197/0x1c0 [ 180.144546][ T6448] ? security_bpf_prog_load+0x9e/0x140 [ 180.150048][ T6448] bpf_prog_load+0xf76/0x1140 [ 180.154904][ T6448] ? security_bpf+0x2b/0x90 [ 180.159536][ T6448] __sys_bpf+0x505/0x7e0 [ 180.163904][ T6448] __x64_sys_bpf+0x41/0x50 [ 180.168384][ T6448] x64_sys_call+0x10cb/0x3020 [ 180.173106][ T6448] do_syscall_64+0x12c/0x370 [ 180.177792][ T6448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.183773][ T6448] RIP: 0033:0x7f7bbca3bf79 [ 180.188272][ T6448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.208080][ T6448] RSP: 002b:00007f7bbb455028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 180.216575][ T6448] RAX: ffffffffffffffda RBX: 00007f7bbccb6180 RCX: 00007f7bbca3bf79 [ 180.224624][ T6448] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 180.232651][ T6448] RBP: 00007f7bbcad27e0 R08: 0000000000000000 R09: 0000000000000000 [ 180.240779][ T6448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.248929][ T6448] R13: 00007f7bbccb6218 R14: 00007f7bbccb6180 R15: 00007ffd7fe156f8 [ 180.257015][ T6448] [ 180.260101][ T6448] ---[ end trace 0000000000000000 ]--- [ 180.751089][ T6435] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec09c, mo2=0002] [ 180.872393][ T6435] System zones: 1-12 [ 180.876735][ T28] audit: type=1400 audit(1771216223.349:526): avc: denied { read write } for pid=6452 comm="syz.1.838" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 180.904224][ T6435] [ 180.912297][ T6454] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 180.928503][ T6435] EXT4-fs: error -4 creating inode table initialization thread [ 181.054349][ T6454] FAT-fs (loop2): Filesystem has been set read-only [ 181.065697][ T6435] EXT4-fs (loop3): mount failed [ 181.507538][ T28] audit: type=1400 audit(1771216223.349:527): avc: denied { open } for pid=6452 comm="syz.1.838" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 181.613349][ T6464] loop2: detected capacity change from 0 to 512 [ 181.649135][ T6466] loop1: detected capacity change from 0 to 128 [ 181.660461][ T6464] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 181.679825][ T6466] vfat: Unknown parameter 'ÿÿÿÿgÔ­¬aÆPpá0å‰úšpº–.{í6›' [ 181.684562][ T6464] EXT4-fs (loop2): orphan cleanup on readonly fs [ 181.701753][ T6464] EXT4-fs warning (device loop2): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 181.705313][ T28] audit: type=1326 audit(1771216224.179:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6468 comm="syz.4.843" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7bbca3bf79 code=0x0 [ 181.740426][ T6464] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 181.758867][ T6464] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.840: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 181.759067][ T6471] loop4: detected capacity change from 0 to 512 [ 181.777956][ T6464] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 181.793873][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 181.809506][ C0] EXT4-fs (loop2): last error at time 1771216224: ext4_ext_check_inode:521: inode 13 [ 181.859395][ T6464] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.840: couldn't read orphan inode 13 (err -117) [ 181.874320][ T6464] loop2: lost filesystem error report for type 5 error -117 [ 181.891698][ T6464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.047286][ T6464] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.840'. [ 182.590373][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.715947][ T6488] loop4: detected capacity change from 0 to 512 [ 182.840271][ T6488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.855685][ T6488] ext4 filesystem being mounted at /196/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.886058][ T6499] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 182.896332][ T6488] EXT4-fs warning (device loop4): ext4_group_add:1716: Can't resize non-sparse filesystem further [ 182.991059][ T6506] loop3: detected capacity change from 0 to 1024 [ 183.038050][ T6506] EXT4-fs: Ignoring removed i_version option [ 183.047782][ T6506] EXT4-fs: Ignoring removed bh option [ 183.061230][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.082460][ T6506] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 183.099191][ T6509] dummy0: entered promiscuous mode [ 183.113896][ T6493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=6493 comm=syz.1.850 [ 183.128368][ T6509] dummy0: left promiscuous mode [ 183.134340][ T6506] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 183.174057][ T28] audit: type=1400 audit(1771216225.639:529): avc: denied { create } for pid=6505 comm="syz.3.852" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 183.296362][ T28] audit: type=1326 audit(1771216225.779:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.3.857" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2af41bf79 code=0x0 [ 183.353364][ T28] audit: type=1400 audit(1771216225.829:531): avc: denied { ioctl } for pid=6523 comm="syz.1.859" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=18451 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 183.383245][ T6522] loop3: detected capacity change from 0 to 512 [ 183.399634][ T6526] loop1: detected capacity change from 0 to 128 [ 183.554988][ T6533] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 183.562952][ T6533] FAT-fs (loop1): Filesystem has been set read-only [ 183.578072][ T6511] loop4: detected capacity change from 0 to 512 [ 183.592128][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.862'. [ 183.615923][ T6511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.630889][ T6535] macvlan2: entered promiscuous mode [ 183.636358][ T6535] macvlan2: entered allmulticast mode [ 183.641835][ T6535] veth0_virt_wifi: entered allmulticast mode [ 183.649453][ T6511] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.785115][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.900308][ T6539] loop2: detected capacity change from 0 to 512 [ 183.906639][ T6526] syz.1.860: attempt to access beyond end of device [ 183.906639][ T6526] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 183.906714][ T6526] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 183.906857][ T6532] syz.1.860: attempt to access beyond end of device [ 183.906857][ T6532] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 183.906887][ T6532] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 183.907304][ T6526] syz.1.860: attempt to access beyond end of device [ 183.907304][ T6526] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 183.907332][ T6526] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 184.090179][ T6539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.141546][ T6539] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.170558][ T6551] loop3: detected capacity change from 0 to 1024 [ 184.505087][ T6558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.867'. [ 184.633055][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.666706][ T6560] netlink: 96 bytes leftover after parsing attributes in process `syz.4.868'. [ 184.693895][ T6560] netlink: 96 bytes leftover after parsing attributes in process `syz.4.868'. [ 184.777927][ T6566] loop4: detected capacity change from 0 to 512 [ 184.822761][ T6566] EXT4-fs: Ignoring removed orlov option [ 184.831159][ T6570] loop2: detected capacity change from 0 to 512 [ 184.838407][ T6568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 184.948669][ T28] audit: type=1400 audit(1771216227.419:532): avc: denied { create } for pid=6572 comm="syz.1.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 185.016452][ T6566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.174096][ T6566] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.204997][ T6581] netlink: 136 bytes leftover after parsing attributes in process `syz.3.877'. [ 185.680140][ T28] audit: type=1400 audit(1771216228.159:533): avc: denied { write } for pid=6565 comm="syz.4.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 185.709546][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.878'. [ 185.920537][ T6590] loop1: detected capacity change from 0 to 164 [ 185.936903][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.946426][ T6590] iso9660: Bad value for 'check' [ 186.057351][ T28] audit: type=1326 audit(1771216228.539:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6375d6bf79 code=0x7ffc0000 [ 186.067047][ T6600] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 186.155148][ T28] audit: type=1326 audit(1771216228.539:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6375d6bf79 code=0x7ffc0000 [ 186.214365][ T6607] netlink: 96 bytes leftover after parsing attributes in process `syz.1.886'. [ 186.262492][ T28] audit: type=1326 audit(1771216228.539:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6375d6bf79 code=0x7ffc0000 [ 186.330112][ T6596] syzkaller1: entered promiscuous mode [ 186.340000][ T6596] syzkaller1: entered allmulticast mode [ 186.346505][ T6611] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 186.498921][ T6625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.537239][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 186.537309][ T28] audit: type=1400 audit(1771216229.019:591): avc: denied { unlink } for pid=6632 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=7094 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 186.871310][ T28] audit: type=1400 audit(1771216229.349:592): avc: denied { bind } for pid=6648 comm="syz.4.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.925181][ T6598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.937879][ T28] audit: type=1400 audit(1771216229.369:593): avc: denied { setopt } for pid=6648 comm="syz.4.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.014458][ T6598] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.037177][ T28] audit: type=1400 audit(1771216229.379:594): avc: denied { read } for pid=6648 comm="syz.4.891" path="socket:[18643]" dev="sockfs" ino=18643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.080379][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.134489][ T6660] netlink: 24 bytes leftover after parsing attributes in process `syz.4.895'. [ 187.137137][ T28] audit: type=1400 audit(1771216229.379:595): avc: granted { setsecparam } for pid=6648 comm="syz.4.891" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 187.164931][ T6662] netlink: 136 bytes leftover after parsing attributes in process `syz.1.893'. [ 187.180495][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.200762][ T28] audit: type=1400 audit(1771216229.599:596): avc: denied { read } for pid=6659 comm="syz.4.895" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 187.283949][ T28] audit: type=1400 audit(1771216229.599:597): avc: denied { ioctl } for pid=6659 comm="syz.4.895" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 187.659605][ T6669] EXT4-fs (loop3): 1 orphan inode deleted [ 187.730715][ T6669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.772129][ T6680] set_capacity_and_notify: 3 callbacks suppressed [ 187.772150][ T6680] loop1: detected capacity change from 0 to 128 [ 187.922412][ T6686] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 187.958492][ T6686] FAT-fs (loop1): Filesystem has been set read-only [ 188.065265][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.285630][ T6697] loop3: detected capacity change from 0 to 128 [ 188.332773][ T6697] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 188.367086][ T6697] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.497153][ T6709] loop2: detected capacity change from 0 to 128 [ 188.605620][ T6709] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.672792][ T6684] syz.1.901: attempt to access beyond end of device [ 188.672792][ T6684] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 188.687240][ T6709] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.727831][ T6697] ext2 filesystem being mounted at /175/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 188.793304][ T6684] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 188.907847][ T6680] syz.1.901: attempt to access beyond end of device [ 188.907847][ T6680] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 188.991304][ T6706] loop4: detected capacity change from 0 to 512 [ 189.021563][ T6680] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 189.051581][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.082280][ T6706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.104001][ T6706] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.122449][ T6715] loop3: detected capacity change from 0 to 1024 [ 189.196652][ T6715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.254342][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.271783][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.304843][ T28] audit: type=1326 audit(1771216231.779:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17c22bf79 code=0x7ffc0000 [ 189.362923][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 189.365395][ T6723] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 189.401261][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 189.416014][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.425218][ T28] audit: type=1326 audit(1771216231.779:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa17c22bf79 code=0x7ffc0000 [ 189.455280][ T6731] bridge: RTM_NEWNEIGH with invalid ether address [ 189.486133][ T28] audit: type=1326 audit(1771216231.779:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17c22bf79 code=0x7ffc0000 [ 189.562667][ T6740] __nla_validate_parse: 1 callbacks suppressed [ 189.562687][ T6740] netlink: 6 bytes leftover after parsing attributes in process `syz.1.917'. [ 189.581599][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 189.601038][ T6740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.602384][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 189.655838][ T6744] dvmrp6: entered allmulticast mode [ 189.705334][ T6745] loop3: detected capacity change from 0 to 8192 [ 189.734136][ T6745] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.772811][ T6745] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 189.791644][ T6745] FAT-fs (loop3): Filesystem has been set read-only [ 189.800828][ T6745] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 189.820025][ T6745] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 189.860744][ T6751] loop1: detected capacity change from 0 to 1024 [ 189.879742][ T6751] EXT4-fs: Ignoring removed i_version option [ 189.902741][ T6745] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 189.911939][ T6745] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 189.920806][ T6745] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 189.929732][ T6745] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 189.938893][ T6745] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 189.944386][ T6751] ext4: Unknown parameter 'dont_hash' [ 189.953430][ T6745] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 189.967441][ T6745] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 189.979652][ T6756] syzkaller1: entered promiscuous mode [ 190.033967][ T6756] syzkaller1: entered allmulticast mode [ 190.468471][ T6751] loop1: detected capacity change from 0 to 512 [ 190.526058][ T6751] EXT4-fs (loop1): 1 truncate cleaned up [ 190.561908][ T6765] netlink: 96 bytes leftover after parsing attributes in process `syz.3.923'. [ 190.575148][ T6751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.664190][ T6751] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.920: bg 0: block 465: padding at end of block bitmap is not set [ 190.682209][ T6766] loop4: detected capacity change from 0 to 512 [ 190.697520][ T6751] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 190.708277][ T6766] ext3: Bad value for 'stripe' [ 190.725101][ T6751] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.920: invalid indirect mapped block 234881024 (level 0) [ 190.739543][ T6771] loop3: detected capacity change from 0 to 1764 [ 190.854144][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.866628][ T6775] Cannot find del_set index 0 as target [ 191.959837][ T6778] hub 1-0:1.0: USB hub found [ 192.923444][ T6778] hub 1-0:1.0: 8 ports detected [ 193.100923][ T6793] set_capacity_and_notify: 1 callbacks suppressed [ 193.101141][ T6793] loop2: detected capacity change from 0 to 512 [ 193.149581][ T6793] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.933: couldn't read orphan inode 26 (err -116) [ 193.161613][ T6793] loop2: lost filesystem error report for type 5 error -116 [ 193.161758][ T6793] EXT4-fs (loop2): Remounting filesystem read-only [ 193.169117][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 193.169138][ C1] EXT4-fs (loop2): initial error at time 1771216235: ext4_orphan_get:1396 [ 193.169183][ C1] EXT4-fs (loop2): last error at time 1771216235: ext4_orphan_get:1396 [ 193.199542][ T6793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.212128][ T6793] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.042617][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.077721][ T6803] loop3: detected capacity change from 0 to 512 [ 194.211526][ T6811] loop2: detected capacity change from 0 to 512 [ 194.232922][ T6811] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 194.268007][ T6811] EXT4-fs (loop2): orphan cleanup on readonly fs [ 194.282949][ T6803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.298836][ T6803] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.343720][ T6811] EXT4-fs warning (device loop2): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 194.363067][ T6811] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 194.374305][ T6811] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.937: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 194.406439][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.479120][ T6811] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 194.481003][ T6811] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.937: couldn't read orphan inode 13 (err -117) [ 194.490314][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 194.490336][ C0] EXT4-fs (loop2): last error at time 1771216236: ext4_ext_check_inode:521: inode 13 [ 194.559471][ T6827] vlan0: entered promiscuous mode [ 194.577833][ T6811] loop2: lost filesystem error report for type 5 error -117 [ 194.578433][ T6811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.676374][ T6811] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.937'. [ 194.689833][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.715643][ T6825] vlan0: left promiscuous mode [ 194.764900][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.868314][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.018551][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 195.018578][ T28] audit: type=1400 audit(1771216237.499:609): avc: denied { create } for pid=6836 comm="syz.4.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 195.085308][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.235803][ T12] bridge_slave_1: left allmulticast mode [ 195.241495][ T12] bridge_slave_1: left promiscuous mode [ 195.248257][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.271105][ T12] bridge_slave_0: left allmulticast mode [ 195.278992][ T12] bridge_slave_0: left promiscuous mode [ 195.290249][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.316308][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.364251][ T6845] hub 1-0:1.0: USB hub found [ 195.369056][ T6845] hub 1-0:1.0: 8 ports detected [ 195.409362][ T6847] loop3: detected capacity change from 0 to 512 [ 195.462329][ T6852] loop4: detected capacity change from 0 to 1024 [ 195.482502][ T6852] EXT4-fs: inline encryption not supported [ 195.498133][ T6847] program syz.3.943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.516680][ T6852] EXT4-fs: Ignoring removed bh option [ 195.536041][ T6852] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 195.592792][ T28] audit: type=1326 audit(1771216238.069:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6850 comm="syz.2.946" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f874683bf79 code=0x0 [ 195.593298][ T6852] EXT4-fs (loop4): orphan cleanup on readonly fs [ 195.628590][ T6852] EXT4-fs error (device loop4): ext4_quota_enable:7194: comm syz.4.948: inode #2304: comm syz.4.948: iget: illegal inode # [ 195.641938][ T6852] loop4: lost filesystem error report for type 5 error -117 [ 195.642276][ T6852] EXT4-fs (loop4): Remounting filesystem read-only [ 195.649652][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 195.649676][ C0] EXT4-fs (loop4): initial error at time 1771216238: ext4_quota_enable:7194 [ 195.649702][ C0] EXT4-fs (loop4): last error at time 1771216238: ext4_quota_enable:7194 [ 195.680349][ T6852] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 195.747198][ T6852] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 195.754673][ T6859] loop2: detected capacity change from 0 to 512 [ 195.762933][ T6852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.932982][ T12] dvmrp6 (unregistering): left allmulticast mode [ 196.088197][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.101301][ T28] audit: type=1326 audit(1771216238.579:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.3.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2af41bf79 code=0x7fc00000 [ 196.145730][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.185459][ T12] bond0 (unregistering): Released all slaves [ 196.200793][ T6815] chnl_net:caif_netlink_parms(): no params data found [ 196.415111][ T6815] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.429180][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.432160][ T6815] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.446003][ T6815] bridge_slave_0: entered allmulticast mode [ 196.452605][ T6815] bridge_slave_0: entered promiscuous mode [ 196.465006][ T12] hsr_slave_0: left promiscuous mode [ 196.567081][ T6887] loop3: detected capacity change from 0 to 1024 [ 196.579595][ T12] hsr_slave_1: left promiscuous mode [ 196.591263][ T6887] EXT4-fs: inline encryption not supported [ 196.624167][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.624669][ T6887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.642129][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.810277][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.938218][ T6886] loop4: detected capacity change from 0 to 512 [ 196.987248][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.000643][ T6886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.025613][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.050775][ T12] veth1_macvtap: left promiscuous mode [ 197.060752][ T6886] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.082357][ T12] veth0_macvtap: left promiscuous mode [ 197.097644][ T12] veth1_vlan: left promiscuous mode [ 197.121042][ T12] veth0_vlan: left promiscuous mode [ 197.190653][ T6904] loop3: detected capacity change from 0 to 128 [ 197.244572][ T12] team0 (unregistering): Port device team_slave_1 removed [ 197.257476][ T12] team0 (unregistering): Port device team_slave_0 removed [ 197.272791][ T6905] ================================================================== [ 197.280943][ T6905] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 197.288123][ T6905] [ 197.290479][ T6905] write to 0xffff88811b84ef14 of 4 bytes by task 6904 on cpu 0: [ 197.298144][ T6905] xas_set_mark+0x12b/0x140 [ 197.302691][ T6905] __folio_start_writeback+0x17b/0x370 [ 197.308181][ T6905] __block_write_full_folio+0x53a/0x8f0 [ 197.313759][ T6905] block_write_full_folio+0x2c1/0x2e0 [ 197.319159][ T6905] mpage_writepages+0x710/0x1310 [ 197.324127][ T6905] fat_writepages+0x24/0x30 [ 197.328652][ T6905] do_writepages+0x1c6/0x310 [ 197.333277][ T6905] file_write_and_wait_range+0x178/0x2f0 [ 197.338947][ T6905] __generic_file_fsync+0x46/0x160 [ 197.344095][ T6905] fat_file_fsync+0x49/0x100 [ 197.348710][ T6905] vfs_fsync_range+0xc5/0xe0 [ 197.353325][ T6905] generic_file_write_iter+0x1ba/0x310 [ 197.358812][ T6905] iter_file_splice_write+0x6bc/0xa80 [ 197.364221][ T6905] direct_splice_actor+0x156/0x2a0 [ 197.369365][ T6905] splice_direct_to_actor+0x311/0x670 [ 197.374775][ T6905] do_splice_direct+0x119/0x1a0 [ 197.379662][ T6905] do_sendfile+0x382/0x650 [ 197.384099][ T6905] __x64_sys_sendfile64+0x105/0x150 [ 197.389324][ T6905] x64_sys_call+0x2dc4/0x3020 [ 197.394034][ T6905] do_syscall_64+0x12c/0x370 [ 197.398657][ T6905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.404579][ T6905] [ 197.406919][ T6905] read to 0xffff88811b84ef14 of 4 bytes by task 6905 on cpu 1: [ 197.414478][ T6905] xas_find_marked+0x5d7/0x620 [ 197.419281][ T6905] filemap_get_folios_tag+0xfa/0x510 [ 197.424590][ T6905] writeback_iter+0x4bb/0x830 [ 197.429290][ T6905] mpage_writepages+0x87/0x1310 [ 197.434171][ T6905] fat_writepages+0x24/0x30 [ 197.438703][ T6905] do_writepages+0x1c6/0x310 [ 197.443334][ T6905] file_write_and_wait_range+0x178/0x2f0 [ 197.449003][ T6905] __generic_file_fsync+0x46/0x160 [ 197.454153][ T6905] fat_file_fsync+0x49/0x100 [ 197.458764][ T6905] vfs_fsync_range+0xc5/0xe0 [ 197.463371][ T6905] generic_file_write_iter+0x1ba/0x310 [ 197.468892][ T6905] iter_file_splice_write+0x6bc/0xa80 [ 197.474301][ T6905] direct_splice_actor+0x156/0x2a0 [ 197.479469][ T6905] splice_direct_to_actor+0x311/0x670 [ 197.484879][ T6905] do_splice_direct+0x119/0x1a0 [ 197.489770][ T6905] do_sendfile+0x382/0x650 [ 197.494203][ T6905] __x64_sys_sendfile64+0x105/0x150 [ 197.499421][ T6905] x64_sys_call+0x2dc4/0x3020 [ 197.504122][ T6905] do_syscall_64+0x12c/0x370 [ 197.508743][ T6905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.514660][ T6905] [ 197.517006][ T6905] value changed: 0x0a000021 -> 0x04000021 [ 197.522743][ T6905] [ 197.525080][ T6905] Reported by Kernel Concurrency Sanitizer on: [ 197.531249][ T6905] CPU: 1 UID: 0 PID: 6905 Comm: syz.3.954 Tainted: G W syzkaller #0 PREEMPT(full) [ 197.542046][ T6905] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 197.545869][ T6905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 197.555941][ T6905] ================================================================== [ 197.674413][ T6815] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.681593][ T6815] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.688936][ T6815] bridge_slave_1: entered allmulticast mode [ 197.695770][ T6815] bridge_slave_1: entered promiscuous mode [ 197.971725][ T6858] bond0: (slave syz_tun): Releasing backup interface [ 198.091250][ T6895] bond0: (slave syz_tun): Releasing backup interface [ 198.276500][ T12] IPVS: stop unused estimator thread 0... [ 198.307507][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.327362][ T6393] bond0: (slave syz_tun): Releasing backup interface [ 198.385681][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.465501][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.488834][ T6886] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.515490][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.596337][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.616568][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.666950][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.717769][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.811300][ T12] vlan2: left promiscuous mode [ 198.817423][ T12] bridge0: port 3(vlan2) entered disabled state [ 198.824802][ T12] bridge_slave_1: left allmulticast mode [ 198.830481][ T12] bridge_slave_1: left promiscuous mode [ 198.836557][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.844640][ T12] bridge_slave_0: left promiscuous mode [ 198.850369][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.859149][ T12] bridge_slave_1: left allmulticast mode [ 198.864943][ T12] bridge_slave_1: left promiscuous mode [ 198.870646][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.878678][ T12] bridge_slave_0: left allmulticast mode [ 198.884596][ T12] bridge_slave_0: left promiscuous mode [ 198.890387][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.899002][ T12] bridge_slave_1: left allmulticast mode [ 198.904780][ T12] bridge_slave_1: left promiscuous mode [ 198.910474][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.918450][ T12] bridge_slave_0: left allmulticast mode [ 198.924318][ T12] bridge_slave_0: left promiscuous mode [ 198.930030][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.048105][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.058241][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.067897][ T12] bond0 (unregistering): Released all slaves [ 199.117606][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.127470][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.137278][ T12] bond0 (unregistering): Released all slaves [ 199.165896][ T12] bond0 (unregistering): Released all slaves [ 199.209292][ T12] tipc: Left network mode [ 199.214157][ T12] tipc: Left network mode [ 199.223351][ T12] hsr_slave_0: left promiscuous mode [ 199.229268][ T12] hsr_slave_1: left promiscuous mode [ 199.235144][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.242682][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.250825][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.259296][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.269656][ T12] hsr_slave_0: left promiscuous mode [ 199.275454][ T12] hsr_slave_1: left promiscuous mode [ 199.281192][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.288921][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.296749][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.304382][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.321550][ T12] veth1_macvtap: left promiscuous mode [ 199.328658][ T12] veth0_macvtap: left promiscuous mode [ 199.334539][ T12] veth1_vlan: left promiscuous mode [ 199.339884][ T12] veth0_vlan: left promiscuous mode [ 199.346029][ T12] veth1_macvtap: left promiscuous mode [ 199.351546][ T12] veth0_macvtap: left promiscuous mode [ 199.357765][ T12] veth1_vlan: left promiscuous mode [ 199.363039][ T12] veth0_vlan: left promiscuous mode [ 199.461777][ T12] team0 (unregistering): Port device team_slave_1 removed [ 199.472095][ T12] team0 (unregistering): Port device team_slave_0 removed [ 199.531547][ T12] team0 (unregistering): Port device team_slave_1 removed [ 199.541374][ T12] team0 (unregistering): Port device team_slave_0 removed [ 200.238732][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.287028][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.346707][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.406795][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.487130][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.536944][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.606851][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.637054][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.711748][ T12] vlan2: left promiscuous mode [ 200.717499][ T12] bridge0: port 3(vlan2) entered disabled state [ 200.724677][ T12] bridge_slave_1: left allmulticast mode [ 200.730352][ T12] bridge_slave_1: left promiscuous mode [ 200.736483][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.744676][ T12] bridge_slave_0: left promiscuous mode [ 200.750424][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.759340][ T12] bridge_slave_1: left allmulticast mode [ 200.765872][ T12] bridge_slave_1: left promiscuous mode [ 200.771620][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.780500][ T12] bridge_slave_0: left allmulticast mode [ 200.786439][ T12] bridge_slave_0: left promiscuous mode [ 200.792132][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.936988][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.946732][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.956253][ T12] bond0 (unregistering): Released all slaves [ 200.964307][ T12] bond1 (unregistering): Released all slaves [ 201.046358][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.056190][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.065644][ T12] bond0 (unregistering): Released all slaves [ 201.097577][ T12] tipc: Left network mode [ 201.105911][ T12] hsr_slave_0: left promiscuous mode [ 201.111731][ T12] hsr_slave_1: left promiscuous mode [ 201.117952][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.125721][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.133341][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.141830][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.149660][ T12] batman_adv: batadv0: Interface deactivated: macvlan0 [ 201.156754][ T12] batman_adv: batadv0: Removing interface: macvlan0 [ 201.166337][ T12] hsr_slave_0: left promiscuous mode [ 201.172096][ T12] hsr_slave_1: left promiscuous mode [ 201.178048][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.185682][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.193263][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.201258][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.215663][ T12] veth1_macvtap: left promiscuous mode [ 201.221190][ T12] veth0_macvtap: left promiscuous mode [ 201.226965][ T12] veth1_vlan: left promiscuous mode [ 201.232283][ T12] veth0_vlan: left promiscuous mode [ 201.238743][ T12] veth1_macvtap: left promiscuous mode [ 201.244877][ T12] veth0_macvtap: left promiscuous mode [ 201.250415][ T12] veth1_vlan: left promiscuous mode [ 201.255984][ T12] veth0_vlan: left promiscuous mode [ 201.358898][ T12] team0 (unregistering): Port device team_slave_1 removed [ 201.368822][ T12] team0 (unregistering): Port device team_slave_0 removed [ 201.427303][ T12] team0 (unregistering): Port device team_slave_1 removed [ 201.437041][ T12] team0 (unregistering): Port device team_slave_0 removed [ 202.040019][ T12] IPVS: stop unused estimator thread 0...