last executing test programs: 2m55.179746686s ago: executing program 2 (id=3): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x30, 0x0, 0x4, 0x5aec}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x401, 0xfffffffb}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}}, 0x4040000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x35}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x89b, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x4, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd23}, 0x94) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0xfffffffc}}, 0x10) bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r4, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x2}}, 0x10) bind$tipc(r3, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c80)='sessionid\x00') exit(0x0) read$msr(r6, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmmsg(r7, &(0x7f00000002c0), 0x0, 0x0) mount$nfs4(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000340), 0x10011, &(0x7f0000000480)={[{':+'}, {'\xa9,'}, {'\x00'}, {']=+)*!(])!{'}, {'sessionid\x00'}, {'\x00'}, {'sessionid\x00'}, {'\xd8%}{:\\-:'}], [{@subj_role={'subj_role', 0x3d, 'sessionid\x00'}}, {@fowner_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x64, 0x32, 0x63, 0x30, 0x35, 0x65, 0x65], 0x2d, [0x39, 0x66, 0x30, 0x64], 0x2d, [0x34, 0x33, 0x39, 0x34], 0x2d, [0x5d, 0x39, 0x65, 0x36], 0x2d, [0x35, 0x34, 0x33, 0x39, 0x64, 0x63, 0x30, 0x35]}}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}]}) 2m54.264932961s ago: executing program 2 (id=13): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2800000000"], 0x7c}}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x0, 0x111, 0x4) 2m39.08021663s ago: executing program 32 (id=13): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2800000000"], 0x7c}}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x0, 0x111, 0x4) 2m15.820058613s ago: executing program 1 (id=283): r0 = syz_open_dev$loop(0x0, 0x9, 0x400000) r1 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30fffffff50900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) 2m15.30850053s ago: executing program 1 (id=291): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000019000100000000000000000080200000001100050000000008000100"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async, rerun: 32) dup3(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000)) 2m15.151872206s ago: executing program 1 (id=294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) 2m15.040169755s ago: executing program 1 (id=297): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0x9) ptrace$pokeuser(0x6, r0, 0x358, 0x3) truncate(0x0, 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410002, 0x68) unshare(0x22020400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0xc1646000) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @rand_addr=0x64010100}], 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x200040, 0x134) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r1, 0x0, 0x3ffff) 2m14.810345044s ago: executing program 1 (id=299): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@remote, 0x1, 0x0, 0x10, 0x0, [{@local}]}}) 2m14.384026376s ago: executing program 1 (id=301): r0 = syz_open_dev$loop(0x0, 0x9, 0x400000) r1 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a300000ffff0900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) 2m14.371465179s ago: executing program 33 (id=301): r0 = syz_open_dev$loop(0x0, 0x9, 0x400000) r1 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a300000ffff0900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) 11.971649466s ago: executing program 0 (id=1358): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$eJzs3V9rW+UfAPDvSZv9//3WwRgqIgUvnMyla+ufCV7Max0O9H6WNiuj6TKadKx14HbhrmV4oTgQLwXx2svhG/DC1zBQYcgoeuFN5KQnWdombbqlaTSfD5zyPOec9Hm+ec7z5Dl5EhLA0BpP/+Qino+Iz5OI4xGRZMdGIzs4vn7e2uNbs+mWRK324R9J/bw03/hfjccdzTLPRcRPn0WcyW0tt7KyujBTKhWXsvxEdfH6RGVl9ezVxZn54nzx2tT09Pk3pqfefuvNnsX66qW/vvrgwUiWO3EviQtxLMu1xvEMbrdmxmM8e07ycWHTiZM9KGyQJG33/tD3erA7I1k/z0c6BhyPkazXA/99n0ZEDRhSya77/y/5vakJ0F+NeUDj3n7n++Dv+jAr6Z9H767fAG2Nf3T9vZE4FPn4Mo6sJRvujNL73bEelJ+W8eNv9++lW/TufQiAHd2+ExHnRke3jn9JNv49vXNdnLO5DOMf9M+DdP7zWrv5T645/0ltnv8cbdN3n8bO/T830oNiOkrnf++0nf82F63GRrLc/+pzvnxy5WqpmI5t/4+I05E/mOa3W885v/aw1ulY6/wv3dLyG3PBrB6/jx7c+Ji5merMs8Tc6tGdiBfazn+TZvsnbdo/fT4udVnGqeL9lzod2zn+vVX7NuKVtu3/ZEUr2X59cqJ+PUw0roqt/rx76udO5e93/Gn7H9k+/rGkdb22svsyvjn0dzGa68kbbYg/ur/+DyQf1dMHsn03Z6rVpcmIA8n7zf25xv6pJ49t5Bvnp/Gffnn78a/d9X84Ij7uMv67J79/sdOxQWj/ubbt37y73dT+HRONC2bLoYfvffJ1dqy2eSDsbvx7vZ46ne3pZvxrU8GkXRDP9OQBAAAAAADAgMlFxLFIcoVmOpcrFNY/33EyjuRK5Ur1zJXy8rW5qH9XdizyucZK9/GWz0NMZiuGjfzUpvx0RJyIiC9GDtfzhdlyaW6/gwcAAAAAAAAAAAAAAAAAAIABcbTD9/9Tv+7pLy8AA8FPfsPw2rH/9+KXnoCB5PUfhpf+D8Nrl/0/2at6AP3n9R+Gl/4Pw0v/h+HV0v8X9rMeQP95/QcAAAAAAAAAAAAAAAAAAAAAAAAAAICeunTxYrrV1h7fmk3zczdWlhfKN87OFSsLhcXl2cJseel6Yb5cni8VC7PlxZ3+X6lcvj45Fcs3J6rFSnWisrJ6ebG8fK16+erizHzxcjHfl6gAAAAAAAAAAAAAAAAAAADg36WysrowUyoVlyQknioxOhjV6CoRuYiWPQf3uz6DnNjvkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnvgnAAD//64qL2Y=") socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1ac, 0x0, 0x7}, r0, 0xf, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_io_uring_setup(0x63eb, &(0x7f0000000680)={0x0, 0x1200, 0x8, 0x2, 0x160}, &(0x7f0000000700), &(0x7f0000000740)=0x0, &(0x7f0000000780)) r6 = syz_io_uring_setup(0x1972, &(0x7f0000000080)={0x0, 0x1000, 0x1000}, &(0x7f0000000140), &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x438, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x40c, 0x2, [@TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0x80e, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x2000003, 0x9, 0x3, 0xffffffff, 0xb, 0x9, 0x4, 0xd4ae, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x6, 0x9, 0x8, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x6, 0x41, 0xff, 0x800, 0xfff, 0x7, 0x9, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0x0, 0x18000, 0xc, 0x9, 0x40000, 0x101, 0x6, 0x3ff, 0x1, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x8000, 0xff, 0x0, 0xeac2, 0x87, 0x3, 0xfe000004, 0x3, 0x8001, 0xff, 0xffff1cac, 0x2892, 0x6, 0x8c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x3, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x7, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0xfa1, 0x3, 0x6, 0x9, 0xffffffff, 0x80000002, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0xfffffffe, 0x9, 0x8400, 0x3, 0x0, 0x4cf, 0xb, 0x0, 0xce, 0x6, 0x0, 0xc8, 0x4, 0x5, 0xc38, 0x1ff, 0x1ff, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0xc, 0x8, 0x7, 0x8000000, 0x0, 0x7fff, 0xfffffffd, 0x5, 0x815d, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x401, 0x2, 0x800, 0x7, 0x5, 0x10, 0xfffffff7, 0x8, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0x5, 0x5, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x20000009, 0xffff, 0x5, 0xff, 0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x81, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x3, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}]}]}}]}, 0x438}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x160, 0x1170, 0x1398, 0x0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0x1}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [0x0, 0x0, 0xff000000], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') syz_io_uring_submit(0x0, r7, r8, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0xf, 0x6000, @fd_index=0x1, 0x3, 0x1, 0x8001, 0x13, 0x1, {0x0, r11}}) syz_io_uring_submit(0x0, r5, r8, &(0x7f00000007c0)=@IORING_OP_CLOSE={0x13, 0x37, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 6.732084866s ago: executing program 6 (id=1401): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50005008200000018100008", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030048020000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000f3a367845c67d52e000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.59128741s ago: executing program 3 (id=1403): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @multicast1}, @echo_reply={0xe0}}}}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000400)="fb113399a32608009344bc899119d0ad9ee76713967679f514a68a2bfa51da3de41694c12a3b08db736cdf23305d0042110cdd333bf82aff2ff02780495faeb6831d64d2e418f54585595eaadcf1ab64a6284bb4de4d29681eddd8f49e82d12bd0d3d715a93d", 0x66}], 0x1) r2 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000003f40), 0xfe, 0x28c, &(0x7f0000004240)="$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") r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r3, &(0x7f0000000380)=""/100, 0x64) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x11c53682, 0x3a, '/', 0x3a, '\\', 0x3a, './file0'}, 0x29) r8 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000080)={r9, 0x2, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x1, 0x1d, 0x10, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) fspick(r2, &(0x7f0000000200)='./file0\x00', 0x0) write$nci(r3, 0x0, 0x0) r10 = creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) ioctl$FS_IOC_SETFSLABEL(r10, 0x41009432, &(0x7f0000000640)="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") 6.503851535s ago: executing program 6 (id=1404): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setpriority(0x0, 0x0, 0x8) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0x2}, {0x4, 0xe}}}, 0x24}}, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) close(r6) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r9, r1, 0x0, 0x558410e9) r10 = openat(r9, &(0x7f0000000180)='./file1/file0\x00', 0x4040, 0x12c) ioctl$EXT4_IOC_SWAP_BOOT(r10, 0x6611) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') preadv(r11, &(0x7f00000001c0)=[{&(0x7f00000039c0)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x80010, r0, 0x0) 6.314023707s ago: executing program 3 (id=1406): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pause() r0 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x2}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x1}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0xc0189436, &(0x7f0000000440)={'veth1_to_team\x00', @remote}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r4, 0x0, 0x28008841) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bind$xdp(r6, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', 0x0}) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x4000000}}], 0x400000000000181, 0x9200000000000000) 3.728921937s ago: executing program 0 (id=1412): r0 = getuid() setresuid(r0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000900, r0, &(0x7f0000000000)) (async) syz_clone3(&(0x7f0000000540)={0x2080, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0], 0x1, {r1}}, 0x58) 3.480293679s ago: executing program 3 (id=1413): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf81f3ff0000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x1010, &(0x7f0000002500)=""/4112, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 3.399894312s ago: executing program 3 (id=1415): syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000ff84000000000001"], 0xfdef) 3.297397979s ago: executing program 5 (id=1416): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x3, [{0x8, 0x4, 0x5}]}]}, {0x0, [0xe, 0x0, 0x61, 0x61]}}, &(0x7f0000000340)=""/250, 0x36, 0xfa, 0x9}, 0x28) accept$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xf, 0x8}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x615a}, 0x50) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x10) bind$inet6(r2, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0xe, 0x55, &(0x7f00000003c0)="f9ad48cc42cb29fc99d41a08320a", 0x0, 0x13fd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r4, 0x0, 0x4004) 3.221118872s ago: executing program 0 (id=1417): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$eJzs3V9rW+UfAPDvSZv9//3WwRgqIgUvnMyla+ufCV7Max0O9H6WNiuj6TKadKx14HbhrmV4oTgQLwXx2svhG/DC1zBQYcgoeuFN5KQnWdombbqlaTSfD5zyPOec9Hm+ec7z5Dl5EhLA0BpP/+Qino+Iz5OI4xGRZMdGIzs4vn7e2uNbs+mWRK324R9J/bw03/hfjccdzTLPRcRPn0WcyW0tt7KyujBTKhWXsvxEdfH6RGVl9ezVxZn54nzx2tT09Pk3pqfefuvNnsX66qW/vvrgwUiWO3EviQtxLMu1xvEMbrdmxmM8e07ycWHTiZM9KGyQJG33/tD3erA7I1k/z0c6BhyPkazXA/99n0ZEDRhSya77/y/5vakJ0F+NeUDj3n7n++Dv+jAr6Z9H767fAG2Nf3T9vZE4FPn4Mo6sJRvujNL73bEelJ+W8eNv9++lW/TufQiAHd2+ExHnRke3jn9JNv49vXNdnLO5DOMf9M+DdP7zWrv5T645/0ltnv8cbdN3n8bO/T830oNiOkrnf++0nf82F63GRrLc/+pzvnxy5WqpmI5t/4+I05E/mOa3W885v/aw1ulY6/wv3dLyG3PBrB6/jx7c+Ji5merMs8Tc6tGdiBfazn+TZvsnbdo/fT4udVnGqeL9lzod2zn+vVX7NuKVtu3/ZEUr2X59cqJ+PUw0roqt/rx76udO5e93/Gn7H9k+/rGkdb22svsyvjn0dzGa68kbbYg/ur/+DyQf1dMHsn03Z6rVpcmIA8n7zf25xv6pJ49t5Bvnp/Gffnn78a/d9X84Ij7uMv67J79/sdOxQWj/ubbt37y73dT+HRONC2bLoYfvffJ1dqy2eSDsbvx7vZ46ne3pZvxrU8GkXRDP9OQBAAAAAADAgMlFxLFIcoVmOpcrFNY/33EyjuRK5Ur1zJXy8rW5qH9XdizyucZK9/GWz0NMZiuGjfzUpvx0RJyIiC9GDtfzhdlyaW6/gwcAAAAAAAAAAAAAAAAAAIABcbTD9/9Tv+7pLy8AA8FPfsPw2rH/9+KXnoCB5PUfhpf+D8Nrl/0/2at6AP3n9R+Gl/4Pw0v/h+HV0v8X9rMeQP95/QcAAAAAAAAAAAAAAAAAAAAAAAAAAICeunTxYrrV1h7fmk3zczdWlhfKN87OFSsLhcXl2cJseel6Yb5cni8VC7PlxZ3+X6lcvj45Fcs3J6rFSnWisrJ6ebG8fK16+erizHzxcjHfl6gAAAAAAAAAAAAAAAAAAADg36WysrowUyoVlyQknioxOhjV6CoRuYiWPQf3uz6DnNjvkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnvgnAAD//64qL2Y=") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000380)="30573472b621739984c336124406e8", 0xf, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0xd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000002280), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x90000, 0x400000, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f00000000c0)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") r6 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r6, &(0x7f00000005c0)={0xa, 0x4e1f, 0x8, @local, 0xa}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x35, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(r6, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(0x0, &(0x7f0000002840)={'syz', 0x1}, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x0, 0x1, 0x3d, 0x3}}], 0x18}, 0x0) 1.899677907s ago: executing program 5 (id=1421): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0xd, &(0x7f00000000c0)={0x4, 0x81}, 0x0) 1.854927605s ago: executing program 6 (id=1422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x10, 0x3, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f00000000c0)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES16=r9], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff00000050950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000e1fc87b77bc319b45b12db746891274b5bb80fdfeddb32350b739d2c116b6219d99ad9ecae0b0b4f66a8b4699a77a6114e6d4db46916b9715660000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) close_range(r6, 0xffffffffffffffff, 0x200000000000000) creat(&(0x7f0000000280)='./file0\x00', 0x108) 1.800004324s ago: executing program 5 (id=1423): syz_emit_ethernet(0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff275bf349706688a800008100000086dd6010401200072f00fc0000000000000000000000000000fcff0200000000000000000003000000013c00"], 0x0) 1.780147258s ago: executing program 3 (id=1424): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x107220, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000090000000500000004000000c1000000", @ANYRES32, @ANYBLOB="0000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000efc9b171a88ec124d27f3a47e98b50d09ed48b60170be3e9508efc181ddc849da9b0d583b3eeecd94bdb1efab97e858dfc00629fa66f76722c6f1c3418ffb0b9fbbbe1c73963ba2efe9182669b1b0918d4c53026bc26edd0e22ed103a84fe71ac118305cc31eab860ce973684fed8f9a165259615af41c4deed4db8839578923c7ea5dcdac9b2ca759524eb1cff30cba3fc598b90c9025e5ac4d5cc7b3388a50"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x3d, r0}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_getrule={0x1c, 0x22, 0x63a, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x9, 0x1, 0x0, 0x0, 0x4, 0x14}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r0, &(0x7f0000000580), &(0x7f0000000940)=""/208}, 0x20) 1.681689034s ago: executing program 5 (id=1425): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pause() r0 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x2}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x1}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0xc0189436, &(0x7f0000000440)={'veth1_to_team\x00', @remote}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r4, 0x0, 0x28008841) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bind$xdp(r6, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', 0x0}) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x10000000}}], 0x400000000000181, 0x9200000000000000) 1.500069245s ago: executing program 0 (id=1426): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000400)='./file0\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3c6, &(0x7f0000000c00)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read(r1, &(0x7f00000000c0)=""/53, 0x35) 1.486650007s ago: executing program 3 (id=1427): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', r0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000040) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x800000000000, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYRES16=r2], 0x6, 0x2c3, &(0x7f0000000900)="$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") r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000e00)={0xd, 0x5, 0x204, 0x0, 0x0, "4ae23ae17df2e98c69ba36090000001abad88f", 0x4, 0x6}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x9) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x0, 0x160) open_by_handle_at(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r', @ANYRES64=r3, @ANYRES32], 0x531500) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r2) kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf00) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@bsdgroups}, {@noload}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x459, &(0x7f00000004c0)="$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") r6 = open(&(0x7f0000000180)='./file1\x00', 0x64042, 0x0) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x7c06, 0x1200, 0x8001, 0x3}}) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d80)=ANY=[@ANYBLOB="3800000002010500000000000000000002000007240001800c00028005000100840000001400018008000100ac1414aa0800020000000000211eec238ac566aa27136c36857d2eeb5f66cbc56ecd0b53edaccf2dad7c3a1c8918823e2f573f0f9a88cac04e58382a218dab1f80a66a7ee1901da54533315956e8"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071119900000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00042abd7010000000060028000000000008003a000000050008002c006f000000060028000800000005000200000000000800310003000000080006000000000000", @ANYRES32=r9, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, &(0x7f0000000380)=0x9, 0x4) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000280)={0x72, 0xfffffffffffffffa, 0x5, 0x9, 0xf4}) 1.027927705s ago: executing program 6 (id=1429): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000002480000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 880.19097ms ago: executing program 6 (id=1430): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x51, 0xd, &(0x7f0000000380)) dup2(r1, r0) 632.861883ms ago: executing program 4 (id=1431): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x23}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x74}, 0x1, 0x0, 0x0, 0x48090}, 0x2000c044) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0xc810}, 0x0) r4 = socket$kcm(0x29, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) syz_open_procfs$namespace(r5, &(0x7f0000000340)='ns/cgroup\x00') r6 = request_key(&(0x7f0000000400)='rxrpc_s\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='\x00', 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r8, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x401, 0x34}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000640)={{0x1, 0x1, 0x18, r4, {0x1c4}}, './file0\x00'}) readlinkat(r10, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=""/105, 0x69) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000740)={'wpan3\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r11}, 0x18) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '@\\@\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000894}, 0x40084) r12 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r12, &(0x7f0000000a80)="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", 0x1000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000001ac0)={'wg0\x00', 0x0}) sendto$packet(r10, &(0x7f0000001a80)="fcff73bf3bfa63329404c9bda20b9298e06ae9590529e62e6caa9ed5397dcffb45aa960156b6ccf1c0e918eb60ed", 0x2e, 0x40000, &(0x7f0000001b00)={0x11, 0xf6, r13, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x14) r14 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001b80), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001dc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001bc0)={0x190, r14, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x74, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65531d7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29d6d0e6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x152a9d3c}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24a14217}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35663c23}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf18b73b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x262c8be0}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xb8, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c88389a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fc0124}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2352936}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3542ae75}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5faa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x331ba82f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e350b85}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x583}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe476}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1882e7d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdbe5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3baa3e61}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb909}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5658c608}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95c2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a57daf1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf991}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf11d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c02e9ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x264ffeef}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78d0ed11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b20b117}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25385881}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x108be6c0}]}]}]}, 0x190}}, 0x4000000) r15 = signalfd4(r11, &(0x7f0000001e00)={[0x64ea]}, 0x8, 0x80000) sendmsg$NL80211_CMD_GET_POWER_SAVE(r15, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0xd583d24458b3ceb}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x20, r8, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x1e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x8008010) 614.854855ms ago: executing program 5 (id=1432): renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0030000020010000000000000000000000000000fe8000000000000000000000000000000004000000000000071800000000040007"], 0x0) 532.089929ms ago: executing program 4 (id=1433): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 531.36464ms ago: executing program 5 (id=1434): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0xff, 0x800, 0xfffc, 0x9, 0xc, "2343775d62dcdc53"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) unshare(0x26020480) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = memfd_create(&(0x7f0000000300)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xde', 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000140)='/', 0x1) sendfile(r2, r2, &(0x7f0000001000), 0xfec) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x6020400) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000014c0)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 524.926561ms ago: executing program 6 (id=1435): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) timer_settime(0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000340)=0x10, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000206050000000000000000000000ffff0c00078008000800000000890500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f727400000015de434df8294f5f6dc1429347e8c781fcf8f284bd59ed0fd030256d937e7439ec407e427a053238"], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000010000700000070000000000000000000", @ANYRES32=0x0, @ANYBLOB="9980030042120100200012800b00010065727370616e00001000028004001200060010004e200000140003006e696376663000"/60], 0x54}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 448.918784ms ago: executing program 4 (id=1436): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50005008200000018100008", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030002480000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000f3a367845c67d52e000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 279.997193ms ago: executing program 0 (id=1437): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1a, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='lock m'], 0x9) set_mempolicy(0x5, &(0x7f00000001c0)=0x1, 0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x4000, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x0, r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f00000000c0)=0xfffffffd, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="d3f34746b238", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0066a6", 0x14, 0x6, 0x1, @loopback={0x300}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1, 0x0, 0x6}}}}}}}, 0x0) 210.222614ms ago: executing program 4 (id=1438): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000480)) (async) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="dfeb010018000000000000000c0000000c000000040000000b000000000000100c0000007d590bbc"], &(0x7f0000000240)=""/131, 0x28, 0x83, 0x0, 0x1ff, 0x10000}, 0x28) (async) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) process_mrelease(r4, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000010400000000000006000000b7010100000000007b8af8ff00000000b708004756ba241e0e00060000007b8af0ff00000000bfa100000001006a2dffffffbfa400000000000007040000f0ffffff810000000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x8, 0xc3, &(0x7f0000000100)=""/195, 0x41000, 0x18, '\x00', 0x0, 0x17, r1, 0x8, &(0x7f0000000340)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xf, 0x4, 0x2}, 0x10, 0x1b0c6, r4, 0x8, 0x0, &(0x7f00000003c0)=[{0x3, 0x1, 0xd, 0x8}, {0x1, 0x5, 0xa, 0x5}, {0x2, 0x1, 0x7, 0xc3c6eab784e1bbf2}, {0x3, 0x3, 0x9, 0xc}, {0x5, 0x2, 0x2}, {0x5, 0x4, 0x1, 0x8}, {0x4, 0x3, 0x10}, {0x3, 0x1, 0xb, 0xb}], 0x10, 0x3568}, 0x94) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000004000/0x3000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = socket$inet_icmp(0x2, 0x2, 0x1) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r7, 0x2f, 0x0, @void}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r8, 0x2d, 0x0}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x6, 0x90, [0x0, 0x200000000440, 0x0, 0x0, 0x200000000470, 0x200000000684], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000001b0000000000000000000000000000000000ffffffff0000fb0000000000000000000000000000000000000000000000000000000000000000000000040000000000fcffffff00dfffffffffffffff0000000000000000000000000000000000000000000000000000000000000002000000fcffffff00000000"]}, 0x108) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x9, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000fffff9000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000002ffffffff00000000"]}, 0x108) (async) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xd82, 0x0) 97.162453ms ago: executing program 4 (id=1439): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc010000190001000000000300000000ac14141f0000000000000000000000000000000000000000000000000000000000000003fffe00000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000400000000000000000000000000000005000000000000000000000000000000060000000000000000000000b06b6e00000001000000000044010500fc020000000000000000000000000000000000003200000000000000ffffffff0000000000000000000000000535000000000000000000000000000000000000fc000000000000000000000000000000000000003300000002"], 0x1fc}}, 0x0) 54.856801ms ago: executing program 0 (id=1440): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x408, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r2, 0x4}, 0x38) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0502ecfffffdfddbdf25120007fd1800018014000200626f6e645f736c6176655f310000000008000800000000000800070002000000"], 0x3c}}, 0x44804) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000020000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='w\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000129bd7000ffdbdf2510000000080001007063690011000200303030303a30303a31302e300000000008000b0006000000060011007f00000008001300060000000500140000000000080001007063690011000200303030303a30303a31302e300000000008000b00ffff0000060011000c00000008001300060000000500140001000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$inet(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000840)="50346458e2e22d47ca51264eb8a9b0581557a66222648254ec1f5ac007d982d9f0196aff4a2f72d8eb5c47e765d328fb816b657eb395417adde716278b5315137cf4389198cb28d1be5da16313800bf0ccef1ca0d21e48b3fdef44485b", 0x5d}, {&(0x7f0000000980)="8c57300916bd505f523e54b5814cdb54978a3e8dc043747d481e904d9828caca6c9eaf3c00fad699557eee5ea252ce9cd124265684fcb19dbd89396eaa7c1568b00daccb76313fd83d8cf4322c1699a67acb29f3cb56cc1076748ba2a1de2703bb5b06d09bd1fabf0621cf591a46506b0ec66ad74655490666f51f9730b5ad0b317060813b54315eb79688c01597a034e8e2bdc292e1e7cfc80714394990a38deefbc04344808760666ce9510e1ce9533f0490372215523f7f9f764d243dde02249021a7f76a12f4af53cd9d3d6155b170a5c4088b8947e50a1bda973b19a6c4f5cec09fb6554e0fbfcca269553e12d10323554d1d1b3b7f589c8db8", 0xfc}], 0x2}, 0x10004) syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@inlinecrypt}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") 0s ago: executing program 4 (id=1441): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") setxattr$incfs_metadata(0x0, &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8", 0xf, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0xd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) preadv(r2, &(0x7f0000003700)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x50, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x90000, 0x400000, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f00000000c0)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") r7 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f00000005c0)={0xa, 0x4e1f, 0x8, @local, 0xa}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x35, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(r7, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) request_key(0x0, &(0x7f0000002840)={'syz', 0x1}, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x0, 0x1, 0x3d, 0x3}}], 0x18}, 0x0) kernel console output (not intermixed with test programs): f6c819 code=0x7ffc0000 [ 127.167633][ T28] audit: type=1326 audit(1776072973.206:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.4.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7ef6c819 code=0x7ffc0000 [ 127.193991][ T3317] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 127.212530][ T28] audit: type=1326 audit(1776072973.206:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.4.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7ef6c819 code=0x7ffc0000 [ 127.246543][ T28] audit: type=1326 audit(1776072973.206:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.4.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7ef6c819 code=0x7ffc0000 [ 127.280388][ T28] audit: type=1326 audit(1776072973.206:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.4.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b7ef6c819 code=0x7ffc0000 [ 127.304964][ T28] audit: type=1326 audit(1776072973.206:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.4.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7ef6c819 code=0x7ffc0000 [ 127.351130][ T28] audit: type=1326 audit(1776072973.206:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.4.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7ef6c819 code=0x7ffc0000 [ 127.390472][ T6045] loop0: detected capacity change from 0 to 512 [ 127.649773][ T6045] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.780260][ T6045] FAULT_INJECTION: forcing a failure. [ 127.780260][ T6045] name failslab, interval 1, probability 0, space 0, times 1 [ 127.875278][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'. [ 127.917580][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 127.925622][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 127.945588][ T6045] CPU: 1 UID: 0 PID: 6045 Comm: syz.0.707 Tainted: G W syzkaller #0 PREEMPT(full) [ 127.945626][ T6045] Tainted: [W]=WARN [ 127.945634][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 127.945648][ T6045] Call Trace: [ 127.945708][ T6045] [ 127.945717][ T6045] __dump_stack+0x1d/0x30 [ 127.945780][ T6045] dump_stack_lvl+0x95/0xd0 [ 127.945885][ T6045] dump_stack+0x15/0x1b [ 127.945909][ T6045] should_fail_ex+0x263/0x280 [ 127.945952][ T6045] should_failslab+0x8c/0xb0 [ 127.945977][ T6045] kmem_cache_alloc_noprof+0x66/0x400 [ 127.946012][ T6045] ? do_getname+0x2e/0x1c0 [ 127.946077][ T6045] ? __rcu_read_unlock+0x4e/0x70 [ 127.946106][ T6045] do_getname+0x2e/0x1c0 [ 127.946128][ T6045] getname_flags+0x1d/0x30 [ 127.946306][ T6045] do_sys_openat2+0x60/0x130 [ 127.946339][ T6045] __x64_sys_creat+0x65/0x90 [ 127.946435][ T6045] x64_sys_call+0x2ea0/0x3020 [ 127.946496][ T6045] do_syscall_64+0x12c/0x370 [ 127.946527][ T6045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.946552][ T6045] RIP: 0033:0x7f8af84dc819 [ 127.946600][ T6045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.946619][ T6045] RSP: 002b:00007f8af6f2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 127.946642][ T6045] RAX: ffffffffffffffda RBX: 00007f8af8755fa0 RCX: 00007f8af84dc819 [ 127.946659][ T6045] RDX: 0000000000000000 RSI: d931d3864d39dcdb RDI: 0000200000000000 [ 127.946674][ T6045] RBP: 00007f8af6f2f090 R08: 0000000000000000 R09: 0000000000000000 [ 127.946689][ T6045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.946713][ T6045] R13: 00007f8af8756038 R14: 00007f8af8755fa0 R15: 00007fffbabeec28 [ 127.946790][ T6045] [ 128.198607][ T6058] loop5: detected capacity change from 0 to 256 [ 128.206033][ T3317] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 128.254190][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.715'. [ 128.428103][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.5.716'. [ 128.678042][ T6078] loop4: detected capacity change from 0 to 512 [ 128.730317][ T6081] loop0: detected capacity change from 0 to 512 [ 128.790517][ T6078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.930289][ T6081] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.947486][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 128.954295][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 129.044833][ T6086] netlink: 'syz.3.720': attribute type 10 has an invalid length. [ 129.249185][ T3317] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 129.292553][ T6093] netlink: 16 bytes leftover after parsing attributes in process `syz.5.722'. [ 129.316297][ T6095] loop3: detected capacity change from 0 to 512 [ 129.333386][ T6093] netlink: 20 bytes leftover after parsing attributes in process `syz.5.722'. [ 129.369029][ T6095] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.432091][ T6095] FAULT_INJECTION: forcing a failure. [ 129.432091][ T6095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.483007][ T6105] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 129.489613][ T6105] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.519702][ T6095] CPU: 0 UID: 0 PID: 6095 Comm: syz.3.724 Tainted: G W syzkaller #0 PREEMPT(full) [ 129.519740][ T6095] Tainted: [W]=WARN [ 129.519747][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 129.519759][ T6095] Call Trace: [ 129.519845][ T6095] [ 129.519855][ T6095] __dump_stack+0x1d/0x30 [ 129.519887][ T6095] dump_stack_lvl+0x95/0xd0 [ 129.519911][ T6095] dump_stack+0x15/0x1b [ 129.519932][ T6095] should_fail_ex+0x263/0x280 [ 129.519974][ T6095] should_fail+0xb/0x20 [ 129.520003][ T6095] should_fail_usercopy+0x1a/0x20 [ 129.520061][ T6095] strncpy_from_user+0x27/0x250 [ 129.520087][ T6095] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 129.520117][ T6095] do_getname+0x59/0x1c0 [ 129.520219][ T6095] getname_flags+0x1d/0x30 [ 129.520247][ T6095] do_sys_openat2+0x60/0x130 [ 129.520279][ T6095] __x64_sys_creat+0x65/0x90 [ 129.520331][ T6095] x64_sys_call+0x2ea0/0x3020 [ 129.520356][ T6095] do_syscall_64+0x12c/0x370 [ 129.520384][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.520474][ T6095] RIP: 0033:0x7fe97312c819 [ 129.520494][ T6095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.520515][ T6095] RSP: 002b:00007fe971b87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 129.520604][ T6095] RAX: ffffffffffffffda RBX: 00007fe9733a5fa0 RCX: 00007fe97312c819 [ 129.520621][ T6095] RDX: 0000000000000000 RSI: d931d3864d39dcdb RDI: 0000200000000000 [ 129.520637][ T6095] RBP: 00007fe971b87090 R08: 0000000000000000 R09: 0000000000000000 [ 129.520653][ T6095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.520722][ T6095] R13: 00007fe9733a6038 R14: 00007fe9733a5fa0 R15: 00007ffeeeaaf188 [ 129.520772][ T6095] [ 129.626745][ T6105] vhci_hcd vhci_hcd.0: Device attached [ 129.790800][ T3314] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 129.817245][ T6106] vhci_hcd: connection closed [ 129.817935][ T4900] vhci_hcd vhci_hcd.5: stop threads [ 129.830799][ T4900] vhci_hcd vhci_hcd.5: release socket [ 129.836316][ T4900] vhci_hcd vhci_hcd.5: disconnect device [ 129.959884][ T6120] lo speed is unknown, defaulting to 1000 [ 129.997127][ T6120] lo speed is unknown, defaulting to 1000 [ 130.016680][ T6121] smc: removing ib device syU [ 130.045671][ T6120] lo speed is unknown, defaulting to 1000 [ 130.091268][ T6120] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 130.140421][ T6120] lo speed is unknown, defaulting to 1000 [ 130.162837][ T6120] lo speed is unknown, defaulting to 1000 [ 130.169524][ T6120] lo speed is unknown, defaulting to 1000 [ 130.176782][ T6120] lo speed is unknown, defaulting to 1000 [ 130.183510][ T6120] lo speed is unknown, defaulting to 1000 [ 130.189888][ T6120] lo speed is unknown, defaulting to 1000 [ 130.196213][ T6120] lo speed is unknown, defaulting to 1000 [ 130.217176][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.391242][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 130.414311][ T6131] loop3: detected capacity change from 0 to 512 [ 130.449169][ T6131] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.732593][ T3314] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 130.850072][ T6153] loop5: detected capacity change from 0 to 1024 [ 130.857884][ T6153] EXT4-fs: test_dummy_encryption option not supported [ 130.892186][ T6155] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 130.997769][ T6155] EXT4-fs (loop6): failed to initialize system zone (-117) [ 131.005940][ T6155] EXT4-fs (loop6): mount failed [ 131.646488][ T6164] EXT4-fs (loop5): 1 orphan inode deleted [ 131.665452][ T6164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.902446][ T6164] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.947483][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 131.954714][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 132.020831][ T1593] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:7: Failed to release dquot type 1 [ 133.027555][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 133.033978][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 133.174108][ T6173] set_capacity_and_notify: 2 callbacks suppressed [ 133.174207][ T6173] loop0: detected capacity change from 0 to 512 [ 133.241280][ T6173] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 133.369007][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.417242][ T6181] loop0: detected capacity change from 0 to 1024 [ 133.456704][ T6187] loop5: detected capacity change from 0 to 136 [ 133.462475][ T6181] EXT4-fs: test_dummy_encryption option not supported [ 133.468651][ T6183] loop6: detected capacity change from 0 to 4096 [ 133.488154][ T6187] iso9660: Unknown parameter 'syzkaller' [ 133.517865][ T6183] EXT4-fs: Ignoring removed bh option [ 133.537623][ T6183] ext4: Unknown parameter 'fsuuid' [ 133.664117][ T6197] loop5: detected capacity change from 0 to 1024 [ 133.676121][ T6197] EXT4-fs: test_dummy_encryption option not supported [ 134.067473][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 134.074193][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 135.496372][ T6194] loop6: detected capacity change from 0 to 512 [ 135.510141][ T6194] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.222557][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 136.222574][ T28] audit: type=1400 audit(1776072982.406:4492): avc: denied { bind } for pid=6202 comm="syz.3.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 136.323435][ T6207] loop0: detected capacity change from 0 to 512 [ 136.419844][ T6207] EXT4-fs (loop0): 1 orphan inode deleted [ 136.452777][ T6207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.468709][ T202] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 136.501554][ T202] EXT4-fs error (device loop0): ext4_release_dquot:7062: comm kworker/u8:5: Failed to release dquot type 1 [ 136.532662][ T6207] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.735774][ T28] audit: type=1400 audit(1776072982.886:4493): avc: denied { read write } for pid=4645 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.761678][ T6248] loop3: detected capacity change from 0 to 1024 [ 136.807476][ T28] audit: type=1400 audit(1776072982.886:4494): avc: denied { open } for pid=4645 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.838865][ T6248] EXT4-fs: test_dummy_encryption option not supported [ 136.915794][ T6228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.933037][ T6228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.006824][ T28] audit: type=1400 audit(1776072982.886:4495): avc: denied { ioctl } for pid=4645 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.035401][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 137.035446][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 137.067441][ T28] audit: type=1400 audit(1776072982.896:4496): avc: denied { create } for pid=6240 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.130300][ T28] audit: type=1400 audit(1776072982.896:4497): avc: denied { setopt } for pid=6240 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.180308][ T28] audit: type=1400 audit(1776072982.896:4498): avc: denied { create } for pid=6240 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.228103][ T6257] bond4: option tlb_dynamic_lb: invalid value (255) [ 137.242715][ T6257] bond4 (unregistering): Released all slaves [ 137.262205][ T6265] netlink: 'syz.6.775': attribute type 6 has an invalid length. [ 137.301914][ T28] audit: type=1400 audit(1776072982.896:4499): avc: denied { map_create } for pid=6240 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 137.329777][ T28] audit: type=1400 audit(1776072982.896:4500): avc: denied { map_read map_write } for pid=6240 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 137.434283][ T6273] loop6: detected capacity change from 0 to 512 [ 137.787871][ T6313] bond5: option arp_all_targets: invalid value (262144) [ 137.906921][ T6319] tipc: Can't bind to reserved service type 1 [ 137.907218][ T6313] bond5 (unregistering): Released all slaves [ 138.074687][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 138.083654][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 138.882840][ T6349] netlink: 'syz.6.808': attribute type 1 has an invalid length. [ 138.968437][ T6349] netlink: 28 bytes leftover after parsing attributes in process `syz.6.808'. [ 139.003819][ T6349] 8021q: adding VLAN 0 to HW filter on device bond4 [ 139.107510][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 139.114469][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 139.267213][ T6370] loop5: detected capacity change from 0 to 256 [ 139.443156][ T6384] loop6: detected capacity change from 0 to 128 [ 139.473996][ T6384] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 139.537624][ T6384] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.565438][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 139.578538][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.821'. [ 139.612428][ T6389] loop4: detected capacity change from 0 to 512 [ 139.645566][ T6391] loop3: detected capacity change from 0 to 512 [ 139.656723][ T6389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.690633][ T6391] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.697865][ T6389] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.741901][ T202] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.773140][ T6391] FAULT_INJECTION: forcing a failure. [ 139.773140][ T6391] name failslab, interval 1, probability 0, space 0, times 0 [ 139.897672][ T6391] CPU: 1 UID: 0 PID: 6391 Comm: syz.3.824 Tainted: G W syzkaller #0 PREEMPT(full) [ 139.897827][ T6391] Tainted: [W]=WARN [ 139.897835][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 139.897847][ T6391] Call Trace: [ 139.897854][ T6391] [ 139.897862][ T6391] __dump_stack+0x1d/0x30 [ 139.897891][ T6391] dump_stack_lvl+0x95/0xd0 [ 139.897962][ T6391] dump_stack+0x15/0x1b [ 139.897988][ T6391] should_fail_ex+0x263/0x280 [ 139.898017][ T6391] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 139.898070][ T6391] should_failslab+0x8c/0xb0 [ 139.898093][ T6391] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 139.898118][ T6391] ? ext4_alloc_inode+0x38/0x320 [ 139.898145][ T6391] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 139.898232][ T6391] ext4_alloc_inode+0x38/0x320 [ 139.898260][ T6391] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 139.898290][ T6391] alloc_inode+0x40/0x170 [ 139.898316][ T6391] iget_locked+0x101/0x440 [ 139.898413][ T6391] __ext4_iget+0x152/0x23f0 [ 139.898437][ T6391] ? __rcu_read_unlock+0x4e/0x70 [ 139.898523][ T6391] ? d_alloc_parallel+0xc01/0xce0 [ 139.898551][ T6391] ? __rcu_read_unlock+0x4e/0x70 [ 139.898575][ T6391] ? __d_lookup+0x316/0x340 [ 139.898617][ T6391] ext4_lookup+0x173/0x3a0 [ 139.898679][ T6391] ? __pfx_ext4_lookup+0x10/0x10 [ 139.898709][ T6391] path_openat+0xbf0/0x2050 [ 139.898740][ T6391] do_file_open+0x16c/0x290 [ 139.898764][ T6391] do_sys_openat2+0x94/0x130 [ 139.898839][ T6391] __x64_sys_creat+0x65/0x90 [ 139.898873][ T6391] x64_sys_call+0x2ea0/0x3020 [ 139.898943][ T6391] do_syscall_64+0x12c/0x370 [ 139.899014][ T6391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.899037][ T6391] RIP: 0033:0x7fe97312c819 [ 139.899293][ T6391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.899312][ T6391] RSP: 002b:00007fe971b87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 139.899392][ T6391] RAX: ffffffffffffffda RBX: 00007fe9733a5fa0 RCX: 00007fe97312c819 [ 139.899408][ T6391] RDX: 0000000000000000 RSI: d931d3864d39dcdb RDI: 0000200000000000 [ 139.899423][ T6391] RBP: 00007fe971b87090 R08: 0000000000000000 R09: 0000000000000000 [ 139.899510][ T6391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.899527][ T6391] R13: 00007fe9733a6038 R14: 00007fe9733a5fa0 R15: 00007ffeeeaaf188 [ 139.899581][ T6391] [ 140.248481][ T3314] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 140.272167][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.293317][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.355231][ T6402] loop3: detected capacity change from 0 to 256 [ 140.469071][ T6410] netlink: 'syz.0.828': attribute type 4 has an invalid length. [ 140.823273][ T6424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6424 comm=syz.0.834 [ 141.005774][ T6422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.834'. [ 141.068180][ T6422] loop0: detected capacity change from 0 to 256 [ 141.093647][ T6422] msdos: Bad value for 'uid' [ 141.107814][ T6422] msdos: Bad value for 'uid' [ 141.121277][ T6431] loop4: detected capacity change from 0 to 1024 [ 141.150171][ T6431] EXT4-fs: test_dummy_encryption option not supported [ 141.226014][ T6433] loop3: detected capacity change from 0 to 512 [ 141.279154][ T6433] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.325240][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 141.325257][ T28] audit: type=1400 audit(1776072987.506:4586): avc: denied { write } for pid=6432 comm="syz.3.839" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 141.380901][ T28] audit: type=1400 audit(1776072987.546:4587): avc: denied { write open } for pid=6432 comm="syz.3.839" path="/198/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 141.413611][ T28] audit: type=1400 audit(1776072987.556:4588): avc: denied { write } for pid=6414 comm="syz.5.832" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 141.448905][ T3314] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 141.595888][ T28] audit: type=1400 audit(1776072987.776:4589): avc: denied { read } for pid=6459 comm="syz.5.849" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 141.694493][ T28] audit: type=1400 audit(1776072987.776:4590): avc: denied { open } for pid=6459 comm="syz.5.849" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 141.782375][ T6475] loop5: detected capacity change from 0 to 1024 [ 141.823625][ T6475] EXT4-fs: test_dummy_encryption option not supported [ 141.841898][ T6478] loop3: detected capacity change from 0 to 512 [ 141.848911][ T28] audit: type=1400 audit(1776072987.806:4591): avc: denied { read write } for pid=6448 comm="syz.6.846" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 142.012553][ T28] audit: type=1400 audit(1776072987.806:4592): avc: denied { open } for pid=6448 comm="syz.6.846" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 142.047845][ T6478] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.095334][ T6478] FAULT_INJECTION: forcing a failure. [ 142.095334][ T6478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.372717][ T6485] EXT4-fs (loop5): 1 orphan inode deleted [ 142.392277][ T6485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.409391][ T6485] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.586598][ T1593] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 142.634503][ T6486] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 142.649007][ T6478] CPU: 0 UID: 0 PID: 6478 Comm: syz.3.854 Tainted: G W syzkaller #0 PREEMPT(full) [ 142.649055][ T6478] Tainted: [W]=WARN [ 142.649062][ T6478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 142.649074][ T6478] Call Trace: [ 142.649081][ T6478] [ 142.649131][ T6478] __dump_stack+0x1d/0x30 [ 142.649158][ T6478] dump_stack_lvl+0x95/0xd0 [ 142.649180][ T6478] dump_stack+0x15/0x1b [ 142.649204][ T6478] should_fail_ex+0x263/0x280 [ 142.649237][ T6478] should_fail+0xb/0x20 [ 142.649310][ T6478] should_fail_usercopy+0x1a/0x20 [ 142.649341][ T6478] _copy_from_user+0x1c/0xb0 [ 142.649382][ T6478] kstrtouint_from_user+0x69/0xf0 [ 142.649415][ T6478] proc_fail_nth_write+0x50/0x160 [ 142.649526][ T6478] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 142.649559][ T6478] vfs_write+0x269/0x9f0 [ 142.649582][ T6478] ? __rcu_read_unlock+0x4e/0x70 [ 142.649614][ T6478] ? __fget_files+0x184/0x1c0 [ 142.649714][ T6478] ? mutex_lock+0x57/0x90 [ 142.649738][ T6478] ksys_write+0xdc/0x1a0 [ 142.649757][ T6478] __x64_sys_write+0x40/0x50 [ 142.649775][ T6478] x64_sys_call+0x27e1/0x3020 [ 142.649800][ T6478] do_syscall_64+0x12c/0x370 [ 142.649906][ T6478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.649932][ T6478] RIP: 0033:0x7fe9730ed04e [ 142.649951][ T6478] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 142.649969][ T6478] RSP: 002b:00007fe971b86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 142.650026][ T6478] RAX: ffffffffffffffda RBX: 00007fe971b876c0 RCX: 00007fe9730ed04e [ 142.650066][ T6478] RDX: 0000000000000001 RSI: 00007fe971b870a0 RDI: 0000000000000005 [ 142.650079][ T6478] RBP: 00007fe971b87090 R08: 0000000000000000 R09: 0000000000000000 [ 142.650092][ T6478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.650186][ T6478] R13: 00007fe9733a6038 R14: 00007fe9733a5fa0 R15: 00007ffeeeaaf188 [ 142.650205][ T6478] [ 142.867474][ T1593] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:7: Failed to release dquot type 1 [ 142.925214][ T6486] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 142.933644][ T3314] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 142.958040][ T28] audit: type=1400 audit(1776072989.086:4593): avc: denied { mount } for pid=6482 comm="syz.0.856" name="/" dev="loop0" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 143.034344][ T28] audit: type=1400 audit(1776072989.106:4594): avc: denied { mounton } for pid=6482 comm="syz.0.856" path="/173/bus/file0" dev="loop0" ino=1986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 143.247881][ T202] syzkaller0: tun_net_xmit 76 [ 143.253272][ T202] syzkaller0: tun_net_xmit 48 [ 143.273500][ T6458] EXT4-fs (loop4): 1 orphan inode deleted [ 143.287528][ T1593] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:7: Failed to release dquot type 1 [ 143.326184][ T1593] loop4: lost filesystem error report for type 5 error -117 [ 143.327410][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 143.342422][ C0] EXT4-fs (loop4): initial error at time 1776072989: ext4_release_dquot:7062 [ 143.351611][ C0] EXT4-fs (loop4): last error at time 1776072989: ext4_release_dquot:7062 [ 143.480785][ T6458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.652540][ T6515] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.716852][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.738116][ T6515] mmap: syz.6.865 (6515) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 143.751514][ T6458] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.829004][ T6524] netlink: 'syz.5.868': attribute type 1 has an invalid length. [ 143.964648][ T6527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.868'. [ 144.182392][ T6518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.219400][ T6526] bond1: (slave geneve2): making interface the new active one [ 144.228053][ T4645] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 144.247258][ T6526] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 144.268807][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.296821][ T6527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.324889][ T6541] set_capacity_and_notify: 5 callbacks suppressed [ 144.324908][ T6541] loop0: detected capacity change from 0 to 512 [ 144.351329][ T6541] ext2: Unknown parameter 'smackfshat' [ 144.442252][ T1593] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 144.459108][ T4309] lo speed is unknown, defaulting to 1000 [ 144.460369][ T1593] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 144.487763][ T3388] lo speed is unknown, defaulting to 1000 [ 144.494339][ T1593] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 144.597959][ T6556] loop5: detected capacity change from 0 to 512 [ 144.697767][ T1593] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 144.718425][ T6556] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 144.759308][ T6556] EXT4-fs (loop5): 1 truncate cleaned up [ 144.769235][ T6556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.787718][ T6563] loop3: detected capacity change from 0 to 1024 [ 144.795893][ T6563] EXT4-fs: test_dummy_encryption option not supported [ 144.926117][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.081281][ T6569] loop3: detected capacity change from 0 to 512 [ 145.169921][ T6569] EXT4-fs (loop3): 1 orphan inode deleted [ 145.177864][ T6569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.199025][ T6569] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.952598][ T4900] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:9: Failed to release dquot type 1 [ 146.213765][ T6575] loop5: detected capacity change from 0 to 4096 [ 146.261415][ T6575] EXT4-fs: Mount option(s) incompatible with ext2 [ 146.322855][ T6581] netlink: 'syz.0.884': attribute type 1 has an invalid length. [ 146.337557][ T28] kauditd_printk_skb: 1823 callbacks suppressed [ 146.337576][ T28] audit: type=1326 audit(1776072992.516:6416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.6.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ee9726597 code=0x7ffc0000 [ 146.410203][ T6581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.884'. [ 146.438065][ T6581] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.447350][ T28] audit: type=1326 audit(1776072992.516:6417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.6.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ee96cdb99 code=0x7ffc0000 [ 146.525152][ T28] audit: type=1326 audit(1776072992.516:6418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.6.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ee9726597 code=0x7ffc0000 [ 146.633280][ T28] audit: type=1326 audit(1776072992.516:6419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.6.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ee96cdb99 code=0x7ffc0000 [ 146.730623][ T28] audit: type=1326 audit(1776072992.516:6420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.6.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ee9726597 code=0x7ffc0000 [ 146.798751][ T6585] netlink: 7 bytes leftover after parsing attributes in process `syz.0.885'. [ 146.820330][ T28] audit: type=1326 audit(1776072992.516:6421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.6.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ee96cdb99 code=0x7ffc0000 [ 146.907532][ T28] audit: type=1326 audit(1776072992.516:6422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.6.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ee9726597 code=0x7ffc0000 [ 146.958346][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.977474][ T28] audit: type=1326 audit(1776072992.516:6423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.6.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ee96cdb99 code=0x7ffc0000 [ 147.005124][ T28] audit: type=1326 audit(1776072992.516:6424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.6.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ee9726597 code=0x7ffc0000 [ 147.032588][ T28] audit: type=1326 audit(1776072992.516:6425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.6.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ee96cdb99 code=0x7ffc0000 [ 147.089314][ T6575] loop5: detected capacity change from 0 to 8192 [ 147.114885][ T6595] loop0: detected capacity change from 0 to 512 [ 147.147814][ T3307] loop5: p1 < > p2 p4 < p5 > [ 147.152624][ T3307] loop5: partition table partially beyond EOD, truncated [ 147.163068][ T6595] EXT4-fs: inline encryption not supported [ 147.196396][ T3307] loop5: p1 start 134217728 is beyond EOD, truncated [ 147.197170][ T6595] EXT4-fs (loop0): 1 truncate cleaned up [ 147.220412][ T6595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.249230][ T3307] loop5: p2 size 591360 extends beyond EOD, truncated [ 147.263542][ T3307] loop5: p5 size 591360 extends beyond EOD, truncated [ 147.302726][ T6598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.890'. [ 147.330330][ T6575] loop5: p1 < > p2 p4 < p5 > [ 147.377507][ T6575] loop5: partition table partially beyond EOD, truncated [ 147.397756][ T6575] loop5: p1 start 134217728 is beyond EOD, truncated [ 147.405224][ T6575] loop5: p2 size 591360 extends beyond EOD, truncated [ 147.467096][ T6608] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.889: invalid indirect mapped block 4294901760 (level 0) [ 147.474271][ T6575] loop5: p5 size 591360 extends beyond EOD, [ 147.511070][ T6608] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.889: invalid indirect mapped block 4294967295 (level 1) [ 147.516948][ T6575] truncated [ 147.635734][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 147.649792][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 147.659082][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 147.682725][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.719052][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 147.731136][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 147.744006][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 147.908504][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.5.896'. [ 148.123867][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.196770][ T6625] loop3: detected capacity change from 0 to 1024 [ 148.276021][ T6625] EXT4-fs: test_dummy_encryption option not supported [ 148.319980][ T6631] netlink: 36 bytes leftover after parsing attributes in process `syz.6.900'. [ 148.723617][ T6638] loop3: detected capacity change from 0 to 512 [ 148.907836][ T6638] EXT4-fs (loop3): 1 orphan inode deleted [ 148.951441][ T6638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.992541][ T6638] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.147026][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:0: Failed to release dquot type 1 [ 149.352216][ T6642] loop4: detected capacity change from 0 to 512 [ 149.404678][ T6642] EXT4-fs: Ignoring removed oldalloc option [ 149.557417][ T6644] loop6: detected capacity change from 0 to 1024 [ 149.589955][ T6642] EXT4-fs (loop4): 1 truncate cleaned up [ 149.597716][ T6642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.645781][ T6644] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 149.711378][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.724514][ T6644] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 149.805429][ T6644] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.868142][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.6.902'. [ 149.928491][ T6644] ext4: Unknown parameter '@LqE: 艞t}0$' [ 150.099070][ T4645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.275058][ T6655] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 150.381138][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.910'. [ 150.417648][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.910'. [ 150.430490][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.912'. [ 150.531570][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.641926][ T6680] usb usb8: usbfs: process 6680 (syz.0.915) did not claim interface 0 before use [ 150.727864][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.914'. [ 150.758003][ T6695] loop4: detected capacity change from 0 to 1024 [ 150.764919][ T6695] EXT4-fs: test_dummy_encryption option not supported [ 150.950748][ T6680] loop0: detected capacity change from 0 to 2048 [ 151.116234][ T6699] loop4: detected capacity change from 0 to 512 [ 151.153331][ T3307] Alternate GPT is invalid, using primary GPT. [ 151.213694][ T6699] EXT4-fs (loop4): 1 orphan inode deleted [ 151.230083][ T6699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.252337][ T6699] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.325526][ T3307] loop0: p2 p3 p7 [ 151.894094][ T12] __quota_error: 2802 callbacks suppressed [ 151.894113][ T12] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 152.350251][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:0: Failed to release dquot type 1 [ 152.533327][ T28] audit: type=1400 audit(1776072998.716:9227): avc: denied { getopt } for pid=6710 comm="syz.6.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 152.596593][ T6716] xt_hashlimit: size too large, truncated to 1048576 [ 152.650383][ T28] audit: type=1400 audit(1776072998.716:9228): avc: denied { write } for pid=6710 comm="syz.6.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 152.682584][ T6719] program syz.6.926 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.734011][ T6719] loop6: detected capacity change from 0 to 1024 [ 152.755182][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.765083][ T28] audit: type=1400 audit(1776072998.746:9229): avc: denied { ioctl } for pid=6710 comm="syz.6.924" path="socket:[16869]" dev="sockfs" ino=16869 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 152.909898][ T28] audit: type=1400 audit(1776072999.096:9230): avc: denied { create } for pid=6717 comm="syz.6.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 153.318664][ T6730] loop6: detected capacity change from 0 to 512 [ 153.334609][ T6730] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.367633][ T6735] loop3: detected capacity change from 0 to 512 [ 153.395041][ T6743] loop4: detected capacity change from 0 to 1024 [ 153.395498][ T6735] EXT4-fs: inline encryption not supported [ 153.415462][ T6735] EXT4-fs (loop3): 1 truncate cleaned up [ 153.422878][ T6735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.447976][ T4645] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 153.482623][ T6680] Alternate GPT is invalid, using primary GPT. [ 153.525771][ T6680] loop0: p2 p3 p7 [ 153.580159][ T6746] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6746 comm=syz.5.936 [ 153.609327][ T3001] Alternate GPT is invalid, using primary GPT. [ 153.617428][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.622821][ T6750] loop6: detected capacity change from 0 to 1024 [ 153.628372][ T3001] loop0: p2 p3 p7 [ 153.633808][ T6750] EXT4-fs: test_dummy_encryption option not supported [ 153.713118][ T6752] xt_hashlimit: size too large, truncated to 1048576 [ 153.784501][ T6749] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 153.891535][ T28] audit: type=1400 audit(1776073000.076:9231): avc: denied { create } for pid=6755 comm="syz.5.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.382135][ T6760] EXT4-fs (loop6): 1 orphan inode deleted [ 154.399577][ T6760] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.421374][ T6760] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.548609][ T28] audit: type=1400 audit(1776073000.726:9232): avc: denied { create } for pid=6770 comm="syz.4.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 154.598738][ T6771] geneve3: entered allmulticast mode [ 154.669285][ T28] audit: type=1400 audit(1776073000.776:9233): avc: denied { connect } for pid=6770 comm="syz.4.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 154.781853][ T6789] xt_hashlimit: size too large, truncated to 1048576 [ 154.877119][ T6796] netlink: 16 bytes leftover after parsing attributes in process `syz.4.953'. [ 155.059311][ T6801] set_capacity_and_notify: 2 callbacks suppressed [ 155.059330][ T6801] loop4: detected capacity change from 0 to 512 [ 155.087480][ T50] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 155.114054][ T50] EXT4-fs error (device loop6): ext4_release_dquot:7062: comm kworker/u8:3: Failed to release dquot type 1 [ 155.151997][ T6801] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.256452][ T3321] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 155.325514][ T28] audit: type=1400 audit(1776073001.506:9234): avc: denied { write } for pid=6807 comm="syz.0.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 155.351712][ T6815] siw: device registration error -23 [ 155.377349][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.958'. [ 155.386859][ T6815] netlink: 14 bytes leftover after parsing attributes in process `syz.3.957'. [ 155.420557][ T6815] bond0 (unregistering): Released all slaves [ 155.446554][ T6813] usb usb9: usbfs: process 6813 (syz.0.958) did not claim interface 7 before use [ 155.589846][ T4645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.619073][ T6829] loop5: detected capacity change from 0 to 256 [ 155.776726][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.6.965'. [ 156.527668][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'. [ 156.555776][ T6863] loop4: detected capacity change from 0 to 2048 [ 156.564832][ T6863] EXT4-fs: dax option not supported [ 156.671253][ T6868] loop6: detected capacity change from 0 to 1024 [ 156.719450][ T6868] EXT4-fs: test_dummy_encryption option not supported [ 157.500700][ T6877] netlink: 'syz.4.984': attribute type 1 has an invalid length. [ 157.938461][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.984'. [ 158.754891][ T6878] loop6: detected capacity change from 0 to 512 [ 159.983140][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 159.983225][ T28] audit: type=1400 audit(1776073006.166:9240): avc: denied { connect } for pid=6870 comm="syz.5.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 160.029643][ T6900] loop0: detected capacity change from 0 to 256 [ 160.259946][ T6878] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 160.260277][ T6878] EXT4-fs: failed to create workqueue [ 160.279593][ T6878] EXT4-fs (loop6): mount failed [ 160.533359][ T6900] vti0: entered allmulticast mode [ 160.814054][ T28] audit: type=1400 audit(1776073006.926:9241): avc: denied { mount } for pid=6870 comm="syz.5.983" name="/" dev="rpc_pipefs" ino=17095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 161.290845][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 161.332643][ T6910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.994'. [ 161.381618][ T9] IPVS: starting estimator thread 0... [ 161.615687][ T6928] netlink: 'syz.6.999': attribute type 6 has an invalid length. [ 161.616591][ T28] audit: type=1400 audit(1776073007.576:9242): avc: denied { module_load } for pid=6920 comm="syz.3.998" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=17165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 161.669351][ T28] audit: type=1400 audit(1776073007.576:9243): avc: denied { lock } for pid=6920 comm="syz.3.998" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=17165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 161.771530][ T6922] IPVS: using max 2736 ests per chain, 136800 per kthread [ 161.822141][ T28] audit: type=1400 audit(1776073007.796:9244): avc: denied { mount } for pid=6908 comm="syz.4.994" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 161.953172][ T28] audit: type=1400 audit(1776073008.136:9245): avc: denied { block_suspend } for pid=6935 comm="syz.3.1004" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 161.980221][ T6928] loop6: detected capacity change from 0 to 1024 [ 162.103868][ T6928] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 162.126889][ T6928] System zones: 0-1, 3-36 [ 162.196162][ T6928] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.999: bad orphan inode 134217728 [ 162.226396][ T6928] loop6: lost filesystem error report for type 5 error -117 [ 162.227414][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 162.241836][ C0] EXT4-fs (loop6): initial error at time 1776073008: ext4_orphan_get:1423 [ 162.251725][ C0] EXT4-fs (loop6): last error at time 1776073008: ext4_orphan_get:1423 [ 162.382028][ T6928] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.555109][ T28] audit: type=1400 audit(1776073008.726:9246): avc: denied { create } for pid=6927 comm="syz.6.999" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 162.626006][ T28] audit: type=1400 audit(1776073008.786:9247): avc: denied { read open } for pid=6927 comm="syz.6.999" path="/136/bus/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 162.800837][ T4645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.875517][ T6959] loop3: detected capacity change from 0 to 1024 [ 162.912748][ T6959] EXT4-fs: test_dummy_encryption option not supported [ 162.924211][ T6963] netlink: 'syz.6.1011': attribute type 1 has an invalid length. [ 162.961870][ T28] audit: type=1400 audit(1776073009.146:9248): avc: denied { execute } for pid=6964 comm="syz.4.1012" name="file0" dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.961904][ T28] audit: type=1400 audit(1776073009.146:9249): avc: denied { execute_no_trans } for pid=6964 comm="syz.4.1012" path="/193/file0" dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.962518][ T6966] loop4: detected capacity change from 0 to 512 [ 163.003432][ T6966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.003559][ T6966] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.014354][ T6963] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1011'. [ 163.014844][ T6963] 8021q: adding VLAN 0 to HW filter on device bond5 [ 163.050894][ T6966] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.164410][ T4309] IPVS: starting estimator thread 0... [ 163.355667][ T6977] loop3: detected capacity change from 0 to 512 [ 163.448628][ T6976] IPVS: using max 2784 ests per chain, 139200 per kthread [ 163.472649][ T6977] EXT4-fs (loop3): 1 orphan inode deleted [ 163.493407][ T6977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.514425][ T6977] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.720415][ T6974] loop5: detected capacity change from 0 to 8192 [ 163.917490][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1018'. [ 164.219549][ T36] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:2: Failed to release dquot type 1 [ 164.831183][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.989565][ T7017] vxcan2: entered allmulticast mode [ 165.029650][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1029'. [ 165.115670][ T7031] netlink: 'syz.4.1034': attribute type 1 has an invalid length. [ 165.305527][ T7043] 9p: Bad value for 'version' [ 165.318371][ T3552] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 165.326251][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 165.326266][ T28] audit: type=1400 audit(1776073011.486:9257): avc: denied { read write } for pid=7044 comm="syz.0.1040" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 165.358047][ T3552] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 165.397034][ T7032] loop5: detected capacity change from 0 to 512 [ 165.407590][ T7048] netlink: 'syz.3.1041': attribute type 1 has an invalid length. [ 165.407818][ T28] audit: type=1400 audit(1776073011.486:9258): avc: denied { open } for pid=7044 comm="syz.0.1040" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 165.452960][ T7048] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1041'. [ 165.483657][ T7048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.573569][ T7056] hub 8-0:1.0: USB hub found [ 165.582488][ T7032] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #2: comm syz.5.1028: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 165.635396][ T7056] hub 8-0:1.0: 8 ports detected [ 165.647883][ T7032] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 165.648998][ T7032] EXT4-fs (loop5): get root inode failed [ 165.659051][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 165.659262][ C1] EXT4-fs (loop5): initial error at time 1776073011: ext4_ext_check_inode:521: inode 2 [ 165.659474][ C1] EXT4-fs (loop5): last error at time 1776073011: ext4_ext_check_inode:521: inode 2 [ 165.676236][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1045'. [ 165.707139][ T7032] EXT4-fs (loop5): mount failed [ 165.783392][ T7046] loop0: detected capacity change from 0 to 736 [ 165.817672][ T28] audit: type=1400 audit(1776073011.996:9259): avc: denied { mounton } for pid=7044 comm="syz.0.1040" path="/syzcgroup/net/syz0/devices.allow" dev="cgroup" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 165.912080][ T7075] netlink: 'syz.3.1049': attribute type 1 has an invalid length. [ 165.969400][ T7074] loop6: detected capacity change from 0 to 1024 [ 165.982570][ T7074] EXT4-fs: test_dummy_encryption option not supported [ 166.194215][ T28] audit: type=1400 audit(1776073012.176:9260): avc: denied { read write } for pid=7079 comm="syz.0.1052" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.409587][ T7091] loop6: detected capacity change from 0 to 512 [ 166.518641][ T7091] EXT4-fs (loop6): 1 orphan inode deleted [ 166.536731][ T7091] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.552602][ T1593] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 166.566396][ T7091] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.952222][ T28] audit: type=1400 audit(1776073012.176:9261): avc: denied { ioctl open } for pid=7079 comm="syz.0.1052" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.976597][ T1593] EXT4-fs error (device loop6): ext4_release_dquot:7062: comm kworker/u8:7: Failed to release dquot type 1 [ 167.166189][ T7107] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1058'. [ 167.209047][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 167.516566][ T1593] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.548088][ T1593] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 167.640529][ T1593] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.677593][ T1593] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 167.852918][ T4645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.870075][ T1593] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.886726][ T28] audit: type=1400 audit(1776073014.066:9262): avc: denied { watch watch_reads } for pid=7114 comm="syz.3.1061" path="/246" dev="tmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 167.910291][ T1593] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 167.961528][ T1593] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.000750][ T1593] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 168.595022][ T28] audit: type=1400 audit(1776073014.726:9263): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 168.724631][ T1593] bridge_slave_1: left allmulticast mode [ 168.852684][ T28] audit: type=1400 audit(1776073014.806:9264): avc: denied { search } for pid=3040 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.852717][ T28] audit: type=1400 audit(1776073014.806:9265): avc: denied { search } for pid=3040 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.852856][ T1593] bridge_slave_1: left promiscuous mode [ 168.852953][ T1593] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.918392][ T1593] bridge_slave_0: left allmulticast mode [ 168.918416][ T1593] bridge_slave_0: left promiscuous mode [ 168.918578][ T1593] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.103482][ T7163] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1074'. [ 169.117832][ T1593] bond1 (unregistering): (slave geneve2): Releasing active interface [ 169.132187][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1074'. [ 169.156534][ T7166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1075'. [ 169.186188][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1076'. [ 169.229224][ T1593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.239723][ T1593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.249461][ T1593] bond0 (unregistering): Released all slaves [ 169.257188][ T1593] bond1 (unregistering): Released all slaves [ 169.265937][ T1593] bond2 (unregistering): Released all slaves [ 169.276330][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1072'. [ 169.311398][ T7170] bond6: entered promiscuous mode [ 169.322691][ T7170] 8021q: adding VLAN 0 to HW filter on device bond6 [ 169.331967][ T7166] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7166 comm=syz.3.1075 [ 169.360495][ T7173] 8021q: adding VLAN 0 to HW filter on device bond6 [ 169.378352][ T7173] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 169.396858][ T7173] bond6: (slave ip6gre1): Error -95 calling set_mac_address [ 169.469262][ T1593] hsr_slave_0: left promiscuous mode [ 169.484874][ T1593] hsr_slave_1: left promiscuous mode [ 169.511518][ T1593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.531069][ T1593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.554107][ T1593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.572351][ T1593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.601591][ T1593] veth1_macvtap: left promiscuous mode [ 169.609841][ T1593] veth0_macvtap: left promiscuous mode [ 169.615722][ T1593] veth1_vlan: left promiscuous mode [ 169.621739][ T1593] veth0_vlan: left promiscuous mode [ 171.298745][ T1593] team0 (unregistering): Port device team_slave_1 removed [ 171.311997][ T1593] team0 (unregistering): Port device team_slave_0 removed [ 171.360743][ T7191] tipc: Enabling of bearer rejected, failed to enable media [ 171.370221][ T7194] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1083'. [ 171.396004][ T7200] bridge1: entered promiscuous mode [ 171.413395][ T7202] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1086'. [ 171.446398][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 171.586233][ T7215] loop4: detected capacity change from 0 to 256 [ 171.646758][ T28] kauditd_printk_skb: 153 callbacks suppressed [ 171.646832][ T28] audit: type=1400 audit(1776073017.826:9419): avc: denied { getopt } for pid=7218 comm="syz.3.1093" laddr=fe80::14 lport=27786 faddr=fe80::aa fport=19999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.703005][ T28] audit: type=1400 audit(1776073017.866:9420): avc: denied { connect } for pid=7214 comm="syz.4.1091" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 172.007596][ T7224] loop3: detected capacity change from 0 to 512 [ 172.021619][ T7224] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 172.035612][ T7224] EXT4-fs (loop3): orphan cleanup on readonly fs [ 172.042711][ T7224] EXT4-fs warning (device loop3): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 172.060759][ T7224] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 172.067855][ T7224] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.1094: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 172.086302][ T7224] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 172.086515][ T7224] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1094: couldn't read orphan inode 13 (err -117) [ 172.095824][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 172.095845][ C0] EXT4-fs (loop3): last error at time 1776073018: ext4_ext_check_inode:521: inode 13 [ 172.137483][ T7224] loop3: lost filesystem error report for type 5 error -117 [ 172.208115][ T7224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.524907][ T7230] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.535878][ T7230] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.546362][ T7230] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 172.668569][ T7230] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.679337][ T7230] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.690192][ T7230] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 172.706662][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.781823][ T7265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7265 comm=syz.4.1101 [ 172.798790][ T7265] __nla_validate_parse: 1 callbacks suppressed [ 172.798808][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'. [ 172.816196][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1099'. [ 172.835944][ T28] audit: type=1400 audit(1776073019.016:9421): avc: denied { unmount } for pid=5271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 172.856989][ T7230] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.867691][ T7230] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.878134][ T7230] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 172.886288][ T7274] loop5: detected capacity change from 0 to 512 [ 172.896066][ T7265] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 172.911390][ T7278] loop6: detected capacity change from 0 to 512 [ 172.919922][ T7274] EXT4-fs: Ignoring removed orlov option [ 172.926019][ T7274] ext3: Unknown parameter 'obj_type' [ 172.931846][ T7278] EXT4-fs: inline encryption not supported [ 172.954775][ T7278] EXT4-fs (loop6): 1 truncate cleaned up [ 172.961512][ T7278] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.982993][ T7230] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.993616][ T7230] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.003942][ T7230] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 173.031497][ T7283] loop3: detected capacity change from 0 to 128 [ 173.052484][ T7283] FAT-fs (loop3): bogus number of reserved sectors [ 173.063453][ T7288] loop4: detected capacity change from 0 to 512 [ 173.065454][ T7283] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 173.080168][ T7283] FAT-fs (loop3): Can't find a valid FAT filesystem [ 173.112463][ T50] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.131045][ T4645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.137643][ T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 173.159001][ T50] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 173.193045][ T1593] bridge_slave_1: left allmulticast mode [ 173.198949][ T7288] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 173.202799][ T1593] bridge_slave_1: left promiscuous mode [ 173.205975][ T7294] netlink: 'syz.6.1106': attribute type 1 has an invalid length. [ 173.227876][ T7288] EXT4-fs (loop4): mount failed [ 173.241085][ T28] audit: type=1400 audit(1776073019.416:9422): avc: denied { create } for pid=7296 comm="syz.5.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 173.243578][ T1593] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.283080][ T7302] loop3: detected capacity change from 0 to 256 [ 173.292301][ T1593] bridge_slave_0: left allmulticast mode [ 173.300198][ T1593] bridge_slave_0: left promiscuous mode [ 173.306021][ T1593] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.380478][ T7315] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1106'. [ 173.469173][ T1593] batman_adv: batadv1: Removing interface: bridge1 [ 173.509721][ T1593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.521128][ T1593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.530640][ T1593] bond0 (unregistering): Released all slaves [ 173.537700][ T202] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.546098][ T202] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 173.554632][ T202] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 173.569010][ T7315] 8021q: adding VLAN 0 to HW filter on device bond7 [ 173.651722][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1111'. [ 173.676063][ T202] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.694858][ T202] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 173.703407][ T202] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 173.712588][ T202] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.721247][ T202] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 173.729883][ T202] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 173.738414][ T28] audit: type=1400 audit(1776073019.926:9423): avc: denied { write } for pid=7329 comm="syz.0.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 173.776268][ T1593] hsr_slave_0: left promiscuous mode [ 173.792384][ T1593] hsr_slave_1: left promiscuous mode [ 173.798542][ T1593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.806138][ T1593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.814910][ T1593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.829978][ T28] audit: type=1326 audit(1776073020.016:9424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7332 comm="syz.3.1112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe97312c819 code=0x0 [ 173.854820][ T1593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.877414][ T1593] veth1_macvtap: left promiscuous mode [ 173.904277][ T1593] veth0_macvtap: left promiscuous mode [ 173.910692][ T1593] veth1_vlan: left promiscuous mode [ 173.915989][ T1593] veth0_vlan: left promiscuous mode [ 173.938686][ T7348] xt_hashlimit: size too large, truncated to 1048576 [ 174.431637][ T1593] team0 (unregistering): Port device team_slave_1 removed [ 174.466362][ T1593] team0 (unregistering): Port device team_slave_0 removed [ 174.565651][ T10] lo speed is unknown, defaulting to 1000 [ 174.574382][ T7358] lo speed is unknown, defaulting to 1000 [ 174.577010][ T10] infiniband syz0: ib_query_port failed (-19) [ 174.688535][ T7374] loop5: detected capacity change from 0 to 256 [ 174.740274][ T7374] syzkaller0: entered promiscuous mode [ 174.746142][ T7374] syzkaller0: entered allmulticast mode [ 174.757582][ T28] audit: type=1400 audit(1776073020.926:9425): avc: denied { mount } for pid=7373 comm="syz.5.1122" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 174.780582][ T7374] 8021q: VLANs not supported on wg2 [ 174.845899][ T7383] loop0: detected capacity change from 0 to 1024 [ 174.869665][ T7383] EXT4-fs: test_dummy_encryption option not supported [ 174.923599][ T7389] loop6: detected capacity change from 0 to 256 [ 174.967850][ T7389] FAULT_INJECTION: forcing a failure. [ 174.967850][ T7389] name failslab, interval 1, probability 0, space 0, times 0 [ 174.982114][ T7389] CPU: 0 UID: 0 PID: 7389 Comm: syz.6.1123 Tainted: G W syzkaller #0 PREEMPT(full) [ 174.982152][ T7389] Tainted: [W]=WARN [ 174.982213][ T7389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 174.982224][ T7389] Call Trace: [ 174.982231][ T7389] [ 174.982292][ T7389] __dump_stack+0x1d/0x30 [ 174.982320][ T7389] dump_stack_lvl+0x95/0xd0 [ 174.982343][ T7389] dump_stack+0x15/0x1b [ 174.982430][ T7389] should_fail_ex+0x263/0x280 [ 174.982458][ T7389] should_failslab+0x8c/0xb0 [ 174.982511][ T7389] kmem_cache_alloc_noprof+0x66/0x400 [ 174.982534][ T7389] ? security_file_alloc+0x32/0xf0 [ 174.982558][ T7389] security_file_alloc+0x32/0xf0 [ 174.982684][ T7389] init_file+0x5b/0x1b0 [ 174.982715][ T7389] alloc_empty_file+0x8b/0x200 [ 174.982768][ T7389] path_openat+0x65/0x2050 [ 174.982790][ T7389] ? _parse_integer_limit+0x170/0x190 [ 174.982818][ T7389] ? _parse_integer+0x27/0x40 [ 174.982900][ T7389] ? kstrtoull+0x111/0x140 [ 174.982922][ T7389] ? kstrtouint+0x76/0xc0 [ 174.982956][ T7389] do_file_open+0x16c/0x290 [ 174.982986][ T7389] do_sys_openat2+0x94/0x130 [ 174.983025][ T7389] __x64_sys_openat+0xf2/0x120 [ 174.983056][ T7389] x64_sys_call+0x1e39/0x3020 [ 174.983174][ T7389] do_syscall_64+0x12c/0x370 [ 174.983201][ T7389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.983305][ T7389] RIP: 0033:0x7f2ee972c819 [ 174.983324][ T7389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.983341][ T7389] RSP: 002b:00007f2ee817f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 174.983362][ T7389] RAX: ffffffffffffffda RBX: 00007f2ee99a5fa0 RCX: 00007f2ee972c819 [ 174.983375][ T7389] RDX: 000000000000275a RSI: 0000200000000840 RDI: ffffffffffffff9c [ 174.983389][ T7389] RBP: 00007f2ee817f090 R08: 0000000000000000 R09: 0000000000000000 [ 174.983417][ T7389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.983506][ T7389] R13: 00007f2ee99a6038 R14: 00007f2ee99a5fa0 R15: 00007ffc50678ac8 [ 174.983529][ T7389] [ 175.257551][ T28] audit: type=1400 audit(1776073021.406:9426): avc: denied { read } for pid=7394 comm="syz.5.1128" dev="nsfs" ino=4026533591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 175.279564][ T28] audit: type=1400 audit(1776073021.406:9427): avc: denied { open } for pid=7394 comm="syz.5.1128" path="net:[4026533591]" dev="nsfs" ino=4026533591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 175.304901][ T28] audit: type=1400 audit(1776073021.406:9428): avc: denied { create } for pid=7394 comm="syz.5.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.432378][ T7403] lo speed is unknown, defaulting to 1000 [ 175.508275][ T7413] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.523753][ T7413] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.551897][ T7413] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #2: block 4: comm syz.4.1134: lblock 0 mapped to illegal pblock 4 (length 1) [ 175.577505][ T7416] xt_hashlimit: size too large, truncated to 1048576 [ 175.584187][ T7413] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 175.584917][ T7413] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.1134: error -117 reading directory block [ 175.595437][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 175.595462][ C0] EXT4-fs (loop4): initial error at time 1776073021: ext4_map_blocks:786: inode 2: block 4 [ 175.595499][ C0] EXT4-fs (loop4): last error at time 1776073021: ext4_map_blocks:786: inode 2: block 4 [ 175.636735][ T7413] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 175.645736][ T7413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.667472][ T7413] EXT4-fs (loop4): shut down requested (2) [ 175.674080][ T7413] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.1134: error -117 reading directory block [ 175.700307][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.767862][ T7424] EXT4-fs: inline encryption not supported [ 175.791652][ T7424] EXT4-fs (loop5): 1 truncate cleaned up [ 175.817335][ T7424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.899927][ T7424] FAULT_INJECTION: forcing a failure. [ 175.899927][ T7424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.967152][ T7424] CPU: 1 UID: 0 PID: 7424 Comm: syz.5.1137 Tainted: G W syzkaller #0 PREEMPT(full) [ 175.967192][ T7424] Tainted: [W]=WARN [ 175.967201][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 175.967215][ T7424] Call Trace: [ 175.967223][ T7424] [ 175.967234][ T7424] __dump_stack+0x1d/0x30 [ 175.967323][ T7424] dump_stack_lvl+0x95/0xd0 [ 175.967350][ T7424] dump_stack+0x15/0x1b [ 175.967439][ T7424] should_fail_ex+0x263/0x280 [ 175.967470][ T7424] should_fail+0xb/0x20 [ 175.967568][ T7424] should_fail_usercopy+0x1a/0x20 [ 175.967667][ T7424] _copy_from_user+0x1c/0xb0 [ 175.967766][ T7424] quota_setinfo+0x4c/0x240 [ 175.967839][ T7424] ? selinux_quotactl+0x23b/0x260 [ 175.967863][ T7424] do_quotactl+0x4f9/0x670 [ 175.967905][ T7424] __se_sys_quotactl+0x1f5/0x660 [ 175.967933][ T7424] __x64_sys_quotactl+0x55/0x70 [ 175.967968][ T7424] x64_sys_call+0x1a2a/0x3020 [ 175.967997][ T7424] do_syscall_64+0x12c/0x370 [ 175.968039][ T7424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.968060][ T7424] RIP: 0033:0x7efc453cc819 [ 175.968105][ T7424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.968127][ T7424] RSP: 002b:00007efc43e1f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 175.968152][ T7424] RAX: ffffffffffffffda RBX: 00007efc45645fa0 RCX: 00007efc453cc819 [ 175.968225][ T7424] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffff80000602 [ 175.968261][ T7424] RBP: 00007efc43e1f090 R08: 0000000000000000 R09: 0000000000000000 [ 175.968274][ T7424] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 175.968287][ T7424] R13: 00007efc45646038 R14: 00007efc45645fa0 R15: 00007fffa7290dd8 [ 175.968306][ T7424] [ 176.171422][ T7434] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 176.189292][ T7434] EXT4-fs (loop4): 1 orphan inode deleted [ 176.195180][ T7434] EXT4-fs (loop4): 1 truncate cleaned up [ 176.230673][ T7434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.243079][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.300449][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.371611][ T7455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.406225][ T7455] ext4 filesystem being mounted at /270/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.437962][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1143'. [ 176.513141][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1147'. [ 176.522301][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1147'. [ 176.546484][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1146'. [ 176.573068][ T7469] hsr_slave_1 (unregistering): left promiscuous mode [ 176.617534][ T7474] veth0_vlan: left promiscuous mode [ 176.689633][ T7477] set_capacity_and_notify: 5 callbacks suppressed [ 176.689652][ T7477] loop6: detected capacity change from 0 to 1024 [ 176.703777][ T7477] EXT4-fs: test_dummy_encryption option not supported [ 176.715335][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.982305][ T7478] loop6: detected capacity change from 0 to 512 [ 177.059986][ T7478] EXT4-fs (loop6): 1 orphan inode deleted [ 177.075297][ T7478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.094844][ T7478] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.123556][ T7486] loop3: detected capacity change from 0 to 512 [ 177.134526][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 177.134585][ T28] audit: type=1400 audit(1776073023.306:9502): avc: denied { read write } for pid=7476 comm="syz.6.1151" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 177.166176][ T4900] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 177.180019][ T28] audit: type=1400 audit(1776073023.306:9503): avc: denied { open } for pid=7476 comm="syz.6.1151" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 177.205542][ T4900] EXT4-fs error (device loop6): ext4_release_dquot:7062: comm kworker/u8:9: Failed to release dquot type 1 [ 177.230135][ T7487] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1153'. [ 177.360674][ T28] audit: type=1400 audit(1776073023.516:9504): avc: denied { nlmsg_write } for pid=7491 comm="syz.3.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 177.408449][ T7494] Invalid argument reading file caps for ./file0 [ 177.483586][ T28] audit: type=1400 audit(1776073023.586:9505): avc: denied { create } for pid=7493 comm="syz.3.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 177.563789][ T4645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.611462][ T7494] loop3: detected capacity change from 0 to 512 [ 177.635069][ T28] audit: type=1400 audit(1776073023.586:9506): avc: denied { connect } for pid=7493 comm="syz.3.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 177.642578][ T7494] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 177.655769][ T28] audit: type=1400 audit(1776073023.596:9507): avc: denied { execute } for pid=7493 comm="syz.3.1156" name="file0" dev="tmpfs" ino=1467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 177.704560][ T28] audit: type=1400 audit(1776073023.596:9508): avc: denied { execute_no_trans } for pid=7493 comm="syz.3.1156" path="/275/file0" dev="tmpfs" ino=1467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 177.733891][ T7494] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1156: iget: bogus i_mode (2) [ 177.752691][ T7510] loop6: detected capacity change from 0 to 512 [ 177.772618][ T7494] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 177.772898][ T7494] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1156: couldn't read orphan inode 15 (err -117) [ 177.782216][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 177.782238][ C1] EXT4-fs (loop3): initial error at time 1776073023: ext4_orphan_get:1397: inode 15 [ 177.782270][ C1] EXT4-fs (loop3): last error at time 1776073023: ext4_orphan_get:1397: inode 15 [ 177.800492][ T28] audit: type=1400 audit(1776073023.696:9509): avc: denied { write } for pid=7493 comm="syz.3.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 177.801104][ T7494] loop3: lost filesystem error report for type 5 error -117 [ 177.813130][ T7503] loop4: detected capacity change from 0 to 128 [ 177.860212][ T7510] EXT4-fs: inline encryption not supported [ 177.872757][ T7494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.888264][ T28] audit: type=1400 audit(1776073023.766:9510): avc: denied { read } for pid=7493 comm="syz.3.1156" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 177.918062][ T7494] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.923624][ T7510] EXT4-fs (loop6): 1 truncate cleaned up [ 177.948145][ T7510] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.018056][ T7510] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1158'. [ 178.048299][ T7503] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.088366][ T7503] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.127169][ T4645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.490779][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1164'. [ 178.581354][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.681013][ T7535] netlink: 'syz.4.1165': attribute type 1 has an invalid length. [ 178.711379][ T7535] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1165'. [ 178.721780][ T7535] 8021q: adding VLAN 0 to HW filter on device bond7 [ 178.892409][ T7541] loop4: detected capacity change from 0 to 1024 [ 178.911317][ T7541] EXT4-fs: test_dummy_encryption option not supported [ 178.913715][ T7544] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7544 comm=syz.5.1170 [ 178.965391][ T7546] loop5: detected capacity change from 0 to 1024 [ 178.979772][ T7546] EXT4-fs: Ignoring removed bh option [ 179.039260][ T7546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.247206][ T7549] loop4: detected capacity change from 0 to 512 [ 179.398529][ T7549] EXT4-fs (loop4): 1 orphan inode deleted [ 179.422719][ T7549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.454782][ T7549] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.493055][ T36] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:2: Failed to release dquot type 1 [ 179.913193][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.938094][ T7569] netlink: 'syz.0.1176': attribute type 1 has an invalid length. [ 179.963614][ T7569] netlink: 'syz.0.1176': attribute type 10 has an invalid length. [ 179.973270][ T7572] FAULT_INJECTION: forcing a failure. [ 179.973270][ T7572] name failslab, interval 1, probability 0, space 0, times 0 [ 179.995932][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.999138][ T7572] CPU: 1 UID: 0 PID: 7572 Comm: syz.4.1174 Tainted: G W syzkaller #0 PREEMPT(full) [ 179.999208][ T7572] Tainted: [W]=WARN [ 179.999215][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 179.999228][ T7572] Call Trace: [ 179.999236][ T7572] [ 179.999263][ T7572] __dump_stack+0x1d/0x30 [ 179.999291][ T7572] dump_stack_lvl+0x95/0xd0 [ 179.999315][ T7572] dump_stack+0x15/0x1b [ 179.999338][ T7572] should_fail_ex+0x263/0x280 [ 179.999415][ T7572] should_failslab+0x8c/0xb0 [ 179.999438][ T7572] __kvmalloc_node_noprof+0x155/0x650 [ 179.999465][ T7572] ? vmemdup_user+0x2b/0xd0 [ 179.999535][ T7572] vmemdup_user+0x2b/0xd0 [ 179.999615][ T7572] map_get_next_key+0x140/0x330 [ 179.999638][ T7572] ? __sys_bpf+0x643/0x7e0 [ 179.999668][ T7572] __sys_bpf+0x64d/0x7e0 [ 179.999693][ T7572] __x64_sys_bpf+0x41/0x50 [ 179.999712][ T7572] x64_sys_call+0x10cb/0x3020 [ 179.999798][ T7572] do_syscall_64+0x12c/0x370 [ 179.999826][ T7572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.999849][ T7572] RIP: 0033:0x7f2b7ef6c819 [ 179.999867][ T7572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.999885][ T7572] RSP: 002b:00007f2b7d9bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 179.999963][ T7572] RAX: ffffffffffffffda RBX: 00007f2b7f1e5fa0 RCX: 00007f2b7ef6c819 [ 179.999978][ T7572] RDX: 0000000000000020 RSI: 0000200000000840 RDI: 0000000000000004 [ 179.999991][ T7572] RBP: 00007f2b7d9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 180.000005][ T7572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.000018][ T7572] R13: 00007f2b7f1e6038 R14: 00007f2b7f1e5fa0 R15: 00007fff3a175ea8 [ 180.000036][ T7572] [ 180.203727][ T7586] netlink: 'syz.0.1183': attribute type 1 has an invalid length. [ 180.252667][ T7586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1183'. [ 180.261529][ T7590] syz.4.1184 (7590): /proc/7589/oom_adj is deprecated, please use /proc/7589/oom_score_adj instead. [ 180.273825][ T7586] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.352340][ T7588] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1182'. [ 180.468430][ T7606] veth0: mtu less than device minimum [ 180.508037][ T7608] netlink: 'syz.4.1190': attribute type 1 has an invalid length. [ 180.647113][ T7617] loop0: detected capacity change from 0 to 512 [ 180.661592][ T7617] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 180.662749][ T7617] EXT4-fs (loop0): 1 truncate cleaned up [ 180.663113][ T7617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.729438][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.880141][ T7637] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 181.350839][ T7661] ipt_REJECT: ECHOREPLY no longer supported. [ 181.533909][ T4645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.323161][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 182.323179][ T28] audit: type=1400 audit(1776073028.506:9553): avc: denied { create } for pid=7684 comm="syz.5.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 182.417344][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1215'. [ 182.458718][ T7678] set_capacity_and_notify: 1 callbacks suppressed [ 182.459001][ T7678] loop6: detected capacity change from 0 to 1024 [ 182.496897][ T7688] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.551162][ T7678] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 182.598336][ T28] audit: type=1400 audit(1776073028.786:9554): avc: denied { ioctl } for pid=7670 comm="syz.3.1211" path="socket:[19732]" dev="sockfs" ino=19732 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 182.649990][ T7678] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 182.694971][ T7678] EXT4-fs error (device loop6): ext4_get_journal_inode:5888: comm syz.6.1210: inode #1: comm syz.6.1210: iget: illegal inode # [ 182.759874][ T7705] netlink: 'syz.0.1221': attribute type 1 has an invalid length. [ 182.771266][ T7678] loop6: lost filesystem error report for type 5 error -117 [ 182.772805][ T7678] EXT4-fs (loop6): no journal found [ 182.781533][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 182.781644][ C1] EXT4-fs (loop6): initial error at time 1776073028: ext4_get_journal_inode:5888 [ 182.782043][ C1] EXT4-fs (loop6): last error at time 1776073028: ext4_get_journal_inode:5888 [ 182.845020][ T7678] EXT4-fs (loop6): can't get journal size [ 182.862019][ T7678] EXT4-fs (loop6): failed to initialize system zone (-22) [ 182.926916][ T7678] EXT4-fs (loop6): mount failed [ 182.932422][ T7724] loop5: detected capacity change from 0 to 512 [ 182.968752][ T7724] loop5: detected capacity change from 0 to 1024 [ 183.015142][ T7728] loop3: detected capacity change from 0 to 256 [ 183.029804][ T7728] loop3: detected capacity change from 0 to 764 [ 183.046688][ T7728] iso9660: Unknown parameter 'zjY8? [ 183.046688][ T7728] MHzaw}~?bGZv2' [ 183.063701][ T7732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1229'. [ 183.088094][ T28] audit: type=1400 audit(1776073029.266:9555): avc: denied { mounton } for pid=7721 comm="syz.3.1225" path="/proc/815/task" dev="proc" ino=20483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 183.114807][ T7724] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 183.146078][ T7737] xt_hashlimit: size too large, truncated to 1048576 [ 183.167280][ T7737] xt_hashlimit: invalid rate [ 183.200293][ T7724] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1224'. [ 183.244497][ T7743] FAULT_INJECTION: forcing a failure. [ 183.244497][ T7743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.307455][ T7743] CPU: 0 UID: 0 PID: 7743 Comm: syz.4.1231 Tainted: G W syzkaller #0 PREEMPT(full) [ 183.307494][ T7743] Tainted: [W]=WARN [ 183.307502][ T7743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 183.307516][ T7743] Call Trace: [ 183.307522][ T7743] [ 183.307530][ T7743] __dump_stack+0x1d/0x30 [ 183.307647][ T7743] dump_stack_lvl+0x95/0xd0 [ 183.307673][ T7743] dump_stack+0x15/0x1b [ 183.307698][ T7743] should_fail_ex+0x263/0x280 [ 183.307740][ T7743] should_fail+0xb/0x20 [ 183.307767][ T7743] should_fail_usercopy+0x1a/0x20 [ 183.307799][ T7743] _copy_to_user+0x20/0xa0 [ 183.307881][ T7743] map_get_next_key+0x277/0x330 [ 183.307905][ T7743] __sys_bpf+0x64d/0x7e0 [ 183.307932][ T7743] __x64_sys_bpf+0x41/0x50 [ 183.307949][ T7743] x64_sys_call+0x10cb/0x3020 [ 183.308051][ T7743] do_syscall_64+0x12c/0x370 [ 183.308085][ T7743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.308110][ T7743] RIP: 0033:0x7f2b7ef6c819 [ 183.308129][ T7743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.308149][ T7743] RSP: 002b:00007f2b7d9bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 183.308173][ T7743] RAX: ffffffffffffffda RBX: 00007f2b7f1e5fa0 RCX: 00007f2b7ef6c819 [ 183.308206][ T7743] RDX: 0000000000000020 RSI: 0000200000000840 RDI: 0000000000000004 [ 183.308222][ T7743] RBP: 00007f2b7d9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 183.308237][ T7743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.308250][ T7743] R13: 00007f2b7f1e6038 R14: 00007f2b7f1e5fa0 R15: 00007fff3a175ea8 [ 183.308271][ T7743] [ 183.650689][ T7754] loop6: detected capacity change from 0 to 256 [ 183.885720][ T28] audit: type=1400 audit(1776073030.066:9556): avc: denied { setopt } for pid=7759 comm="syz.5.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.113000][ T28] audit: type=1400 audit(1776073030.296:9557): avc: denied { view } for pid=7766 comm="syz.6.1241" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 184.197453][ T28] audit: type=1326 audit(1776073030.326:9558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.6.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee972c819 code=0x7ffc0000 [ 184.221671][ T28] audit: type=1326 audit(1776073030.326:9559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.6.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee972c819 code=0x7ffc0000 [ 184.245388][ T28] audit: type=1326 audit(1776073030.326:9560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.6.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f2ee972c819 code=0x7ffc0000 [ 184.267723][ T7773] netlink: 'syz.3.1243': attribute type 8 has an invalid length. [ 184.270671][ T28] audit: type=1326 audit(1776073030.326:9561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.6.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee972c819 code=0x7ffc0000 [ 184.301038][ T28] audit: type=1326 audit(1776073030.326:9562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.6.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee972c819 code=0x7ffc0000 [ 184.570292][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1245'. [ 184.599372][ T7798] netlink: 'syz.0.1252': attribute type 11 has an invalid length. [ 184.608026][ T7800] loop4: detected capacity change from 0 to 512 [ 184.620015][ T7800] EXT4-fs: inline encryption not supported [ 184.630191][ T7798] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1252'. [ 184.640804][ T7800] EXT4-fs (loop4): 1 truncate cleaned up [ 184.647228][ T7800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.672740][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.820346][ T3552] IPVS: starting estimator thread 0... [ 184.833404][ T7814] can0: slcan on ttyS3. [ 184.927738][ T7814] can0 (unregistered): slcan off ttyS3. [ 184.933428][ T7819] IPVS: using max 2832 ests per chain, 141600 per kthread [ 184.941093][ T7814] Falling back ldisc for ttyS3. [ 186.148980][ T7869] loop4: detected capacity change from 0 to 512 [ 186.174337][ T7869] EXT4-fs: Ignoring removed bh option [ 186.180217][ T7869] EXT4-fs: dax option not supported [ 186.210151][ T7869] 9p: Bad value for 'rfdno' [ 186.408661][ T7882] bond9: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 186.438354][ T7898] loop6: detected capacity change from 0 to 512 [ 186.461938][ T7898] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 186.480148][ T7903] loop0: detected capacity change from 0 to 1024 [ 186.511162][ T7882] bond9 (unregistering): Released all slaves [ 186.513375][ T7903] EXT4-fs: test_dummy_encryption option not supported [ 186.535462][ T7898] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1269: invalid indirect mapped block 256 (level 2) [ 186.568274][ T7898] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 186.569736][ T7898] EXT4-fs (loop6): 2 truncates cleaned up [ 186.579095][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 186.579139][ C0] EXT4-fs (loop6): initial error at time 1776073032: ext4_free_branches:1023: inode 11 [ 186.579175][ C0] EXT4-fs (loop6): last error at time 1776073032: ext4_free_branches:1023: inode 11 [ 186.663065][ T7898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.696929][ T7898] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1269: bg 0: block 5: invalid block bitmap [ 186.718754][ T7898] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 17 with error 28 [ 186.737351][ T7898] EXT4-fs (loop6): This should not happen!! Data will be lost [ 186.737351][ T7898] [ 186.751077][ T7898] EXT4-fs (loop6): Total free blocks count 0 [ 186.757722][ T7898] EXT4-fs (loop6): Free/Dirty block details [ 186.780256][ T7898] EXT4-fs (loop6): free_blocks=0 [ 186.799951][ T7898] EXT4-fs (loop6): dirty_blocks=17 [ 186.813740][ T7898] EXT4-fs (loop6): Block reservation details [ 186.825583][ T7898] EXT4-fs (loop6): i_reserved_data_blocks=17 [ 186.919112][ T4645] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 186.950629][ T4645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.027451][ T7939] program syz.6.1276 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.274806][ T7951] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fff0000) [ 187.303034][ T7951] FAT-fs (loop5): Filesystem has been set read-only [ 187.313769][ T7949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1280'. [ 187.355133][ T7951] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fff0000) [ 187.753248][ T7928] EXT4-fs (loop0): 1 orphan inode deleted [ 187.781161][ T57] __quota_error: 42 callbacks suppressed [ 187.781180][ T57] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 187.805751][ T7928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.868118][ T57] EXT4-fs error (device loop0): ext4_release_dquot:7062: comm kworker/u8:4: Failed to release dquot type 1 [ 187.921199][ T57] loop0: lost filesystem error report for type 5 error -117 [ 188.034985][ T7928] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.190998][ T28] audit: type=1400 audit(1776073034.376:9605): avc: denied { mount } for pid=7975 comm="syz.4.1291" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 188.227889][ T7987] set_capacity_and_notify: 3 callbacks suppressed [ 188.227917][ T7987] loop3: detected capacity change from 0 to 1024 [ 188.272208][ T7987] EXT4-fs: test_dummy_encryption option not supported [ 188.296221][ T28] audit: type=1400 audit(1776073034.476:9606): avc: denied { read write } for pid=7986 comm="syz.3.1295" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 188.330377][ T7979] loop4: detected capacity change from 0 to 32768 [ 188.416633][ T28] audit: type=1400 audit(1776073034.476:9607): avc: denied { open } for pid=7986 comm="syz.3.1295" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 188.422421][ T3306] loop4: p1 p3 < > [ 188.454837][ T7979] loop4: p1 p3 < > [ 188.559951][ T7991] loop3: detected capacity change from 0 to 1024 [ 188.718237][ T28] audit: type=1400 audit(1776073034.756:9608): avc: denied { read } for pid=7986 comm="syz.3.1295" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 189.125680][ T28] audit: type=1400 audit(1776073034.756:9609): avc: denied { open } for pid=7986 comm="syz.3.1295" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 189.247048][ T28] audit: type=1400 audit(1776073035.156:9610): avc: denied { write } for pid=7990 comm="syz.6.1296" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 189.302867][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 189.334203][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 189.403943][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 189.424102][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 189.436681][ T28] audit: type=1400 audit(1776073035.426:9611): avc: denied { bind } for pid=8002 comm="syz.4.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.494518][ T8014] loop4: detected capacity change from 0 to 1024 [ 189.529725][ T8016] loop5: detected capacity change from 0 to 512 [ 189.580754][ T8016] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 189.641367][ T8016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.684573][ T8016] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.757128][ T8016] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1305: corrupted xattr block 32: bad e_name length [ 189.778433][ T8029] loop4: detected capacity change from 0 to 512 [ 189.811012][ T8029] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 189.846672][ T8016] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 189.880356][ T8029] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1307: bad orphan inode 131083 [ 189.902331][ T8016] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1305: corrupted xattr block 32: bad e_name length [ 189.929646][ T8029] loop4: lost filesystem error report for type 5 error -117 [ 189.936181][ T8029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.994491][ T8016] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 190.006356][ T28] audit: type=1400 audit(1776073036.176:9612): avc: denied { sqpoll } for pid=8015 comm="syz.5.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 190.049053][ T8038] netlink: 'syz.6.1309': attribute type 1 has an invalid length. [ 190.078535][ T8031] EXT4-fs error (device loop5): __ext4_new_inode:1285: comm syz.5.1305: failed to insert inode 16: doubly allocated? [ 190.134711][ T28] audit: type=1400 audit(1776073036.316:9613): avc: denied { remove_name } for pid=8015 comm="syz.5.1305" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.288487][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.303271][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.349239][ T8044] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1313'. [ 190.498470][ T8046] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1314'. [ 190.548834][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1314'. [ 190.640179][ T8052] loop5: detected capacity change from 0 to 512 [ 190.646970][ T8052] EXT4-fs: inline encryption not supported [ 190.665563][ T8052] EXT4-fs (loop5): 1 truncate cleaned up [ 190.733236][ T8046] ip6gre1: entered promiscuous mode [ 190.751756][ T8046] ip6gre1: entered allmulticast mode [ 190.760462][ T8055] loop4: detected capacity change from 0 to 512 [ 190.826951][ T8052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.959099][ T8055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.971899][ T8055] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.265851][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.278614][ T202] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.286411][ T202] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.307488][ T4309] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.349349][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.365691][ T8073] netlink: 'syz.6.1320': attribute type 1 has an invalid length. [ 191.397973][ T8073] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1320'. [ 191.437503][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.446323][ T8073] 8021q: adding VLAN 0 to HW filter on device bond9 [ 191.469386][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.614686][ T8083] netlink: 'syz.5.1323': attribute type 1 has an invalid length. [ 191.657526][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.962630][ T8098] loop5: detected capacity change from 0 to 512 [ 191.980456][ T8098] vfat: Unknown parameter '' [ 192.064270][ T8102] loop3: detected capacity change from 0 to 256 [ 192.071168][ T8102] vfat: Unknown parameter '' [ 192.117552][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.806170][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 192.806252][ T28] audit: type=1400 audit(1776073038.986:9691): avc: denied { write } for pid=8097 comm="syz.5.1329" name="mcfilter6" dev="proc" ino=4026533666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 192.851910][ T28] audit: type=1400 audit(1776073038.996:9692): avc: denied { name_connect } for pid=8097 comm="syz.5.1329" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 193.087452][ T28] audit: type=1400 audit(1776073039.166:9693): avc: denied { bind } for pid=8122 comm="syz.6.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 193.134316][ T28] audit: type=1400 audit(1776073039.216:9694): avc: denied { ioctl } for pid=8129 comm="syz.4.1340" path="socket:[21001]" dev="sockfs" ino=21001 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 193.189005][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.242554][ T28] audit: type=1400 audit(1776073039.416:9695): avc: denied { name_connect } for pid=8151 comm="syz.0.1343" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 193.313277][ T28] audit: type=1400 audit(1776073039.416:9696): avc: denied { create } for pid=8154 comm="syz.5.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.334098][ T8162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1349'. [ 193.350114][ T8162] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1349'. [ 193.363543][ T28] audit: type=1400 audit(1776073039.546:9697): avc: denied { connect } for pid=8161 comm="syz.0.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 193.385703][ T28] audit: type=1400 audit(1776073039.546:9698): avc: denied { read write } for pid=8161 comm="syz.0.1349" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 193.420405][ T8170] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1351'. [ 193.427901][ T28] audit: type=1400 audit(1776073039.546:9699): avc: denied { open } for pid=8161 comm="syz.0.1349" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 193.437490][ T8170] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1351'. [ 193.453647][ T28] audit: type=1400 audit(1776073039.546:9700): avc: denied { ioctl } for pid=8161 comm="syz.0.1349" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 193.536974][ T8170] set_capacity_and_notify: 2 callbacks suppressed [ 193.536994][ T8170] loop4: detected capacity change from 0 to 1024 [ 193.577525][ T8170] EXT4-fs: inline encryption not supported [ 193.587674][ T8170] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 193.610037][ T8177] loop0: detected capacity change from 0 to 256 [ 193.623475][ T8170] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #3: block 2: comm syz.4.1351: lblock 2 mapped to illegal pblock 2 (length 1) [ 193.637698][ T8170] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 193.641340][ T8170] EXT4-fs (loop4): Remounting filesystem read-only [ 193.650601][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 193.650623][ C0] EXT4-fs (loop4): initial error at time 1776073039: ext4_map_blocks:786: inode 3: block 2 [ 193.650675][ C0] EXT4-fs (loop4): last error at time 1776073039: ext4_map_blocks:786: inode 3: block 2 [ 193.684321][ T8170] EXT4-fs (loop4): 1 orphan inode deleted [ 193.690651][ T8170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.738923][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.768521][ T8186] loop0: detected capacity change from 0 to 512 [ 193.776235][ T8186] EXT4-fs: inline encryption not supported [ 193.826348][ T8186] EXT4-fs (loop0): 1 truncate cleaned up [ 193.834258][ T8186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.864190][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.887689][ T8194] loop0: detected capacity change from 0 to 1024 [ 193.894894][ T8194] EXT4-fs: test_dummy_encryption option not supported [ 194.433609][ T8217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1362'. [ 194.504223][ T8216] loop0: detected capacity change from 0 to 512 [ 194.522329][ T8219] loop5: detected capacity change from 0 to 256 [ 194.551007][ T8216] EXT4-fs (loop0): 1 orphan inode deleted [ 194.564230][ T8216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.577100][ T57] EXT4-fs error (device loop0): ext4_release_dquot:7062: comm kworker/u8:4: Failed to release dquot type 1 [ 194.606971][ T8229] loop3: detected capacity change from 0 to 512 [ 194.623450][ T57] loop0: lost filesystem error report for type 5 error -117 [ 194.623812][ T8216] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.649123][ T8229] EXT4-fs: dax option not supported [ 194.696557][ T8239] loop4: detected capacity change from 0 to 1024 [ 194.729133][ T8239] EXT4-fs: test_dummy_encryption option not supported [ 194.828730][ T8241] loop3: detected capacity change from 0 to 512 [ 194.836288][ T8241] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 194.868957][ T8241] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 194.913895][ T8241] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1370: bad orphan inode 4 [ 194.977203][ T8241] loop3: lost filesystem error report for type 5 error -117 [ 194.977392][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 194.991231][ C1] EXT4-fs (loop3): initial error at time 1776073041: ext4_orphan_get:1423 [ 195.000044][ C1] EXT4-fs (loop3): last error at time 1776073041: ext4_orphan_get:1423 [ 195.090838][ T8244] loop4: detected capacity change from 0 to 512 [ 195.249151][ T8244] EXT4-fs (loop4): 1 orphan inode deleted [ 195.269093][ T8244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.284985][ T8244] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.507464][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 195.555363][ T8250] ext4: Bad value for 'max_batch_time' [ 195.575149][ T8241] EXT4-fs (loop3): Remounting filesystem read-only [ 195.605458][ T8241] EXT4-fs (loop3): 1 orphan inode deleted [ 195.636263][ T8241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.878604][ T4900] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:9: Failed to release dquot type 1 [ 196.400431][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.556249][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.562513][ T8258] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1374'. [ 196.687845][ T8274] netlink: 'syz.4.1379': attribute type 1 has an invalid length. [ 196.781037][ T8289] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1385'. [ 196.854703][ T8296] EXT4-fs: test_dummy_encryption option not supported [ 197.269157][ T8305] EXT4-fs (loop3): 1 orphan inode deleted [ 197.288081][ T8305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.306600][ T8305] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.614475][ T8315] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1392'. [ 197.741509][ T8317] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1392'. [ 197.789902][ T8318] lo speed is unknown, defaulting to 1000 [ 197.953205][ T8327] netlink: 'syz.5.1396': attribute type 1 has an invalid length. [ 197.971591][ T1593] __quota_error: 13 callbacks suppressed [ 197.971610][ T1593] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 197.987589][ T8328] IPv6: Can't replace route, no match found [ 197.994432][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1393'. [ 198.032323][ T28] audit: type=1400 audit(1776073044.216:9710): avc: denied { getopt } for pid=8326 comm="syz.6.1397" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 198.058997][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1396'. [ 198.069748][ T1593] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:7: Failed to release dquot type 1 [ 198.716520][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.884298][ T8342] veth1_to_bond: entered allmulticast mode [ 198.890374][ T28] audit: type=1400 audit(1776073045.066:9711): avc: denied { getopt } for pid=8341 comm="syz.3.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 199.078450][ T8336] set_capacity_and_notify: 4 callbacks suppressed [ 199.078471][ T8336] loop5: detected capacity change from 0 to 1024 [ 199.122595][ T8336] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 199.138242][ T8341] veth1_to_bond: left allmulticast mode [ 199.157572][ T8336] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 199.177514][ T8336] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 199.218989][ T8336] EXT4-fs error (device loop5): ext4_get_journal_inode:5888: inode #5: comm syz.5.1399: unexpected bad inode w/o EXT4_IGET_BAD [ 199.287501][ T8336] loop5: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 199.288069][ T8336] EXT4-fs (loop5): no journal found [ 199.297387][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 199.297408][ C1] EXT4-fs (loop5): initial error at time 1776073045: ext4_get_journal_inode:5888: inode 5 [ 199.297458][ C1] EXT4-fs (loop5): last error at time 1776073045: ext4_get_journal_inode:5888: inode 5 [ 199.306899][ T8350] loop3: detected capacity change from 0 to 128 [ 199.325899][ T8336] EXT4-fs (loop5): can't get journal size [ 199.346093][ T8352] loop6: detected capacity change from 0 to 512 [ 199.349995][ T8336] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 199.373991][ T8352] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 199.403261][ T8350] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.416304][ T8350] ext4 filesystem being mounted at /320/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.418331][ T8352] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1404: bg 0: block 104: invalid block bitmap [ 199.471504][ T8352] loop6: lost filesystem error report for type 5 error -117 [ 199.477415][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 199.491248][ C0] EXT4-fs (loop6): initial error at time 1776073045: ext4_validate_block_bitmap:432 [ 199.500689][ C0] EXT4-fs (loop6): last error at time 1776073045: ext4_validate_block_bitmap:432 [ 199.510376][ T8352] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 199.519938][ T8352] loop6: lost filesystem error report for type 5 error -117 [ 199.531596][ T28] audit: type=1400 audit(1776073045.696:9712): avc: denied { append } for pid=8349 comm="syz.3.1403" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.573705][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.583141][ T8352] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1404: invalid indirect mapped block 1 (level 1) [ 199.617667][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.638472][ T8352] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 199.643741][ T8352] EXT4-fs (loop6): 1 truncate cleaned up [ 199.666434][ T8352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.991373][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1404'. [ 200.008312][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1404'. [ 200.117949][ T28] audit: type=1400 audit(1776073046.306:9713): avc: denied { map } for pid=8351 comm="syz.6.1404" path="pipe:[8177]" dev="pipefs" ino=8177 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 200.163841][ T8380] loop4: detected capacity change from 0 to 1024 [ 200.186452][ T8380] EXT4-fs: test_dummy_encryption option not supported [ 200.327119][ T28] audit: type=1400 audit(1776073046.306:9714): avc: denied { execute } for pid=8351 comm="syz.6.1404" path="pipe:[8177]" dev="pipefs" ino=8177 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 200.502174][ T8384] loop4: detected capacity change from 0 to 512 [ 201.605496][ T8384] EXT4-fs (loop4): 1 orphan inode deleted [ 201.623774][ T8384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.640575][ T8384] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.351718][ T36] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 202.382533][ T36] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:2: Failed to release dquot type 1 [ 202.462135][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.664180][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.709665][ T8406] loop0: detected capacity change from 0 to 1024 [ 202.723751][ T8406] EXT4-fs: test_dummy_encryption option not supported [ 202.764850][ T8402] loop5: detected capacity change from 0 to 8192 [ 203.015099][ T8411] loop0: detected capacity change from 0 to 512 [ 203.082622][ T8411] EXT4-fs (loop0): 1 orphan inode deleted [ 203.097956][ T8411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.114939][ T8411] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.708414][ T1593] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 203.727524][ T8402] loop5: p1 < > p2 p4 < p5 > [ 203.732514][ T1593] EXT4-fs error (device loop0): ext4_release_dquot:7062: comm kworker/u8:7: Failed to release dquot type 1 [ 203.744897][ T8402] loop5: partition table partially beyond EOD, truncated [ 203.796805][ T8402] loop5: p1 start 134217728 is beyond EOD, truncated [ 203.812658][ T8402] loop5: p2 size 591360 extends beyond EOD, truncated [ 203.830564][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 203.845891][ T8402] loop5: p5 size 591360 extends beyond EOD, truncated [ 203.864768][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1420'. [ 203.917508][ T8423] SET target dimension over the limit! [ 203.929135][ T28] audit: type=1400 audit(1776073050.116:9715): avc: denied { name_bind } for pid=8419 comm="syz.4.1420" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 203.988200][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 204.132063][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 204.144782][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 204.158487][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 204.314703][ T4645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.337803][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.499045][ T8444] batadv0: entered promiscuous mode [ 204.510400][ T8444] batadv0: left promiscuous mode [ 204.557315][ T8442] loop3: detected capacity change from 0 to 256 [ 204.655824][ T8447] loop0: detected capacity change from 0 to 136 [ 204.750295][ T8447] Attempt to read inode for relocated directory [ 204.781024][ T8442] vfat: Unknown parameter '' [ 204.867449][ T28] audit: type=1400 audit(1776073051.046:9716): avc: denied { mount } for pid=8437 comm="syz.0.1426" name="/" dev="loop0" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 204.872591][ T4309] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 204.914455][ T8452] loop3: detected capacity change from 0 to 512 [ 204.947960][ T8452] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 204.989188][ T8452] EXT4-fs (loop3): 1 truncate cleaned up [ 204.992957][ T28] audit: type=1400 audit(1776073051.166:9717): avc: denied { kexec_image_load } for pid=8440 comm="syz.3.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 204.999662][ T8452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.035284][ T8454] loop6: detected capacity change from 0 to 2048 [ 205.231156][ T3307] loop6: p3 < > p4 < > [ 205.251999][ T3307] loop6: partition table partially beyond EOD, truncated [ 205.276721][ T3307] loop6: p3 start 4284289 is beyond EOD, truncated [ 205.306108][ T8454] loop6: p3 < > p4 < > [ 205.310464][ T8454] loop6: partition table partially beyond EOD, truncated [ 205.332646][ T8454] loop6: p3 start 4284289 is beyond EOD, truncated [ 205.366849][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 205.412073][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 205.564862][ T28] audit: type=1400 audit(1776073051.746:9718): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 205.848322][ T3001] ================================================================== [ 205.856671][ T3001] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 205.860129][ T8488] loop4: detected capacity change from 0 to 1024 [ 205.865224][ T3001] [ 205.865236][ T3001] write to 0xffff888106d323c8 of 8 bytes by task 3307 on cpu 1: [ 205.865256][ T3001] inode_set_ctime_current+0x5f2/0x960 [ 205.887502][ T3001] simple_unlink+0x2d/0x80 [ 205.892029][ T3001] shmem_unlink+0x12d/0x140 [ 205.896562][ T3001] vfs_unlink+0x1c7/0x490 [ 205.900899][ T3001] filename_unlinkat+0x1e2/0x410 [ 205.905847][ T3001] __se_sys_unlink+0x2b/0xe0 [ 205.910443][ T3001] __x64_sys_unlink+0x1f/0x30 [ 205.915151][ T3001] x64_sys_call+0x2eb6/0x3020 [ 205.920032][ T3001] do_syscall_64+0x12c/0x370 [ 205.924660][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.930589][ T3001] [ 205.933012][ T3001] read to 0xffff888106d323c8 of 8 bytes by task 3001 on cpu 0: [ 205.940663][ T3001] atime_needs_update+0x2ef/0x3e0 [ 205.945843][ T3001] touch_atime+0x4a/0x330 [ 205.950374][ T3001] do_readlinkat+0x137/0x2f0 [ 205.955062][ T3001] __x64_sys_readlink+0x47/0x60 [ 205.960099][ T3001] x64_sys_call+0x2b51/0x3020 [ 205.964984][ T3001] do_syscall_64+0x12c/0x370 [ 205.969728][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.975760][ T3001] [ 205.978226][ T3001] value changed: 0x0000000069dcb95b -> 0x0000000069dcb95c [ 205.985959][ T3001] [ 205.988312][ T3001] Reported by Kernel Concurrency Sanitizer on: [ 205.994483][ T3001] CPU: 0 UID: 0 PID: 3001 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 206.004925][ T3001] Tainted: [W]=WARN [ 206.008797][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 206.018861][ T3001] ================================================================== [ 206.058652][ T8488] EXT4-fs: test_dummy_encryption option not supported [ 206.059459][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.097005][ T28] audit: type=1400 audit(1776073052.266:9719): avc: denied { create } for pid=8485 comm="syz.0.1440" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 206.125492][ T8486] loop0: detected capacity change from 0 to 512 [ 206.132417][ T8486] EXT4-fs: inline encryption not supported [ 206.147620][ T28] audit: type=1400 audit(1776073052.316:9720): avc: denied { mounton } for pid=8485 comm="syz.0.1440" path="/268/file0" dev="tmpfs" ino=1429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 206.284224][ T8486] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 206.295161][ T8486] EXT4-fs (loop0): 1 truncate cleaned up [ 206.301372][ T8486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.314444][ T8486] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.516336][ T8493] loop4: detected capacity change from 0 to 512 [ 206.617895][ T8493] EXT4-fs (loop4): 1 orphan inode deleted [ 206.636802][ T8493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.667026][ T8493] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.287124][ T1723] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 207.297588][ T1723] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:8: Failed to release dquot type 1 [ 207.319603][ T28] audit: type=1400 audit(1776073053.506:9721): avc: denied { unlink } for pid=3317 comm="syz-executor" name="file0" dev="tmpfs" ino=1429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 207.653671][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.