last executing test programs: 7.447022926s ago: executing program 4 (id=316): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000014c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0x8001}, 0x9092, 0x2, 0x43a1bd72, 0x6, 0x9, 0x6, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x5a8cd000) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) syz_usb_connect$uac1(0x2, 0xf4, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x3, 0x1, 0x3, 0x20, 0xee, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x177a, 0x1c}, [@selector_unit={0xb, 0x24, 0x5, 0x2, 0x75, "a0f78bd4ec85"}, @extension_unit={0xb, 0x24, 0x8, 0x3, 0x4, 0xd, "f0e4d7c6"}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x5, 0x2, "56cc820577"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xd, 0x1, 0xff, 0x9}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x70, 0x2, 0x4, 0x7, '7T'}, @as_header={0x7, 0x24, 0x1, 0x5, 0x5, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x39, 0x8, 0x6, {0x7, 0x25, 0x1, 0x0, 0x6, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x100, 0x7, 0x2, "118997"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0x8, 0xf, "aaa0"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7f, 0x3, 0x0, 0x8a, "43b3c1e20424"}, @as_header={0x7, 0x24, 0x1, 0xf, 0x7, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x1, 0x1, 0x55, "6a0608b5f2"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x2, 0x1, 0xe, 0x1, "37c6bc1871304edd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x81, 0x4, 0x4, {0x7, 0x25, 0x1, 0x83, 0x9, 0x7f}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x5, 0xff, 0x1, 0x8, 0x8}, 0xf4, &(0x7f0000000340)={0x5, 0xf, 0xf4, 0x5, [@generic={0xd7, 0x10, 0xb, "c6643a12eb3ccc37cf8f4538469b2890b989668db88311dee37fa5b7f1812b21f714e0c5483e92323455d0d788f977430293d00b255472d74dfac277953fae0fd624fc3e6e4990e8accff64699a83f712b1b2319deed9dbbbc5251b9ed8284db12c45162bd2df73447e15b6edd8b90161c879e8bef1907d567f7f1cfc64a844674a587f1c892809202132dbea4a6142e3dd62101aab863a7ac8afced344e5e513bdf7097857aa7d5af98ee802990a5c1ad29d51096fa99d0c792659b94427ca8bb8f7fac0edbec0bf01116bb6a7610df9a2a2fb9"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x5, 0xfff}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xa, 0x5, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xe, 0x6, 0x2}, @ptm_cap={0x3}]}, 0x6, [{0xc2, &(0x7f0000000680)=@string={0xc2, 0x3, "ee8ff6b3a6ebec7cfdeeb13ac030107f444bb03bd36eb92e46dc740da1e2978176412c9a8991ef895735b57b59f5d88ba1cfa5d176ac0caff471b6b03b62adb29ea21b8726ce4cae41e271b4799386059955ad346c8362eb54286322c93c7843085d119a00d22d42b47135450723a27c541a0cf014a729d4f22b7db27c23546d4eac48dd89c0452171bbf2586eebab858bf838ede1232459687fcc5d525af23409580ef17b290a40a5437c836cf9b55bc2d68bbc25047547797a6ee2e333b859"}}, {0x66, &(0x7f0000000780)=@string={0x66, 0x3, "df217f49a4f73fad64d246207240c8b4e29256ab8f4e11a3e2ec5035ab36edec3b479bd6a936b036c8a75eda6179a2b166509a448297f86b1225ceac59b635e094d4ba74209bf4d330f9199a9893a0fd848737c9179992d0236a9a189400a2fb3021b90f"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x5403}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x63, &(0x7f0000000800)=@string={0x63, 0x3, "feac96090b8898487c2c4046f673a949db2e5ca4eeb486d0bf1fc5f15930850730ba4dc21531cca07d875cb9f2a1c571ba4c60a56a0bf781b58bbf30087eb9e22a63f030ed53167264dbd84da8c3bcfcadbfd76300a39f32be2d7745aa27d82e0a"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x430}}]}) 4.586838027s ago: executing program 3 (id=340): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000001080)={0x2, 0x80, 0x2b, 0x5, 0x0, 0x0, 0x0, 0x4, 0x1d9a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x59, 0x0, 0x1, 0x4, 0x20005, 0x0, 0x0, 0x5, 0x0, 0x2000000020000006}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x292ca90c, 0xffffffffffffb2eb}, 0x119b10, 0x1, 0xe, 0x4, 0x8, 0x6, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000000000)='V', 0x1}], 0x1, 0x0) fcntl$setpipe(r4, 0x407, 0x5) ftruncate(r3, 0x51a9497) waitid(0x2, 0x0, &(0x7f0000001280), 0x8, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000600)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc008e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29103"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r5, 0xee01, 0xee00) keyctl$read(0xb, r5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair(0x22, 0x2, 0x22, &(0x7f00000006c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r6, &(0x7f0000000040)=""/4109, 0x100d) ioctl$HIDIOCGREPORTINFO(r6, 0xc00c4809, &(0x7f00000000c0)={0x1, 0xffffffff, 0x7}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x400) 4.155044435s ago: executing program 3 (id=345): sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000002b80)={&(0x7f00000007c0)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000002b40)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x10080) 3.997986269s ago: executing program 3 (id=350): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@noload}]}, 0x7, 0x7bf, &(0x7f0000000d00)="$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") r0 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6ef5c98000282901fec0ffff000000000000ffffe0000001fe8000000000000000000000000000aa"], 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) io_setup(0x81, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000001140)=ANY=[], 0x361, 0x0) listxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x50) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0xfffd, 0x0) 3.725196373s ago: executing program 1 (id=355): capset(&(0x7f0000000380)={0x20071026}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7, 0xb}) r0 = getpid() capget(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000080)={0x9, 0x3ff, 0x9, 0x101, 0xd9, 0x7}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f00000000c0)={[{@nogrpid}, {@barrier_val={'barrier', 0x3d, 0xed58}}, {@orlov}, {@oldalloc}, {@data_err_ignore}, {@debug}, {@noauto_da_alloc}]}, 0x4, 0x501, &(0x7f0000000f40)="$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") rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d5a000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) 3.486310684s ago: executing program 1 (id=356): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/40, 0x28}, {&(0x7f0000000280)=""/108, 0x6c}], 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, r4, 0x8f5, 0x0) (fail_nth: 1) write$cgroup_devices(r4, 0x0, 0x8) write(r2, 0x0, 0x0) 3.485657164s ago: executing program 3 (id=357): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x47a, &(0x7f0000000180)="$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") chdir(&(0x7f0000000400)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r3, &(0x7f0000000000)=""/199, 0xc7) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x1004014, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f0000000840)={{r4, &(0x7f0000000080)='GPL\x00', 0x8a201, &(0x7f00000000c0)={@align=0x100, {0x9000, 0x7fff, 0x8637}}, 0x1, &(0x7f0000000140), &(0x7f00000001c0)=0x8001}, 0x5, &(0x7f0000000780)=[{0x3, 0x1e28, &(0x7f0000000200)='.,)r)@+\x00', &(0x7f0000000240)="d06104ff50a9ee8734094852d8d985519f64875a67daafbabf787ca5ef31f666ba797c181791f488b5bfdaf268bb5f10dd1b58353848c2f7f558ed320d924f9fd3e58ffd7ea70d975b5da87bf6cdc45f2c09c3b5ddd2119563168cc3ee87b8f8bb", 0x61, 0x48}, {0x2, 0xfffffe01, &(0x7f00000002c0)='veth1_to_hsr\x00', &(0x7f0000000300)="7d604136eeabe0ae51e29683758939d45f7d31111d430fc2e7b040f201e185e9d411dc376676ebdf6d426750d1c6f7c3e000287397958093348d7158c2772e9272c3a7096230ae625e5c37", 0x4b}, {0x2, 0x74, &(0x7f0000000380)='veth1_to_hsr\x00', &(0x7f00000004c0)="d21f642f46cb3af5f0110c7c0b7dd8d5963462de2a5d8b0e4eadbb755b3883c5479642361cda894da41198e7f1f48af6f234fec0c41ef3e6eb7138e1e264bc0665d81d523a84a7414e6595a464f81b3aaf70a7d22761a73c455750f0a0745b4b32cccd89bf28b88f7d1f68ce27d21e6f1d8feb3ae57fabce11d31eb19efd77c5143050d5239d8589227b6d8fa590e92db40edb53498f14c42592f5d8bfcfa245d6dee2bdaf9f63f6ec6d2b5de92aa9803cc5d3c93f10aa4a804cd514d70f3a2cf200b53c53900039e8db8c7ab61b1da6d194a823c39d8e08a3737a772ecee350c5032ba5be4f8f5c9e304d4beb3f1e209f15e0fb9d", 0xf5, 0x18}, {0x0, 0x80000000, &(0x7f00000003c0)='GPL\x00', &(0x7f00000005c0)="319ba6c7de1c9d67d22556e91c0fd09577eba0d38fb3d4fa62cc853f2cc870d7139f25aada53b901b45454fdd67441404a1c56bc6cf11c302b79da8088ad5645a5422279600b0336c8092820a4b387196e22b206830d12235002d033f0ac144cce1c692318478f919a181f96a9d605e50435b66aaa869bb6e1afce627d0d39d307bf17ed09d527c2010de48a561c49650866d2a440d2ba0408", 0x99, 0x18}, {0x0, 0xf, &(0x7f0000000400)='\x00', &(0x7f0000000680)="a7e8cd799c8099c4efc5ae9e101931aa69bf1b611c7f10ba87cca57e8fef814f9f9dbd778b42b7e6f6ce9a90f032f3806c1c7521328b2f6b54373fc54d2f398bb5ecfa03ce085d86e0b073ed1bb07bb6847bd8bb5403debd04c32b8360a25b6eae80d3b8276b8fe35fbacc9d21324f4132986d825c1c3262b7b2590ebaa770c9aea11e1d336888abe985068816623a776187a8a6d73d2bb91a359cb03160ef045715e4ad6a9e319eaf8ca94ce5981216b2ab59342219df3f2ab77e9acb90dcf76ab42b6ea58e9ccc2006435f71f5d96c98353f4359cf0350737a2fba1565a0b8d779", 0xe2, 0x8}]}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=r8, @ANYRES64=r4, @ANYRES16=r2, @ANYRESOCT=r0, @ANYRES8=r2, @ANYRES32, @ANYRES64=r1, @ANYRES32=r2, @ANYRES64=0x0], 0x80}}, 0x8000) 2.520344759s ago: executing program 1 (id=359): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/40, 0x28}, {&(0x7f0000000280)=""/108, 0x6c}], 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, r4, 0x8f5, 0x0) write$cgroup_devices(r4, 0x0, 0x8) write(r2, 0x0, 0x0) 2.519470559s ago: executing program 4 (id=360): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000040)=""/35, 0x5d}, {&(0x7f0000000180)=""/114, 0x6c}], 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r6 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000140)={0x60000017}) openat$tun(0xffffffffffffff9c, 0x0, 0x20, 0x0) unshare(0x20040600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x9, 0x69, 0x26, @mcast1, @local, 0x7800, 0x7800, 0xfff, 0x4}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r11, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) write(r1, &(0x7f0000000240)="94", 0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f00000004c0)={0x1, 0x6, 0x6}) tee(r0, r4, 0x8f5, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0x2}) ioctl$TUNSETTXFILTER(r12, 0x400454d1, &(0x7f00000001c0)={0x0, 0x5, [@remote, @empty, @remote, @local, @local]}) write$cgroup_devices(r4, 0x0, 0x8) write(r2, 0x0, 0x0) 2.228155795s ago: executing program 3 (id=363): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_deladdrlabel={0x2c, 0x49, 0x1, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x70000}, [@IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x11) r2 = socket(0x400000000010, 0x3, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r2, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c040007031a000900", 0x33a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000300)) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000001300)=0xffff0002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r6, 0x0, 0x1a, &(0x7f0000000000)=""/3, &(0x7f0000000080)=0x3) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x46f, &(0x7f0000000580)="$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") sched_setscheduler(r1, 0x0, &(0x7f0000000000)=0xd69) r7 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$selinux_create(r7, 0x0, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)="442ca8", 0x3}, 0x1, 0x0, 0x0, 0x100}, 0x4008010) 2.060190379s ago: executing program 2 (id=366): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x40030000000000) 2.059960059s ago: executing program 2 (id=367): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x8000, 0x1800, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x8000, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) fallocate(r2, 0x20, 0x0, 0x8000) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000500)={0x2001}) 2.022624372s ago: executing program 2 (id=368): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet(r0, 0x0, 0x0, 0x20020084, 0x0, 0x0) 1.967036427s ago: executing program 2 (id=369): unshare(0x20000400) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x8, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d6, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x9c, r6, 0x8, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x4051) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) process_mrelease(0xffffffffffffffff, 0x0) flock(r7, 0xc) r8 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) fcntl$getownex(r5, 0x10, &(0x7f0000000680)={0x0, 0x0}) sendmsg$nl_generic(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000004dc0)={0x2260, 0x34, 0x20, 0x70bd29, 0x5, {0x13}, [@nested={0x1232, 0x8f, 0x0, 0x1, [@nested={0x4, 0x55}, @typed={0x8, 0x103, 0x0, 0x0, @fd}, @generic="8ff980596177dc99211d9aebf5de8ada6e99139089b111b84719ce59fc2995e7f6846f9297cc01f0197cb29d0720b82270be72dc372722ddd2475bc282d1c4117bd6c20d778d5aae95a3c0740d27772a45dec9cc22b74c436ea2202b18125a3d8dd51b2e83284b0e7c07783416476e4c97a5fd688dee390775832e600def56c35cb8322e2f0f8b54aa780f4b5306a8775c4c998bbf5206cd7fe60a7c25c0fa177aff5992ff460611ffee68469b43dbed6d", @typed={0x14, 0x68, 0x0, 0x0, @ipv6=@private0}, @generic="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", @generic="c517bce79a", @nested={0x141, 0x42, 0x0, 0x1, [@generic="f32c8e38390863efd38222e6c584f658c3a72463aa366d6b08ad2026f13bec46b1e8c5bbe6c7dda8a9436fc976f989e55dafe8854e47be", @generic="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", @typed={0x8, 0x7, 0x0, 0x0, @pid=r9}]}, @typed={0x14, 0x39, 0x0, 0x0, @ipv6=@empty}]}, @nested={0x1004, 0x153, 0x0, 0x1, [@generic="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"]}, @typed={0x14, 0xfb, 0x0, 0x0, @ipv6=@private1}]}, 0x2260}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) shmat(r8, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x31, 0xffffffffffffffff, 0x2000) 1.805435171s ago: executing program 2 (id=370): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040)) syslog(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x2004d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0xa}, 0x4, 0x6, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x7, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r3, &(0x7f00000006c0), 0x0}, 0x20) 1.728020788s ago: executing program 3 (id=371): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000014c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0x8001}, 0x9092, 0x2, 0x43a1bd72, 0x6, 0x9, 0x6, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x5a8cd000) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) syz_usb_connect$uac1(0x2, 0xf6, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x3, 0x20, 0xee, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x177a, 0x1c}, [@selector_unit={0xb, 0x24, 0x5, 0x2, 0x75, "a0f78bd4ec85"}, @extension_unit={0xb, 0x24, 0x8, 0x3, 0x4, 0xd, "f0e4d7c6"}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x5, 0x2, "56cc820577"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xd, 0x1, 0xff, 0x9, "", "69e3"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x70, 0x2, 0x4, 0x7, '7T'}, @as_header={0x7, 0x24, 0x1, 0x5, 0x5, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x39, 0x8, 0x6, {0x7, 0x25, 0x1, 0x0, 0x6, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x100, 0x7, 0x2, "118997"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0x8, 0xf, "aaa0"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7f, 0x3, 0x0, 0x8a, "43b3c1e20424"}, @as_header={0x7, 0x24, 0x1, 0xf, 0x7, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x1, 0x1, 0x55, "6a0608b5f2"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x2, 0x1, 0xe, 0x1, "37c6bc1871304edd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x81, 0x4, 0x4, {0x7, 0x25, 0x1, 0x83, 0x9, 0x7f}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x5, 0xff, 0x1, 0x8, 0x8}, 0xf4, &(0x7f0000000340)={0x5, 0xf, 0xf4, 0x5, [@generic={0xd7, 0x10, 0xb, "c6643a12eb3ccc37cf8f4538469b2890b989668db88311dee37fa5b7f1812b21f714e0c5483e92323455d0d788f977430293d00b255472d74dfac277953fae0fd624fc3e6e4990e8accff64699a83f712b1b2319deed9dbbbc5251b9ed8284db12c45162bd2df73447e15b6edd8b90161c879e8bef1907d567f7f1cfc64a844674a587f1c892809202132dbea4a6142e3dd62101aab863a7ac8afced344e5e513bdf7097857aa7d5af98ee802990a5c1ad29d51096fa99d0c792659b94427ca8bb8f7fac0edbec0bf01116bb6a7610df9a2a2fb9"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x5, 0xfff}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xa, 0x5, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xe, 0x6, 0x2}, @ptm_cap={0x3}]}, 0x6, [{0xc2, &(0x7f0000000680)=@string={0xc2, 0x3, "ee8ff6b3a6ebec7cfdeeb13ac030107f444bb03bd36eb92e46dc740da1e2978176412c9a8991ef895735b57b59f5d88ba1cfa5d176ac0caff471b6b03b62adb29ea21b8726ce4cae41e271b4799386059955ad346c8362eb54286322c93c7843085d119a00d22d42b47135450723a27c541a0cf014a729d4f22b7db27c23546d4eac48dd89c0452171bbf2586eebab858bf838ede1232459687fcc5d525af23409580ef17b290a40a5437c836cf9b55bc2d68bbc25047547797a6ee2e333b859"}}, {0x66, &(0x7f0000000780)=@string={0x66, 0x3, "df217f49a4f73fad64d246207240c8b4e29256ab8f4e11a3e2ec5035ab36edec3b479bd6a936b036c8a75eda6179a2b166509a448297f86b1225ceac59b635e094d4ba74209bf4d330f9199a9893a0fd848737c9179992d0236a9a189400a2fb3021b90f"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x5403}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x63, &(0x7f0000000800)=@string={0x63, 0x3, "feac96090b8898487c2c4046f673a949db2e5ca4eeb486d0bf1fc5f15930850730ba4dc21531cca07d875cb9f2a1c571ba4c60a56a0bf781b58bbf30087eb9e22a63f030ed53167264dbd84da8c3bcfcadbfd76300a39f32be2d7745aa27d82e0a"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x430}}]}) 1.679879462s ago: executing program 1 (id=372): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@noload}]}, 0x7, 0x7bf, &(0x7f0000000d00)="$eJzs3c9rXNUeAPDvnfxq077XPHi8175Ns3qvUDp57ctrFQRTXIhioaBr2zCZhphJpmQmpYlZWEQQRNTiQtGNa3/UnVvRjRv/Bjci0lI1LVZcyMidH8mkSSZpfkzS5vOB255z77lzznfuvefczD3MBLBn9af/ZCKORMTbScSh+vokIrqqqc6IoVq5e/NzuXRJolJ5/uekWubu/FwumvZJHahnDkfEV69FHM8sr7c0Mzs+XCjkp+r5gfLE5YHSzOyJsYnh0fxofvL0ycHBU2f+f+b01sX667ezB2+98/R/Phv6/dV/3njz6ySG4mB9W3Mcm/LsN/FyPdkf/fX3pCt9C5d4aksq2z2SnW4AG5Jemh21qzyOxKHoqKYAgEdZOv5XAIA9JjH+A8Ae0/gc4O78XK6x7OwnEu11+2xEktTibzzfrG3prD+z21d9Dtp7N4nO+hPR2MLnXf0R8eEXL36SLrGVzyEB1vDKtYi42Ne/vP9PoneTr/3fdZTpvy+v/4P2+fJsRDy20v1fZuH+Jxbufxb1rHDtbkR/RHdzfvn1n7m54o5PbkHl9fu/J2pz29JAm+7/Fiat9XXUc39JM0cjYqyQT/u2v0bEsejquTRWyJ9sUcexO3/cWW1b8/3fL9df+jitP/1/sUTmZmfP0n1GhsvDm4m52e1rEf/qXJzbd6+p/28c/2TZ8f9HdWg43+qFjy4mn3n89Q9WK5bGn8bbWJbHv70qH0X8O1aOvyFpOT9xoHGi1E6KFXz+/XurDqXNxz9d0vobfwu0Q3r8e1vH35c0z9csbW39a8e/8vnfnbxQTTc6j6vD5fLUyYju5Lnl608t7tvIN8qn8dcivT/+TIvzvzY39uI6Y+y89dOnG49/wbZMsUzjH3mg4//giRv3xjs2Hn96/AerqWP1Nevp/wr57lhPAzfz3gEAAAAAAAAAAAAAAAAAAAAAAADAemUi4mAkmexCOpPJZmu/4f336M0UiqXy8UvF6cmRqP5Wdl90ZS7Vv/+08R2Lje8/7attT9L8qfvy/4uIv0XEuz37q/lsrlgY2eHYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDhwCq//5/6safFjklnu5oIAGyHfWuWuJNfkq1UKpVtbA8AsP3WHv+Xe/+tbWgIANA2Lcb//e1sBwDQPhv5+x8AeLgZ/wFg7zH+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsM3OnzuXLpXf5udyaX7kysz0ePHKiZF8aTw7MZ3L5opTl7OjxeJoIZ/NFSfWer1CsXh5MCanrw6U86XyQGlm9sJEcXqyfGFsYng0fyHf1ZaoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODBlGZmx4cLhfzUI5F4IyKWrqnsjoZtPpHErmjGFieSdRX+4cR3h1uVub7GaTy0CyJ96BI73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBz+DAAA//9LViSU") r0 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6ef5c98000282901fec0ffff000000000000ffffe0000001fe8000000000000000000000000000aa"], 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) io_setup(0x81, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000001140)=ANY=[], 0x361, 0x0) listxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x50) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0xfffd, 0x0) 1.634163356s ago: executing program 4 (id=373): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040)) syslog(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x2004d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000000000), 0x0, 0x4044805) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0xa}, 0x4, 0x6, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r1, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x100) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000007000800000040000000000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r3, &(0x7f00000006c0), 0x0}, 0x20) 1.444405873s ago: executing program 0 (id=374): epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/132, 0x84}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x2, &(0x7f0000002340)=""/4096, 0x1000}, 0xf}, {{&(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/29, 0x1d}, {&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f0000000340)=""/237, 0xed}], 0x3, &(0x7f0000000480)=""/14, 0xe}, 0x4}], 0x2, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x5, 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, &(0x7f0000004cc0)={0x2, 0xe}, 0x0) (async) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, &(0x7f0000004cc0)={0x2, 0xe}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000000c0)={{0x2, 0x3}, 0x1, 0x3ff, 0x5, {0x9, 0x4}, 0x5, 0x2551dcef}) socket$l2tp(0x2, 0x2, 0x73) (async) socket$l2tp(0x2, 0x2, 0x73) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syncfs(r5) syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.000318802s ago: executing program 4 (id=375): r0 = syz_io_uring_setup(0x49b, &(0x7f0000000f40)={0x0, 0xb27c, 0x1, 0x2, 0x3}, &(0x7f00000001c0), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, 0x0, 0x1) 658.275232ms ago: executing program 0 (id=376): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, 0x0, 0x10080) 587.795108ms ago: executing program 0 (id=377): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtfilter={0x2c, 0x2c, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xb, 0xa}, {0x5, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x9ed5}]}, 0x2c}}, 0x4010) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, &(0x7f0000000280)="a5734828637e96746fb233f3bfdb3f266ac970f4b8c4c19f3dea9855e36339300a602e2e95c928d233074135f0556a68d9a56d44a445c32f254a15b6e15b828ee1fc84ad55cde18ba38f0ef1a1f9999a46fde0af27a98fe99e03c20ecac2d70adf5e8010283c3ee60257967c446c0335423d52952ab962c02fab42a69fdebf88ce9a04ebcca4f77f12250df2fc576c8214564472ff575687afc8984563a7ebd8151daaae3d2a28d9d4381fea33702a63331716cbb6f6129a2757731aa41aad45e45c9215998b1adb49d91ea977dfc438d761a0eacaf53ee96f44a2eb812e551b5f74f1560705753c5c6a", 0xea, 0x4000020, &(0x7f0000000080)={0x11, 0x8, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14) 473.801219ms ago: executing program 0 (id=378): r0 = socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x70}, 0x1, 0x7}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8a}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x11) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500000000", @ANYRES64=0x0], 0x10) (async) flock(0xffffffffffffffff, 0x1) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x8) (async) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) mount$tmpfs(0x0, 0x0, 0x0, 0xc00, 0x0) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES32=r5], 0x70}}, 0x0) (async) r7 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000000)={0x7, 0x9, 0x7, 0xffff}, 0x10) (async) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 340.35371ms ago: executing program 0 (id=379): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet(r0, 0x0, 0x0, 0x20020084, 0x0, 0x0) 255.300807ms ago: executing program 2 (id=380): unshare(0x2e000200) r0 = semget$private(0x0, 0x4000, 0x0) semop(r0, &(0x7f0000000000)=[{0x3, 0x4, 0x1000}, {0x0, 0x4, 0x1000}, {0x0, 0x1, 0x1000}], 0x3) (fail_nth: 4) 225.40087ms ago: executing program 1 (id=381): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 172.269125ms ago: executing program 0 (id=382): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) unshare(0x64000600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) linkat(r2, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400) syz_usb_connect$cdc_ncm(0x6, 0x6e, 0x0, 0x0) r3 = gettid() syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r3, @ANYBLOB="140003002e"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 127.925099ms ago: executing program 4 (id=383): unshare(0x2e000200) r0 = semget$private(0x0, 0x4000, 0x0) semop(r0, &(0x7f0000000000)=[{0x1f4, 0x4, 0x1000}, {0x0, 0x4, 0x1000}, {0x0, 0x1, 0x1000}], 0x3) 50.408975ms ago: executing program 1 (id=384): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x5, 0x0, {r1}}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000004c0)={r1, &(0x7f0000002540)="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"}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x3c, 0x93, &(0x7f0000000180)="be86fba27177c71efdd0a2d42ff37eef0db95244c92784e2d73286d47e376bd206ae52324c608f7fdb664b7cd9bea0b6c72b0b4a0da88499b32a674a", &(0x7f0000000380)=""/147, 0x9, 0x0, 0x41, 0x0, &(0x7f00000001c0)="2849e75e95f86fe6c7db8326d1e44cc01357b974a5dbc655f7d7d75467e05eedc3c71ef2caae9aa115af0f25a75c794c024d5cc09f84d73d0eb900fa3b84b4ef48", &(0x7f00000004c0), 0x2, 0x0, 0x6}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e60803dc", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x2000000, 0x5, 0x9, 0x0, 0x10, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=385): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x3, 0x0, 'queue1\x00', 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001240)=@filter={'filter\x00', 0x42, 0x4, 0xab8, 0xffffffff, 0x0, 0x8d0, 0x0, 0xffffffff, 0xffffffff, 0xa20, 0xa20, 0xa20, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11, 0x0, 0xd}, 0x0, 0x8a0, 0x8d0, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0x7, [0x4e22, 0x4e22, 0x4e20, 0x4e22, 0x4e22, 0x4e20, 0x4e21, 0x4e22, 0x4e24, 0x4e23, 0x4e23, 0x4e20, 0x4e22, 0x4e23, 0x4e20], [0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0xfe, 0x1, 0x0, 0x0, 0x1], 0x1}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x51b, 0x1}, {0x1f, 0x2}, {0x8, 0x2}, {0x6, 0x1}, {0x8, 0x1}, {0x1000}, {0x90000, 0x25cf1f7a3184b655}, {0x40, 0x2}, {0xffffff46, 0x1}, {0x7f, 0x3}, {0x7, 0x1}], [{0x2, 0xd7be}, {0x80000001, 0xd9}, {0xb6a, 0x7f0}, {0xc183, 0x6}, {0x2, 0x6}, {0x7be, 0x1e1f}, {0x1, 0x2}, {0x3, 0x7b400000}, {0xa, 0x603}, {0x4, 0x4}, {0xf, 0x7f}], 0x4, 0x4}, {[{0x4, 0x1}, {0x9, 0x2}, {0x8}, {0x41, 0x1}, {0x7, 0x1}, {0x5cb09da2}, {0x4, 0x2}, {0x4, 0x1}, {0x400, 0x1}, {0x1, 0x3}, {0x1, 0x2}], [{0x80, 0x5}, {0x54fac28f, 0x2}, {0x5, 0x9}, {0x9, 0x2}, {0xc8, 0x6}, {0x42e}, {0x5, 0x2}, {0x7f, 0x2}, {0x4, 0xfffffeff}, {0x7, 0x7fffffff}, {0xbc, 0x9}], 0x2}, {[{0x4cafb3c1, 0x3}, {0x81, 0x3}, {0x7fffffff, 0x7c4c0ccab317f044}, {0x7, 0x1}, {0xa41, 0x1}, {0x7, 0xfa67f1f5208fe48d}, {0x400}, {0xfce, 0x3}, {0x7, 0x2}, {0x6, 0x2}, {0x4, 0x1}], [{0x5, 0x8621}, {0x9, 0x1}, {0xad, 0x3}, {0x5, 0xfffffff7}, {0x9, 0x6}, {0xd7a, 0x2}, {0xe, 0xd}, {0xf, 0x3}, {0xe, 0x5}, {0x3, 0x4}, {0x3, 0x4}], 0x2}, {[{}, {0x8, 0x3}, {0x0, 0x3}, {0x0, 0x1}, {0x2, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x7fffffff}, {0xffff}, {0xf4, 0x2}, {0x200, 0x2}], [{0x8, 0x81}, {0x2, 0x56b5}, {0x87b3, 0x8}, {0x4, 0xed0a}, {0x9, 0x9}, {0x0, 0x81d0}, {0x80000001, 0x5}, {0x9, 0xfffffff1}, {0x1, 0x6}, {0x0, 0x8}, {0x9, 0x6}], 0x0, 0x1}, {[{0xd}, {0x0, 0x1}, {0x8, 0x2}, {0x0, 0x3}, {0x9}, {0x2}, {0x1}, {0xa}, {0x7, 0x1}, {0xab, 0x2}, {0x2adf}], [{0xd1fb, 0xd}, {0xa, 0x500}, {0xff800000, 0x1000}, {0xfffffffe}, {0x7, 0x3}, {0x5, 0x10000}, {0x5, 0xe}, {0x2, 0x7ff}, {0x8, 0x6}, {0xac5d, 0x9}, {0x1f, 0x7}], 0xb, 0x5}, {[{0x7, 0x2}, {0x6, 0x3}, {0x100000, 0x3}, {0x2}, {0x7, 0x2}, {0x10}, {0xfde, 0x1}, {0x1ff}, {0x92a0, 0x3}, {0x8001}, {0x7}], [{0x4, 0x58}, {0x40, 0x1ff}, {0x9, 0x1}, {0xedb4}, {0x1, 0x7}, {0x400, 0x3}, {0x4e, 0x6}, {0x7, 0x6}, {0x6, 0x261a}, {0x91bc, 0x36}, {0x5, 0xd}], 0x2, 0xa}, {[{0x5c, 0x3}, {0x6, 0x3}, {0x7}, {0xfffffff8, 0x1}, {0x1, 0x2}, {0x92e, 0x3}, {0x8, 0x2}, {0x10000}, {0x80000001, 0x3}, {0xfffff15c, 0x2}, {0x1, 0x2}], [{0x3e, 0x1}, {0xff, 0x6b}, {0x8000, 0x7}, {0x9, 0x97f}, {0x0, 0x5}, {0x8, 0x2}, {0x7fffffff, 0x76}, {0x9, 0x90d}, {0x7, 0x7}, {0x1, 0xfffffff4}, {0x8001, 0x10}], 0xa}, {[{0xe, 0x1}, {0x401, 0x3}, {0xf30, 0x3}, {0x7f, 0x2}, {0x3, 0x2}, {0xa, 0x2}, {0x843a, 0x3}, {0x5, 0x3}, {0x2}, {0x1, 0x3}, {0x40, 0x3}], [{0x2, 0x8}, {0xff, 0x9}, {0x3, 0x1}, {0x9, 0x81}, {0x1, 0x5}, {0xa, 0x4}, {0x7, 0x5}, {0x380000, 0x3ff}, {0x41, 0x81}, {0x8, 0x40}, {0x2, 0x2}], 0x5, 0xb}, {[{0x3, 0x2}, {0xfffffff9, 0x2}, {0x8, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x8, 0x3}, {0x38, 0x1}, {0x1, 0x1}, {0x62, 0x3}, {0x7, 0x2}, {0x3, 0x3}], [{0x6, 0x40}, {0x105b, 0x2}, {0x80000000, 0x9}, {0x4c, 0x2e98}, {0xf008, 0xd}, {0x3}, {0x7, 0x6}, {0x6326, 0x90e}, {0x4, 0x8}, {0x4, 0x3}, {0x2, 0xc778}], 0x7, 0x6}, {[{0x1, 0x3}, {0x1, 0x2}, {0x8000, 0x2}, {0x691}, {0x2, 0x2}, {0x3}, {0x9, 0x1}, {0xf7a, 0x2}, {0x5, 0x2}, {0x5, 0x1}, {0x5}], [{0x100, 0x7fff}, {0x369e, 0x2}, {0x4, 0x6}, {0x2f, 0x9}, {0x7ff, 0x7}, {0xfc, 0x3}, {0xfffffffb, 0x1ff}, {0x80, 0x2}, {0x1, 0x6}, {0xa00, 0x3}, {0x2, 0x4}], 0x6, 0x2}, {[{}, {0x9, 0x2}, {0x6, 0x3}, {0x1, 0x3}, {0x4}, {0x9}, {0x7, 0x3}, {0xb, 0x1}, {0x8}, {0xc80, 0x1}, {0x9}], [{0x4, 0x9}, {0x4, 0x5}, {0xe, 0x80000000}, {0x3, 0x4}, {0x9, 0x777bfd04}, {0x4, 0xffff}, {0x0, 0xa8c}, {0x101, 0x9}, {0x10001, 0x7}, {0x4, 0x80000001}, {0x8, 0x4}], 0x5, 0xb}], 0x9, 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x6, 0x5, 0x5, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010101, 0x0, 0x0, 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'macsec0\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xb18) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xbf, {}, {}, @raw32}], 0xffc8) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17], 0x0, [0x5, 0x4, 0x19, 0x0, 0x8, 0x0, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x17, @time={0xbf, 0x316575}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r6, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x4e23, @loopback}}) kernel console output (not intermixed with test programs): reservation details [ 31.751671][ T3537] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 31.762252][ T3537] syz.4.15: attempt to access beyond end of device [ 31.762252][ T3537] loop4: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 31.780058][ T3541] x_tables: duplicate underflow at hook 1 [ 31.811475][ T3537] syz.4.15: attempt to access beyond end of device [ 31.811475][ T3537] loop4: rw=8390657, sector=200, nr_sectors = 2 limit=128 [ 31.817628][ T3543] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 31.865212][ T3537] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 31.874845][ T3537] syz.4.15: attempt to access beyond end of device [ 31.874845][ T3537] loop4: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 31.890599][ T3537] syz.4.15: attempt to access beyond end of device [ 31.890599][ T3537] loop4: rw=8390657, sector=224, nr_sectors = 2 limit=128 [ 31.905026][ T3537] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 31.914200][ T3537] syz.4.15: attempt to access beyond end of device [ 31.914200][ T3537] loop4: rw=2049, sector=226, nr_sectors = 8 limit=128 [ 31.953253][ T3537] Buffer I/O error on dev loop4, logical block 116, lost async page write [ 32.024398][ T3548] EXT4-fs: Ignoring removed nobh option [ 32.113064][ T3550] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 32.172254][ T3548] EXT4-fs (loop2): 1 orphan inode deleted [ 32.184289][ T3548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.257601][ T3548] can0: slcan on ttyS3. [ 32.362428][ T3548] can0 (unregistered): slcan off ttyS3. [ 32.446602][ T3537] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 32.511423][ T3552] netlink: 'syz.3.18': attribute type 1 has an invalid length. [ 32.526013][ T3537] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 32.558515][ T3537] Buffer I/O error on dev loop4, logical block 120, lost async page write [ 32.569212][ T3537] Buffer I/O error on dev loop4, logical block 124, lost async page write [ 32.579228][ T3537] Buffer I/O error on dev loop4, logical block 104, lost async page write [ 32.648700][ T3556] C: renamed from team_slave_0 (while UP) [ 32.677789][ T3556] netlink: 'syz.3.20': attribute type 4 has an invalid length. [ 32.705417][ T3556] netlink: 116 bytes leftover after parsing attributes in process `syz.3.20'. [ 32.723771][ T3545] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.17: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 32.741894][ T3556] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 32.787062][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.818434][ T3556] netlink: 32 bytes leftover after parsing attributes in process `syz.3.20'. [ 32.843450][ T3561] sock: sock_timestamping_bind_phc: sock not bind to device [ 32.847046][ T3562] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 34.060115][ T3567] set_capacity_and_notify: 5 callbacks suppressed [ 34.060133][ T3567] loop3: detected capacity change from 0 to 512 [ 34.073540][ T3567] EXT4-fs: Ignoring removed nobh option [ 34.073566][ T3568] loop4: detected capacity change from 0 to 512 [ 34.086239][ T3568] EXT4-fs: Ignoring removed nobh option [ 34.099932][ T3567] EXT4-fs (loop3): 1 orphan inode deleted [ 34.106540][ T3567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.119987][ T3568] EXT4-fs (loop4): 1 orphan inode deleted [ 34.126343][ T3568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.129745][ T3567] can0: slcan on ttyS3. [ 34.191558][ T3568] can0 (unregistered): slcan off ttyS3. [ 34.224484][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 34.224498][ T28] audit: type=1400 audit(1771900583.682:147): avc: denied { tracepoint } for pid=3577 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.290166][ T28] audit: type=1400 audit(1771900583.742:148): avc: denied { create } for pid=3579 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.339594][ T3566] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.24: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 34.358357][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.389992][ T28] audit: type=1400 audit(1771900583.802:149): avc: denied { write } for pid=3579 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.425302][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.484529][ T3586] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.28'. [ 34.500323][ T3586] netlink: zone id is out of range [ 34.556685][ T3589] loop3: detected capacity change from 0 to 8192 [ 34.563129][ T3586] netlink: zone id is out of range [ 34.568461][ T3586] netlink: zone id is out of range [ 34.599874][ T3580] loop1: detected capacity change from 0 to 8192 [ 34.606419][ T3591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.628065][ T3591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.630934][ T3586] netlink: zone id is out of range [ 34.641380][ T3303] loop3: p1 < > p2 p4 < p5 > [ 34.646147][ T3303] loop3: partition table partially beyond EOD, truncated [ 34.660701][ T3303] loop3: p1 start 134217728 is beyond EOD, truncated [ 34.672071][ T3580] loop1: p1 < > p2 p4 < p5 > [ 34.676955][ T3580] loop1: partition table partially beyond EOD, truncated [ 34.700912][ T3303] loop3: p2 size 591360 extends beyond EOD, truncated [ 34.710116][ T3580] loop1: p1 start 134217728 is beyond EOD, truncated [ 34.717842][ T3586] netlink: set zone limit has 8 unknown bytes [ 34.729184][ T3580] loop1: p2 size 591360 extends beyond EOD, truncated [ 34.742103][ T3303] loop3: p5 size 591360 extends beyond EOD, truncated [ 34.754240][ T3580] loop1: p5 size 591360 extends beyond EOD, truncated [ 34.807273][ T3589] loop3: p1 < > p2 p4 < p5 > [ 34.835001][ T3589] loop3: partition table partially beyond EOD, truncated [ 34.871262][ T3589] loop3: p1 start 134217728 is beyond EOD, truncated [ 34.970870][ T3589] loop3: p2 size 591360 extends beyond EOD, truncated [ 34.980196][ T3590] loop4: detected capacity change from 0 to 512 [ 35.012948][ T3589] loop3: p5 size 591360 extends beyond EOD, truncated [ 35.025051][ T28] audit: type=1400 audit(1771900584.462:150): avc: denied { name_bind } for pid=3585 comm="syz.4.28" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 35.202697][ T3598] netlink: 'syz.4.30': attribute type 1 has an invalid length. [ 35.465542][ T3600] loop4: detected capacity change from 0 to 256 [ 35.491989][ T28] audit: type=1400 audit(1771900584.952:151): avc: denied { remount } for pid=3599 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 35.580554][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 35.581399][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 35.695444][ T28] audit: type=1400 audit(1771900585.152:152): avc: denied { write } for pid=3605 comm="syz.1.33" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.792534][ T28] audit: type=1400 audit(1771900585.152:153): avc: denied { open } for pid=3605 comm="syz.1.33" path="/dev/input/event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.931034][ T3615] loop3: detected capacity change from 0 to 512 [ 35.946627][ T3615] EXT4-fs: Ignoring removed nobh option [ 36.336981][ T28] audit: type=1400 audit(1771900585.192:154): avc: denied { name_bind } for pid=3607 comm="syz.4.34" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 36.359106][ T28] audit: type=1400 audit(1771900585.192:155): avc: denied { node_bind } for pid=3607 comm="syz.4.34" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 36.365637][ T3615] EXT4-fs (loop3): 1 orphan inode deleted [ 36.399165][ T3615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.488340][ T3613] can0: slcan on ttyS3. [ 36.515992][ T28] audit: type=1400 audit(1771900585.202:156): avc: denied { read } for pid=3605 comm="syz.1.33" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 36.740983][ T3613] can0 (unregistered): slcan off ttyS3. [ 36.747792][ T3610] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.35: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 36.818888][ T3620] loop4: detected capacity change from 0 to 2048 [ 36.829228][ T3620] EXT4-fs: Ignoring removed orlov option [ 36.841661][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.861553][ T3620] EXT4-fs: Ignoring removed oldalloc option [ 36.873808][ T3620] EXT4-fs (loop4): filesystem too large to mount safely on this system [ 36.971699][ T3627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.029065][ T3627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.086178][ T3620] loop4: detected capacity change from 0 to 1024 [ 37.152953][ T3620] EXT4-fs: Ignoring removed bh option [ 37.234394][ T3620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.272469][ T3633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.333106][ T3633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.473154][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.768028][ T3638] loop4: detected capacity change from 0 to 512 [ 37.779627][ T3638] EXT4-fs: Ignoring removed nobh option [ 37.904302][ T3638] EXT4-fs (loop4): 1 orphan inode deleted [ 37.928552][ T3638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.999020][ T3638] can0: slcan on ttyS3. [ 38.131282][ T3638] can0 (unregistered): slcan off ttyS3. [ 38.651764][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.825726][ T3641] capability: warning: `syz.4.42' uses 32-bit capabilities (legacy support in use) [ 38.841489][ T3641] program syz.4.42 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.935762][ T3645] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 39.288105][ T3651] set_capacity_and_notify: 1 callbacks suppressed [ 39.288195][ T3651] loop4: detected capacity change from 0 to 512 [ 39.310117][ T3651] EXT4-fs: Ignoring removed nobh option [ 39.365192][ T3651] EXT4-fs (loop4): 1 orphan inode deleted [ 39.377569][ T3651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.445529][ T3651] can0: slcan on ttyS3. [ 39.611703][ T3651] can0 (unregistered): slcan off ttyS3. [ 40.001662][ T3649] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.44: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 40.022583][ T3651] syz.4.44 (3651) used greatest stack depth: 9352 bytes left [ 40.080144][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.384498][ T3654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.45'. [ 40.432956][ T3654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.45'. [ 40.477598][ T3654] loop4: detected capacity change from 0 to 512 [ 40.503785][ T3654] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.516751][ T3656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 40.575151][ T3654] __quota_error: 13 callbacks suppressed [ 40.575168][ T3654] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 40.703673][ T3654] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 40.786091][ T3654] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.45: Failed to acquire dquot type 1 [ 40.813098][ T3654] loop4: lost filesystem error report for type 5 error -5 [ 40.820819][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 40.837521][ C0] EXT4-fs (loop4): last error at time 1771900846: ext4_acquire_dquot:7001 [ 40.869037][ T3654] EXT4-fs (loop4): 1 truncate cleaned up [ 40.891699][ T3654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 41.633366][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 41.735916][ T3665] loop0: detected capacity change from 0 to 8192 [ 41.825919][ T28] audit: type=1400 audit(1771900847.285:170): avc: denied { read append } for pid=3666 comm="syz.4.48" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 41.831140][ T3529] loop0: p1 < > p2 p4 < p5 > [ 41.893068][ T28] audit: type=1400 audit(1771900847.285:171): avc: denied { open } for pid=3666 comm="syz.4.48" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 41.950962][ T3529] loop0: partition table partially beyond EOD, truncated [ 41.981095][ T3529] loop0: p1 start 134217728 is beyond EOD, truncated [ 41.987832][ T3529] loop0: p2 size 591360 extends beyond EOD, truncated [ 42.014347][ T28] audit: type=1400 audit(1771900847.405:172): avc: denied { create } for pid=3666 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.035293][ T3529] loop0: p5 size 591360 extends beyond EOD, truncated [ 42.074621][ T3665] loop0: p1 < > p2 p4 < p5 > [ 42.110879][ T28] audit: type=1400 audit(1771900847.505:173): avc: denied { getopt } for pid=3670 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.132801][ T3665] loop0: partition table partially beyond EOD, truncated [ 42.140263][ T3665] loop0: p1 start 134217728 is beyond EOD, truncated [ 42.180850][ T28] audit: type=1400 audit(1771900847.505:174): avc: denied { connect } for pid=3670 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.210902][ T3665] loop0: p2 size 591360 extends beyond EOD, truncated [ 42.219306][ T3673] netlink: 'syz.4.49': attribute type 29 has an invalid length. [ 42.250843][ T28] audit: type=1400 audit(1771900847.505:175): avc: denied { name_connect } for pid=3670 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 42.253954][ T3665] loop0: p5 size 591360 extends beyond EOD, [ 42.304367][ T3674] netlink: 'syz.4.49': attribute type 29 has an invalid length. [ 42.360909][ T3665] truncated [ 42.362612][ T3675] netlink: 500 bytes leftover after parsing attributes in process `syz.4.49'. [ 42.377331][ T28] audit: type=1400 audit(1771900847.825:176): avc: denied { write } for pid=3670 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.440866][ T28] audit: type=1400 audit(1771900847.825:177): avc: denied { nlmsg_write } for pid=3670 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.162174][ T3677] netlink: 'syz.0.50': attribute type 1 has an invalid length. [ 43.201586][ T3677] bond1: entered promiscuous mode [ 43.206920][ T3677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.338362][ T3680] loop0: detected capacity change from 0 to 2048 [ 43.370089][ T3680] EXT4-fs: Ignoring removed orlov option [ 43.382749][ T3680] EXT4-fs: Ignoring removed oldalloc option [ 43.427834][ T3680] EXT4-fs (loop0): filesystem too large to mount safely on this system [ 43.719482][ T3682] loop1: detected capacity change from 0 to 512 [ 43.733542][ T3682] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 43.875272][ T3680] loop0: detected capacity change from 0 to 1024 [ 43.938413][ T3680] EXT4-fs: Ignoring removed bh option [ 44.046114][ T3680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.216869][ T3695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.56'. [ 44.262446][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.320066][ T3696] loop1: detected capacity change from 0 to 8192 [ 44.372259][ T3702] loop3: detected capacity change from 0 to 512 [ 44.382018][ T3702] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.58: invalid indirect mapped block 4294967295 (level 1) [ 44.395997][ T3702] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 44.396185][ T3702] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.58: invalid indirect mapped block 4294967295 (level 1) [ 44.405362][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 44.405384][ C0] EXT4-fs (loop3): initial error at time 1771900849: ext4_free_branches:1023: inode 11 [ 44.405437][ C0] EXT4-fs (loop3): last error at time 1771900849: ext4_free_branches:1023: inode 11 [ 44.445379][ T3702] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 44.445596][ T3702] EXT4-fs (loop3): 2 truncates cleaned up [ 44.447253][ T3303] loop1: p1 < > p2 p4 < p5 > [ 44.455175][ T3702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.500929][ T3303] loop1: partition table partially beyond EOD, truncated [ 44.522069][ T3303] loop1: p1 start 134217728 is beyond EOD, truncated [ 44.558950][ T3303] loop1: p2 size 591360 extends beyond EOD, truncated [ 44.584188][ T3303] loop1: p5 size 591360 extends beyond EOD, truncated [ 44.619686][ T3696] loop1: p1 < > p2 p4 < p5 > [ 44.636890][ T3696] loop1: partition table partially beyond EOD, truncated [ 44.649278][ T3696] loop1: p1 start 134217728 is beyond EOD, truncated [ 44.657329][ T3696] loop1: p2 size 591360 extends beyond EOD, truncated [ 44.665622][ T3696] loop1: p5 size 591360 extends beyond EOD, truncated [ 44.813596][ T3710] loop0: detected capacity change from 0 to 512 [ 44.827884][ T3710] EXT4-fs: Ignoring removed nobh option [ 44.870116][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.908152][ T3710] EXT4-fs (loop0): 1 orphan inode deleted [ 44.922451][ T3710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.990330][ T3710] can0: slcan on ttyS3. [ 45.051221][ T3710] can0 (unregistered): slcan off ttyS3. [ 45.308765][ T3717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.62'. [ 45.455290][ T3720] loop3: detected capacity change from 0 to 512 [ 45.472203][ T3720] EXT4-fs: Ignoring removed nobh option [ 45.573778][ T3708] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.59: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 45.649148][ T3720] EXT4-fs (loop3): 1 orphan inode deleted [ 45.661905][ T3720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.777522][ T3718] loop2: detected capacity change from 0 to 8192 [ 46.020306][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.041280][ T3718] loop2: p1 < > p2 p4 < p5 > [ 46.057874][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 46.057887][ T28] audit: type=1400 audit(1771900851.515:186): avc: denied { write } for pid=3729 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 46.091007][ T3731] syz.4.65 uses obsolete (PF_INET,SOCK_PACKET) [ 46.099361][ T3718] loop2: partition table partially beyond EOD, truncated [ 46.120317][ T28] audit: type=1400 audit(1771900851.565:187): avc: denied { ioctl } for pid=3729 comm="syz.4.65" path="socket:[5268]" dev="sockfs" ino=5268 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.169023][ T3718] loop2: p1 start 134217728 is beyond EOD, truncated [ 46.181591][ T3715] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.60: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 46.196562][ T3718] loop2: p2 size 591360 extends beyond EOD, [ 46.216521][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.242424][ T3718] truncated [ 46.257866][ T3718] loop2: p5 size 591360 extends beyond EOD, truncated [ 46.297676][ T3739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.66'. [ 46.333863][ T28] audit: type=1400 audit(1771900851.795:188): avc: denied { bind } for pid=3740 comm="syz.4.68" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.386411][ T28] audit: type=1400 audit(1771900851.795:189): avc: denied { name_bind } for pid=3740 comm="syz.4.68" src=19494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 46.386465][ T28] audit: type=1400 audit(1771900851.795:190): avc: denied { node_bind } for pid=3740 comm="syz.4.68" saddr=ff02::1 src=19494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 46.386486][ T28] audit: type=1400 audit(1771900851.815:191): avc: denied { create } for pid=3740 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 46.386509][ T28] audit: type=1400 audit(1771900851.815:192): avc: denied { bind } for pid=3740 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 46.434402][ T28] audit: type=1400 audit(1771900851.885:193): avc: denied { create } for pid=3743 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 46.490873][ T28] audit: type=1400 audit(1771900851.945:194): avc: denied { create } for pid=3746 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 46.494104][ T28] audit: type=1400 audit(1771900851.955:195): avc: denied { getopt } for pid=3746 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.616704][ T3756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.625658][ T3756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.906185][ T3763] loop1: detected capacity change from 0 to 512 [ 46.972976][ T3765] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 46.992180][ T3767] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 47.254414][ T3772] loop0: detected capacity change from 0 to 2048 [ 47.314009][ T3770] loop1: detected capacity change from 0 to 8192 [ 47.321761][ T3778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.330387][ T3778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.363247][ T3772] EXT4-fs: Ignoring removed orlov option [ 47.381384][ T3772] EXT4-fs: Ignoring removed oldalloc option [ 47.391515][ T3770] loop1: p1 < > p2 p4 < p5 > [ 47.396215][ T3770] loop1: partition table partially beyond EOD, truncated [ 47.424383][ T3772] EXT4-fs (loop0): filesystem too large to mount safely on this system [ 47.433656][ T3779] loop2: detected capacity change from 0 to 2048 [ 47.465854][ T3779] EXT4-fs: Ignoring removed orlov option [ 47.483052][ T3770] loop1: p1 start 134217728 is beyond EOD, truncated [ 47.503700][ T3779] EXT4-fs: Ignoring removed oldalloc option [ 47.523373][ T3770] loop1: p2 size 591360 extends beyond EOD, truncated [ 47.535872][ T3779] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 47.562349][ T3770] loop1: p5 size 591360 extends beyond EOD, truncated [ 48.164662][ T3772] loop0: detected capacity change from 0 to 1024 [ 48.219831][ T3772] EXT4-fs: Ignoring removed bh option [ 48.305086][ T3772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.594164][ T3777] EXT4-fs: Ignoring removed bh option [ 48.669131][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.717465][ T3777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.782023][ T3788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'. [ 49.000570][ T3791] bio_check_eod: 18 callbacks suppressed [ 49.000588][ T3791] syz.1.81: attempt to access beyond end of device [ 49.000588][ T3791] loop1: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 49.002251][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.037706][ T3791] syz.1.81: attempt to access beyond end of device [ 49.037706][ T3791] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 49.082673][ T3794] EXT4-fs: Ignoring removed i_version option [ 49.103147][ T3794] EXT4-fs: Ignoring removed bh option [ 49.127999][ T3794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.128178][ T3791] buffer_io_error: 3 callbacks suppressed [ 49.128191][ T3791] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 49.145021][ T3794] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.190981][ T3791] syz.1.81: attempt to access beyond end of device [ 49.190981][ T3791] loop1: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 49.219406][ T3791] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 49.228438][ T3791] syz.1.81: attempt to access beyond end of device [ 49.228438][ T3791] loop1: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 49.242402][ T3791] Buffer I/O error on dev loop1, logical block 78, lost async page write [ 49.260820][ T3791] syz.1.81: attempt to access beyond end of device [ 49.260820][ T3791] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 49.310329][ T3798] Zero length message leads to an empty skb [ 49.338165][ T3791] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 49.431935][ T3791] syz.1.81: attempt to access beyond end of device [ 49.431935][ T3791] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 49.462312][ T3791] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 49.475014][ T3795] syz.1.81: attempt to access beyond end of device [ 49.475014][ T3795] loop1: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 49.558181][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.865885][ T3805] set_capacity_and_notify: 3 callbacks suppressed [ 49.865902][ T3805] loop1: detected capacity change from 0 to 512 [ 49.910741][ T3805] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.85: invalid block [ 49.967060][ T3805] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 49.967222][ T3805] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.85: invalid indirect mapped block 4294967295 (level 1) [ 49.976456][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 49.976477][ C1] EXT4-fs (loop1): initial error at time 1771900855: ext4_get_branch:178: inode 11: block 4294967295 [ 49.976514][ C1] EXT4-fs (loop1): last error at time 1771900855: ext4_get_branch:178: inode 11: block 4294967295 [ 50.025470][ T3811] sctp: [Deprecated]: syz.2.86 (pid 3811) Use of struct sctp_assoc_value in delayed_ack socket option. [ 50.025470][ T3811] Use struct sctp_sack_info instead [ 50.053900][ T3805] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.054058][ T3805] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.85: invalid indirect mapped block 4294967295 (level 1) [ 50.089445][ T3805] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.090809][ T3805] EXT4-fs (loop1): 2 truncates cleaned up [ 50.122978][ T3805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.189948][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.239857][ T3815] Illegal XDP return value 4294967274 on prog (id 39) dev N/A, expect packet loss! [ 50.434677][ T3820] loop3: detected capacity change from 0 to 128 [ 50.456011][ T3820] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 50.602733][ T3829] loop1: detected capacity change from 0 to 512 [ 50.617966][ T3829] EXT4-fs: Ignoring removed nobh option [ 50.700094][ T3829] EXT4-fs (loop1): 1 orphan inode deleted [ 50.716379][ T3829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.800856][ T3829] can0: slcan on ttyS3. [ 50.886844][ T3831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.006000][ T3833] loop2: detected capacity change from 0 to 512 [ 51.042802][ T3829] can0 (unregistered): slcan off ttyS3. [ 51.082611][ T3833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.087757][ T3831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.105628][ T3833] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.146957][ T3833] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.92: iget: bad i_size value: 2533274857506816 [ 51.183653][ T3833] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.92: iget: bad i_size value: 2533274857506816 [ 51.242210][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.312666][ T3829] syz.1.90 (3829) used greatest stack depth: 9032 bytes left [ 51.328412][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 51.328427][ T28] audit: type=1400 audit(1771900856.765:205): avc: denied { setopt } for pid=3836 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 51.360502][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.671675][ T3849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.680150][ T3849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.835551][ T28] audit: type=1400 audit(1771900857.295:206): avc: denied { read } for pid=3850 comm="syz.0.98" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 52.072184][ T3852] mmap: syz.0.98 (3852) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.105714][ T3852] netlink: 'syz.0.98': attribute type 4 has an invalid length. [ 52.150785][ T3852] netlink: 152 bytes leftover after parsing attributes in process `syz.0.98'. [ 52.231142][ T3852] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 52.309188][ T28] audit: type=1400 audit(1771900857.765:207): avc: denied { write } for pid=3850 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 52.601494][ T3855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 52.669665][ T3858] loop0: detected capacity change from 0 to 1024 [ 52.704624][ T3858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.790744][ T3858] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.840022][ T28] audit: type=1400 audit(1771900858.295:208): avc: denied { map } for pid=3857 comm="syz.0.100" path="/15/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.875968][ T3862] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.938173][ T3865] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 53.005586][ T3865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.022481][ T3865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.084187][ T28] audit: type=1400 audit(1771900858.545:209): avc: denied { write } for pid=3864 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 53.514279][ T3843] loop1: detected capacity change from 0 to 1024 [ 53.676128][ T28] audit: type=1400 audit(1771900859.135:210): avc: denied { execute } for pid=3866 comm="syz.4.103" path="/26/cpuacct.usage_percpu" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.785146][ T3843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.816746][ T12] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.856784][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 53.912956][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.912956][ T12] [ 53.944962][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.005247][ T3844] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.94: bit already cleared for inode 13 [ 54.019836][ T28] audit: type=1400 audit(1771900859.455:211): avc: denied { unlink } for pid=3840 comm="syz.1.94" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.081683][ T3877] loop4: detected capacity change from 0 to 512 [ 54.090725][ T3877] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 54.098947][ T3879] veth0: entered promiscuous mode [ 54.119355][ T3879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.104'. [ 54.285478][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.302861][ T3882] loop4: detected capacity change from 0 to 164 [ 54.344041][ T3882] iso9660: Unknown parameter 'ÿü' [ 54.384337][ T28] audit: type=1400 audit(1771900859.845:212): avc: denied { create } for pid=3886 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.440506][ T28] audit: type=1400 audit(1771900859.875:213): avc: denied { accept } for pid=3886 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.475167][ T3889] netlink: 104 bytes leftover after parsing attributes in process `syz.4.109'. [ 54.534025][ T28] audit: type=1400 audit(1771900859.875:214): avc: denied { listen } for pid=3886 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.567048][ T3900] vlan2: entered promiscuous mode [ 54.572255][ T3900] hsr0: entered promiscuous mode [ 54.629791][ T3903] loop1: detected capacity change from 0 to 1024 [ 54.645379][ T3903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.709661][ T3907] loop4: detected capacity change from 0 to 1024 [ 54.744724][ T3907] EXT4-fs: Ignoring removed orlov option [ 54.802570][ T3907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.881919][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.070194][ T3915] netlink: 72 bytes leftover after parsing attributes in process `syz.4.117'. [ 55.411309][ T3931] netlink: 'syz.0.118': attribute type 1 has an invalid length. [ 56.048939][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.176307][ T3949] loop1: detected capacity change from 0 to 2048 [ 56.211467][ T3949] EXT4-fs: Ignoring removed orlov option [ 56.217678][ T3949] EXT4-fs: Ignoring removed oldalloc option [ 56.264426][ T3949] EXT4-fs (loop1): filesystem too large to mount safely on this system [ 56.366410][ T3949] loop1: detected capacity change from 0 to 1024 [ 56.389099][ T3949] EXT4-fs: Ignoring removed bh option [ 56.450694][ T3949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.548725][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.615024][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 56.615046][ T28] audit: type=1400 audit(1771900862.075:294): avc: denied { create } for pid=3958 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 57.134440][ T28] audit: type=1400 audit(1771900862.595:295): avc: denied { bpf } for pid=3963 comm="syz.1.127" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.135329][ T3964] loop1: detected capacity change from 0 to 128 [ 57.240707][ T28] audit: type=1400 audit(1771900862.595:296): avc: denied { perfmon } for pid=3963 comm="syz.1.127" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.311163][ T28] audit: type=1400 audit(1771900862.645:297): avc: denied { mount } for pid=3963 comm="syz.1.127" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 57.363660][ T3968] netlink: 'syz.1.129': attribute type 1 has an invalid length. [ 57.377717][ T3968] bond1: entered promiscuous mode [ 57.404074][ T28] audit: type=1326 audit(1771900862.775:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299b93c629 code=0x7ffc0000 [ 57.427894][ T3968] bond1: entered allmulticast mode [ 57.428167][ T3968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.456976][ T3972] loop4: detected capacity change from 0 to 512 [ 57.463808][ T3972] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.504164][ T3969] macvlan2: entered promiscuous mode [ 57.509481][ T3969] macvlan2: entered allmulticast mode [ 57.530638][ T3972] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 57.552139][ T3969] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 57.570885][ T3972] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.130: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 57.587669][ T3972] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.588247][ T3972] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.130: couldn't read orphan inode 15 (err -117) [ 57.589056][ T28] audit: type=1326 audit(1771900862.775:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299b93c629 code=0x7ffc0000 [ 57.597494][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 57.597510][ C1] EXT4-fs (loop4): initial error at time 1771900863: ext4_iget_extra_inode:5025: inode 15 [ 57.649424][ C1] EXT4-fs (loop4): last error at time 1771900863: ext4_iget_extra_inode:5025: inode 15 [ 57.659240][ T3972] loop4: lost filesystem error report for type 5 error -117 [ 57.659955][ T3972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.684246][ T28] audit: type=1326 audit(1771900862.895:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f299b93c629 code=0x7ffc0000 [ 57.716833][ T28] audit: type=1326 audit(1771900862.895:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299b93c629 code=0x7ffc0000 [ 57.740492][ T28] audit: type=1326 audit(1771900862.895:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299b93c629 code=0x7ffc0000 [ 57.770854][ T3392] IPVS: starting estimator thread 0... [ 57.777271][ T28] audit: type=1326 audit(1771900862.895:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f299b93c629 code=0x7ffc0000 [ 57.822947][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.870733][ T3979] IPVS: using max 2544 ests per chain, 127200 per kthread [ 57.907347][ T3983] FAULT_INJECTION: forcing a failure. [ 57.907347][ T3983] name failslab, interval 1, probability 0, space 0, times 1 [ 57.950402][ T3985] bond2: entered promiscuous mode [ 58.072434][ T3985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 58.102725][ T3983] CPU: 0 UID: 0 PID: 3983 Comm: syz.4.131 Tainted: G W syzkaller #0 PREEMPT(full) [ 58.102839][ T3983] Tainted: [W]=WARN [ 58.102846][ T3983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 58.102937][ T3983] Call Trace: [ 58.102943][ T3983] [ 58.102949][ T3983] __dump_stack+0x1d/0x30 [ 58.102972][ T3983] dump_stack_lvl+0x95/0xd0 [ 58.103070][ T3983] dump_stack+0x15/0x1b [ 58.103092][ T3983] should_fail_ex+0x263/0x280 [ 58.103139][ T3983] should_failslab+0x8c/0xb0 [ 58.103156][ T3983] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 58.103175][ T3983] ? __alloc_skb+0x2d6/0x690 [ 58.103200][ T3983] __alloc_skb+0x2d6/0x690 [ 58.103231][ T3983] ? __alloc_skb+0x200/0x690 [ 58.103249][ T3983] netlink_alloc_large_skb+0xbf/0xf0 [ 58.103279][ T3983] netlink_sendmsg+0x40c/0x6f0 [ 58.103304][ T3983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.103368][ T3983] ____sys_sendmsg+0x5af/0x600 [ 58.103394][ T3983] ___sys_sendmsg+0x195/0x1e0 [ 58.103425][ T3983] __x64_sys_sendmsg+0xd4/0x160 [ 58.103490][ T3983] x64_sys_call+0x194c/0x3020 [ 58.103513][ T3983] do_syscall_64+0x12c/0x370 [ 58.103610][ T3983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.103628][ T3983] RIP: 0033:0x7feb7e68c629 [ 58.103642][ T3983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.103692][ T3983] RSP: 002b:00007feb7d0e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.103709][ T3983] RAX: ffffffffffffffda RBX: 00007feb7e905fa0 RCX: 00007feb7e68c629 [ 58.103798][ T3983] RDX: 0000000024000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 58.103852][ T3983] RBP: 00007feb7d0e7090 R08: 0000000000000000 R09: 0000000000000000 [ 58.103863][ T3983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.103875][ T3983] R13: 00007feb7e906038 R14: 00007feb7e905fa0 R15: 00007fff32df7608 [ 58.103894][ T3983] [ 58.105483][ T3993] loop0: detected capacity change from 0 to 2048 [ 58.331385][ T3993] EXT4-fs: Ignoring removed orlov option [ 58.338456][ T3993] EXT4-fs: Ignoring removed oldalloc option [ 58.349684][ T3994] bridge1: entered promiscuous mode [ 58.358611][ T3993] EXT4-fs (loop0): filesystem too large to mount safely on this system [ 58.359642][ T3994] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 58.464734][ T3993] loop0: detected capacity change from 0 to 1024 [ 58.494706][ T3993] EXT4-fs: Ignoring removed bh option [ 58.574112][ T3993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.589887][ T4008] tipc: Started in network mode [ 58.626493][ T4008] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 58.671412][ T4008] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 58.701479][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.768128][ T4008] tipc: Enabled bearer , priority 10 [ 58.883190][ T4020] loop0: detected capacity change from 0 to 512 [ 58.972416][ T4020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.013206][ T4020] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.026462][ T4020] ªªªªªª: renamed from dummy0 (while UP) [ 59.034542][ T4024] FAULT_INJECTION: forcing a failure. [ 59.034542][ T4024] name failslab, interval 1, probability 0, space 0, times 0 [ 59.047392][ T4024] CPU: 1 UID: 0 PID: 4024 Comm: syz.1.146 Tainted: G W syzkaller #0 PREEMPT(full) [ 59.047419][ T4024] Tainted: [W]=WARN [ 59.047547][ T4024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 59.047559][ T4024] Call Trace: [ 59.047566][ T4024] [ 59.047576][ T4024] __dump_stack+0x1d/0x30 [ 59.047641][ T4024] dump_stack_lvl+0x95/0xd0 [ 59.047662][ T4024] dump_stack+0x15/0x1b [ 59.047743][ T4024] should_fail_ex+0x263/0x280 [ 59.047786][ T4024] should_failslab+0x8c/0xb0 [ 59.047803][ T4024] __kvmalloc_node_noprof+0x155/0x650 [ 59.047874][ T4024] ? cgroup_pidlist_start+0x1c7/0x830 [ 59.047899][ T4024] cgroup_pidlist_start+0x1c7/0x830 [ 59.047975][ T4024] cgroup_seqfile_start+0x58/0x70 [ 59.048029][ T4024] kernfs_seq_start+0xb4/0x170 [ 59.048128][ T4024] traverse+0xf4/0x3a0 [ 59.048153][ T4024] seq_read_iter+0x85f/0x940 [ 59.048182][ T4024] ? avc_policy_seqno+0x15/0x30 [ 59.048279][ T4024] ? selinux_file_permission+0x1f2/0x690 [ 59.048350][ T4024] kernfs_fop_read_iter+0xc1/0x330 [ 59.048381][ T4024] vfs_read+0x6c0/0x7f0 [ 59.048410][ T4024] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 59.048499][ T4024] __x64_sys_pread64+0xfd/0x150 [ 59.048529][ T4024] x64_sys_call+0x27b5/0x3020 [ 59.048551][ T4024] do_syscall_64+0x12c/0x370 [ 59.048661][ T4024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.048684][ T4024] RIP: 0033:0x7f299b93c629 [ 59.048700][ T4024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.048725][ T4024] RSP: 002b:00007f299a397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 59.048746][ T4024] RAX: ffffffffffffffda RBX: 00007f299bbb5fa0 RCX: 00007f299b93c629 [ 59.048761][ T4024] RDX: 0000000000001000 RSI: 0000200000001840 RDI: 0000000000000004 [ 59.048774][ T4024] RBP: 00007f299a397090 R08: 0000000000000000 R09: 0000000000000000 [ 59.048787][ T4024] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 59.048855][ T4024] R13: 00007f299bbb6038 R14: 00007f299bbb5fa0 R15: 00007ffd513cc768 [ 59.048876][ T4024] [ 59.331730][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.469990][ T4039] netlink: 'syz.0.151': attribute type 1 has an invalid length. [ 59.501286][ T4032] loop3: detected capacity change from 0 to 128 [ 59.528481][ T4013] loop2: detected capacity change from 0 to 512 [ 59.634968][ T4013] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.142: couldn't read orphan inode 26 (err -116) [ 59.743271][ T4013] loop2: lost filesystem error report for type 5 error -116 [ 59.750670][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 59.764896][ C0] EXT4-fs (loop2): initial error at time 1771900865: ext4_orphan_get:1396 [ 59.773713][ C0] EXT4-fs (loop2): last error at time 1771900865: ext4_orphan_get:1396 [ 59.788674][ T4013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.843900][ T4013] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.851009][ T4059] loop3: detected capacity change from 0 to 1024 [ 59.880755][ T9] tipc: Node number set to 1 [ 59.898703][ T4059] EXT4-fs: Ignoring removed nobh option [ 59.920713][ T4059] EXT4-fs: inline encryption not supported [ 59.928829][ T4008] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #3: comm syz.2.142: corrupted inode contents [ 59.950106][ T4008] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #3: comm syz.2.142: mark_inode_dirty error [ 59.969371][ T4008] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.142: bg 0: block 64: padding at end of block bitmap is not set [ 59.984976][ T4008] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.142: Failed to acquire dquot type 0 [ 59.997313][ T4059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.032906][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.051348][ T4059] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.092484][ T4059] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.142110][ T4059] EXT4-fs (loop3): 1 truncate cleaned up [ 60.148286][ T4059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.197142][ T4059] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.519149][ T4065] FAT-fs (loop1): bogus number of FAT sectors [ 60.527105][ T4065] FAT-fs (loop1): Can't find a valid FAT filesystem [ 61.285777][ T4093] FAULT_INJECTION: forcing a failure. [ 61.285777][ T4093] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 61.318507][ T4093] CPU: 1 UID: 0 PID: 4093 Comm: syz.3.165 Tainted: G W syzkaller #0 PREEMPT(full) [ 61.318537][ T4093] Tainted: [W]=WARN [ 61.318544][ T4093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.318598][ T4093] Call Trace: [ 61.318605][ T4093] [ 61.318629][ T4093] __dump_stack+0x1d/0x30 [ 61.318654][ T4093] dump_stack_lvl+0x95/0xd0 [ 61.318674][ T4093] dump_stack+0x15/0x1b [ 61.318692][ T4093] should_fail_ex+0x263/0x280 [ 61.318753][ T4093] should_fail+0xb/0x20 [ 61.318769][ T4093] should_fail_usercopy+0x1a/0x20 [ 61.318788][ T4093] _copy_to_iter+0x387/0xea0 [ 61.318814][ T4093] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 61.318924][ T4093] __skb_datagram_iter+0xc6/0x680 [ 61.318949][ T4093] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 61.319008][ T4093] skb_copy_datagram_iter+0x3f/0x120 [ 61.319036][ T4093] netlink_recvmsg+0x1a8/0x550 [ 61.319064][ T4093] ? __pfx_netlink_recvmsg+0x10/0x10 [ 61.319098][ T4093] sock_recvmsg+0x139/0x160 [ 61.319117][ T4093] ____sys_recvmsg+0xf5/0x280 [ 61.319178][ T4093] ___sys_recvmsg+0x11f/0x3b0 [ 61.319247][ T4093] do_recvmmsg+0x1ef/0x560 [ 61.319278][ T4093] ? get_timespec64+0xd2/0x100 [ 61.319300][ T4093] __x64_sys_recvmmsg+0xfb/0x170 [ 61.319323][ T4093] x64_sys_call+0x80f/0x3020 [ 61.319409][ T4093] do_syscall_64+0x12c/0x370 [ 61.319444][ T4093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.319515][ T4093] RIP: 0033:0x7f4210c4c629 [ 61.319532][ T4093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.319550][ T4093] RSP: 002b:00007f420f6a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 61.319570][ T4093] RAX: ffffffffffffffda RBX: 00007f4210ec5fa0 RCX: 00007f4210c4c629 [ 61.319585][ T4093] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 61.319600][ T4093] RBP: 00007f420f6a7090 R08: 0000200000003700 R09: 0000000000000000 [ 61.319613][ T4093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.319664][ T4093] R13: 00007f4210ec6038 R14: 00007f4210ec5fa0 R15: 00007ffe87c07108 [ 61.319680][ T4093] [ 61.580589][ T4095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 61.766190][ T4107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.171'. [ 61.895971][ T4109] FAULT_INJECTION: forcing a failure. [ 61.895971][ T4109] name failslab, interval 1, probability 0, space 0, times 0 [ 61.915883][ T4109] CPU: 1 UID: 0 PID: 4109 Comm: syz.0.170 Tainted: G W syzkaller #0 PREEMPT(full) [ 61.915912][ T4109] Tainted: [W]=WARN [ 61.915918][ T4109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.915993][ T4109] Call Trace: [ 61.916001][ T4109] [ 61.916010][ T4109] __dump_stack+0x1d/0x30 [ 61.916043][ T4109] dump_stack_lvl+0x95/0xd0 [ 61.916068][ T4109] dump_stack+0x15/0x1b [ 61.916090][ T4109] should_fail_ex+0x263/0x280 [ 61.916171][ T4109] ? alloc_pipe_info+0xad/0x340 [ 61.916305][ T4109] should_failslab+0x8c/0xb0 [ 61.916347][ T4109] __kmalloc_cache_noprof+0x5f/0x410 [ 61.916371][ T4109] alloc_pipe_info+0xad/0x340 [ 61.916421][ T4109] splice_direct_to_actor+0x591/0x670 [ 61.916443][ T4109] ? kstrtouint_from_user+0xa8/0xf0 [ 61.916465][ T4109] ? __pfx_direct_splice_actor+0x10/0x10 [ 61.916486][ T4109] ? avc_policy_seqno+0x15/0x30 [ 61.916525][ T4109] ? selinux_file_permission+0x1f2/0x690 [ 61.916593][ T4109] do_splice_direct+0x119/0x1a0 [ 61.916614][ T4109] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 61.916639][ T4109] do_sendfile+0x382/0x650 [ 61.916665][ T4109] __x64_sys_sendfile64+0xb8/0x150 [ 61.916690][ T4109] x64_sys_call+0x2dc4/0x3020 [ 61.916772][ T4109] do_syscall_64+0x12c/0x370 [ 61.916801][ T4109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.916825][ T4109] RIP: 0033:0x7f013273c629 [ 61.916844][ T4109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.916870][ T4109] RSP: 002b:00007f013114d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 61.916888][ T4109] RAX: ffffffffffffffda RBX: 00007f01329b6180 RCX: 00007f013273c629 [ 61.916904][ T4109] RDX: 0000200000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 61.916918][ T4109] RBP: 00007f013114d090 R08: 0000000000000000 R09: 0000000000000000 [ 61.916972][ T4109] R10: 00000002000007ff R11: 0000000000000246 R12: 0000000000000001 [ 61.916986][ T4109] R13: 00007f01329b6218 R14: 00007f01329b6180 R15: 00007ffe46660b68 [ 61.917056][ T4109] [ 63.792186][ T4113] set_capacity_and_notify: 2 callbacks suppressed [ 63.792248][ T4113] loop3: detected capacity change from 0 to 256 [ 64.050709][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 64.050725][ T28] audit: type=1400 audit(1771900869.515:341): avc: denied { append } for pid=4114 comm="syz.1.173" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 64.128640][ T4117] bond2: entered promiscuous mode [ 64.134030][ T4117] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.148387][ T4117] bridge2: entered promiscuous mode [ 64.154629][ T4117] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 64.226298][ T4124] loop2: detected capacity change from 0 to 1024 [ 64.233043][ T28] audit: type=1400 audit(1771900869.685:342): avc: denied { remount } for pid=4123 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.279970][ T4124] EXT4-fs: Ignoring removed nobh option [ 64.293962][ T28] audit: type=1400 audit(1771900869.745:343): avc: denied { shutdown } for pid=4128 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.314250][ T4124] EXT4-fs: inline encryption not supported [ 64.320427][ T28] audit: type=1400 audit(1771900869.755:344): avc: denied { write } for pid=4128 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.374092][ T4124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.401299][ T4124] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.497623][ T4138] loop1: detected capacity change from 0 to 1024 [ 64.512994][ T4134] random: crng reseeded on system resumption [ 64.519516][ T4124] loop2: detected capacity change from 0 to 512 [ 64.520128][ T28] audit: type=1400 audit(1771900869.975:345): avc: denied { write } for pid=4133 comm="syz.3.181" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 64.532137][ T4138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 64.565921][ T4134] loop3: detected capacity change from 0 to 1024 [ 64.567290][ T4138] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.594477][ T4124] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.605240][ T4138] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.182: bg 0: block 112: padding at end of block bitmap is not set [ 64.619732][ T28] audit: type=1400 audit(1771900870.065:346): avc: denied { setattr } for pid=4136 comm="syz.1.182" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.642248][ T4138] EXT4-fs (loop1): Remounting filesystem read-only [ 64.650114][ T4138] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.661141][ T4124] EXT4-fs (loop2): 1 truncate cleaned up [ 64.681351][ T4124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.710930][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 64.720751][ T4124] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.842753][ T4149] bond1: entered promiscuous mode [ 64.848087][ T4149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.866196][ T4154] loop1: detected capacity change from 0 to 1024 [ 64.891823][ T4154] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 64.902424][ T4154] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 64.911872][ T4154] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.187: Failed to acquire dquot type 0 [ 64.923172][ T4154] loop1: lost filesystem error report for type 5 error -5 [ 64.936655][ T4159] ------------[ cut here ]------------ [ 64.940668][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 64.944070][ T4159] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 64.944132][ T4159] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.0.188/4159 [ 64.949737][ C1] EXT4-fs (loop1): initial error at time 1771900870: ext4_acquire_dquot:7001 [ 64.956240][ T4159] Modules linked in: [ 64.956346][ T4159] CPU: 0 UID: 0 PID: 4159 Comm: syz.0.188 Tainted: G W syzkaller #0 PREEMPT(full) [ 64.956385][ T4159] Tainted: [W]=WARN [ 64.956394][ T4159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 64.956408][ T4159] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 64.956471][ T4159] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 64.956490][ T4159] RSP: 0018:ffffc9000150f368 EFLAGS: 00010246 [ 64.981128][ C1] [ 64.991846][ T4159] [ 64.991853][ T4159] RAX: ffff888101cb0a78 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd [ 64.991868][ T4159] RDX: ffffffff86817254 RSI: ffffffff866d8f01 RDI: ffffffff871d3f90 [ 64.991952][ T4159] RBP: ffff88810ad8a270 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 64.991968][ T4159] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88810ad8a230 [ 64.991985][ T4159] R13: 00000000ffffdfcc R14: ffff88810ad8a27c R15: ffff88810ad8a268 [ 65.000925][ C1] EXT4-fs (loop1): last error at time 1771900870: ext4_acquire_dquot:7001 [ 65.004737][ T4159] FS: 00007f013118f6c0(0000) GS:ffff8882ae8db000(0000) knlGS:0000000000000000 [ 65.004760][ T4159] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.004777][ T4159] CR2: 0000200000001000 CR3: 000000011c248000 CR4: 00000000003506f0 [ 65.004797][ T4159] Call Trace: [ 65.004805][ T4159] [ 65.015736][ C1] [ 65.019502][ T4159] reg_set_min_max+0x1c8/0x260 [ 65.019576][ T4159] check_cond_jmp_op+0x13b0/0x1ab0 [ 65.019610][ T4159] do_check+0x4a9b/0x9860 [ 65.019653][ T4159] do_check_common+0xd0b/0x1630 [ 65.168817][ T4159] bpf_check+0x2f78/0xcc30 [ 65.173340][ T4159] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 65.179438][ T4159] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 65.181171][ T4154] EXT4-fs (loop1): 1 truncate cleaned up [ 65.185206][ T4159] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 65.196778][ T4159] ? _find_next_zero_bit+0x29/0xa0 [ 65.201969][ T4159] ? pcpu_block_refresh_hint+0x10b/0x170 [ 65.207632][ T4159] ? _find_next_zero_bit+0x64/0xa0 [ 65.212746][ T4154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.225280][ T4159] ? pcpu_block_refresh_hint+0x10b/0x170 [ 65.231066][ T4159] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 65.237335][ T4159] ? css_rstat_updated+0xbb/0x280 [ 65.242417][ T4159] ? mod_memcg_state+0x182/0x270 [ 65.247365][ T4159] ? __rcu_read_unlock+0x4e/0x70 [ 65.252593][ T4159] ? avc_has_perm_noaudit+0xab/0x130 [ 65.257927][ T4159] ? avc_has_perm+0x101/0x190 [ 65.262740][ T4159] ? selinux_bpf_prog_load+0x197/0x1c0 [ 65.268400][ T4159] ? security_bpf_prog_load+0x9e/0x140 [ 65.274459][ T4159] bpf_prog_load+0xf76/0x1140 [ 65.279150][ T4159] ? security_bpf+0x2b/0x90 [ 65.283908][ T4159] __sys_bpf+0x505/0x7e0 [ 65.288173][ T4159] __x64_sys_bpf+0x41/0x50 [ 65.292808][ T4159] x64_sys_call+0x10cb/0x3020 [ 65.297722][ T4159] do_syscall_64+0x12c/0x370 [ 65.302366][ T4159] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 65.309632][ T4159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.315596][ T4159] RIP: 0033:0x7f013273c629 [ 65.320212][ T4159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.346033][ T4159] RSP: 002b:00007f013118f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 65.356934][ T4159] RAX: ffffffffffffffda RBX: 00007f01329b5fa0 RCX: 00007f013273c629 [ 65.367412][ T4159] RDX: 0000000000000049 RSI: 0000200000000140 RDI: 0000000000000005 [ 65.377525][ T4159] RBP: 00007f01327d2b39 R08: 0000000000000000 R09: 0000000000000000 [ 65.389670][ T4159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.400929][ T4159] R13: 00007f01329b6038 R14: 00007f01329b5fa0 R15: 00007ffe46660b68 [ 65.410898][ T4159] [ 65.414133][ T4159] ---[ end trace 0000000000000000 ]--- [ 65.431367][ T4149] bridge1: entered promiscuous mode [ 65.464443][ T4149] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 65.478607][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.650969][ T28] audit: type=1400 audit(1771900871.085:347): avc: denied { setopt } for pid=4167 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.740401][ T28] audit: type=1400 audit(1771900871.175:348): avc: denied { create } for pid=4173 comm="syz.3.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 65.821273][ T10] IPVS: starting estimator thread 0... [ 65.920789][ T4181] IPVS: using max 2256 ests per chain, 112800 per kthread [ 65.949138][ T4186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.968204][ T4189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 65.979402][ T4188] loop4: detected capacity change from 0 to 1024 [ 65.991448][ T4166] bridge0: port 3(syz_tun) entered blocking state [ 65.997955][ T4166] bridge0: port 3(syz_tun) entered disabled state [ 66.003651][ T4188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.004674][ T4166] syz_tun: entered allmulticast mode [ 66.017193][ T4186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.022613][ T4166] syz_tun: entered promiscuous mode [ 66.035195][ T4166] bridge0: port 3(syz_tun) entered blocking state [ 66.041714][ T4166] bridge0: port 3(syz_tun) entered forwarding state [ 66.072984][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.322030][ T4197] loop1: detected capacity change from 0 to 1024 [ 66.414588][ T4205] FAULT_INJECTION: forcing a failure. [ 66.414588][ T4205] name failslab, interval 1, probability 0, space 0, times 0 [ 66.428775][ T4201] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 66.441256][ T4205] CPU: 1 UID: 0 PID: 4205 Comm: syz.0.202 Tainted: G W syzkaller #0 PREEMPT(full) [ 66.441324][ T4205] Tainted: [W]=WARN [ 66.441332][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 66.441344][ T4205] Call Trace: [ 66.441351][ T4205] [ 66.441358][ T4205] __dump_stack+0x1d/0x30 [ 66.441386][ T4205] dump_stack_lvl+0x95/0xd0 [ 66.441456][ T4205] dump_stack+0x15/0x1b [ 66.441476][ T4205] should_fail_ex+0x263/0x280 [ 66.441568][ T4205] should_failslab+0x8c/0xb0 [ 66.441586][ T4205] __kvmalloc_node_noprof+0x155/0x650 [ 66.441607][ T4205] ? vmemdup_user+0x2b/0xd0 [ 66.441625][ T4205] vmemdup_user+0x2b/0xd0 [ 66.441642][ T4205] map_get_next_key+0x140/0x330 [ 66.441707][ T4205] ? __sys_bpf+0x643/0x7e0 [ 66.441725][ T4205] __sys_bpf+0x64d/0x7e0 [ 66.441746][ T4205] __x64_sys_bpf+0x41/0x50 [ 66.441835][ T4205] x64_sys_call+0x10cb/0x3020 [ 66.441859][ T4205] do_syscall_64+0x12c/0x370 [ 66.441902][ T4205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.441925][ T4205] RIP: 0033:0x7f013273c629 [ 66.441940][ T4205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.441958][ T4205] RSP: 002b:00007f013118f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 66.441979][ T4205] RAX: ffffffffffffffda RBX: 00007f01329b5fa0 RCX: 00007f013273c629 [ 66.442033][ T4205] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000004 [ 66.442047][ T4205] RBP: 00007f013118f090 R08: 0000000000000000 R09: 0000000000000000 [ 66.442061][ T4205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.442073][ T4205] R13: 00007f01329b6038 R14: 00007f01329b5fa0 R15: 00007ffe46660b68 [ 66.442094][ T4205] [ 66.473199][ T4209] netlink: 'syz.4.203': attribute type 1 has an invalid length. [ 66.683545][ T4209] bond1: entered promiscuous mode [ 66.697209][ T4209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.711017][ T4212] bridge1: entered promiscuous mode [ 66.726076][ T4217] loop1: detected capacity change from 0 to 1024 [ 66.739317][ T4212] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 66.743776][ T4219] loop0: detected capacity change from 0 to 512 [ 66.776127][ T4219] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.795706][ T4217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 66.808863][ T4217] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.810675][ T4219] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.207: bg 0: block 4: invalid block bitmap [ 66.830535][ T4217] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.206: bg 0: block 112: padding at end of block bitmap is not set [ 66.843526][ T4219] loop0: lost filesystem error report for type 5 error -117 [ 66.846138][ T4219] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 66.853911][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 66.853933][ C1] EXT4-fs (loop0): initial error at time 1771900872: ext4_validate_block_bitmap:432 [ 66.853955][ C1] EXT4-fs (loop0): last error at time 1771900872: ext4_validate_block_bitmap:432 [ 66.874880][ T4217] EXT4-fs (loop1): Remounting filesystem read-only [ 67.026129][ T4219] EXT4-fs (loop0): 1 truncate cleaned up [ 67.041881][ T4219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.056511][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 67.234770][ T4228] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 67.271558][ T4228] tipc: Started in network mode [ 67.311571][ T4228] tipc: Node identity 1e60427853a1, cluster identity 4711 [ 67.324589][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.348676][ T4228] tipc: Enabled bearer , priority 0 [ 67.370500][ T4229] netlink: 44 bytes leftover after parsing attributes in process `syz.1.209'. [ 67.407617][ T4228] tipc: Resetting bearer [ 67.477533][ T4226] tipc: Disabling bearer [ 67.545123][ T4231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.586174][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.612209][ T4235] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.660304][ T4235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.684451][ T4235] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.735601][ T4235] cgroup: No subsys list or none specified [ 67.781281][ T4244] netlink: 'syz.4.215': attribute type 1 has an invalid length. [ 67.790513][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.854077][ T4244] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.920164][ T4242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.950777][ T4244] bond2: (slave ip6gretap1): making interface the new active one [ 67.968119][ T4242] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 68.012266][ T4244] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 68.024909][ T4242] EXT4-fs error (device loop0): ext4_free_inode:354: comm syz.0.213: bit already cleared for inode 13 [ 68.126181][ T4247] xt_CT: You must specify a L4 protocol and not use inversions on it [ 68.172928][ T4260] FAULT_INJECTION: forcing a failure. [ 68.172928][ T4260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.206354][ T4260] CPU: 1 UID: 0 PID: 4260 Comm: syz.4.217 Tainted: G W syzkaller #0 PREEMPT(full) [ 68.206393][ T4260] Tainted: [W]=WARN [ 68.206469][ T4260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 68.206482][ T4260] Call Trace: [ 68.206507][ T4260] [ 68.206516][ T4260] __dump_stack+0x1d/0x30 [ 68.206545][ T4260] dump_stack_lvl+0x95/0xd0 [ 68.206570][ T4260] dump_stack+0x15/0x1b [ 68.206590][ T4260] should_fail_ex+0x263/0x280 [ 68.206613][ T4260] should_fail+0xb/0x20 [ 68.206714][ T4260] should_fail_usercopy+0x1a/0x20 [ 68.206736][ T4260] _copy_from_user+0x1c/0xb0 [ 68.206762][ T4260] memdup_user+0x5e/0xd0 [ 68.206791][ T4260] strndup_user+0x68/0xb0 [ 68.206888][ T4260] __se_sys_fsopen+0x3c/0x1e0 [ 68.206914][ T4260] __x64_sys_fsopen+0x31/0x40 [ 68.206939][ T4260] x64_sys_call+0x29af/0x3020 [ 68.206979][ T4260] do_syscall_64+0x12c/0x370 [ 68.207012][ T4260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.207058][ T4260] RIP: 0033:0x7feb7e68c629 [ 68.207075][ T4260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.207166][ T4260] RSP: 002b:00007feb7d0e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 68.207187][ T4260] RAX: ffffffffffffffda RBX: 00007feb7e905fa0 RCX: 00007feb7e68c629 [ 68.207201][ T4260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 68.207222][ T4260] RBP: 00007feb7d0e7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.207236][ T4260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.207250][ T4260] R13: 00007feb7e906038 R14: 00007feb7e905fa0 R15: 00007fff32df7608 [ 68.207339][ T4260] [ 68.210507][ T4260] netlink: 'syz.4.217': attribute type 3 has an invalid length. [ 68.406104][ T4260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.217'. [ 68.465887][ T4268] netlink: 'syz.4.219': attribute type 1 has an invalid length. [ 68.503917][ T4268] bond3: entered promiscuous mode [ 68.509798][ T4268] bond3: entered allmulticast mode [ 68.517628][ T4268] 8021q: adding VLAN 0 to HW filter on device bond3 [ 68.586564][ T4272] macvlan2: entered promiscuous mode [ 68.595285][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.613345][ T4272] macvlan2: entered allmulticast mode [ 68.681843][ T4272] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 68.689634][ T4283] netlink: 68 bytes leftover after parsing attributes in process `syz.1.221'. [ 68.746601][ T4290] netlink: 52 bytes leftover after parsing attributes in process `syz.1.221'. [ 68.816472][ T4287] set_capacity_and_notify: 5 callbacks suppressed [ 68.816492][ T4287] loop0: detected capacity change from 0 to 8192 [ 68.817226][ T4293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.226'. [ 68.840443][ T3303] loop1: p3 p4 < > [ 68.844558][ T3303] loop1: p3 start 11362048 is beyond EOD, truncated [ 68.862013][ T4293] netem: change failed [ 68.869885][ T4292] loop1: p3 p4 < > [ 68.873969][ T4292] loop1: p3 start 11362048 is beyond EOD, truncated [ 68.883420][ T4292] capability: warning: `syz.1.227' uses deprecated v2 capabilities in a way that may be insecure [ 68.891094][ T4287] loop0: p1 < > p2 p4 < p5 > [ 68.900673][ T4287] loop0: partition table partially beyond EOD, truncated [ 68.909741][ T4297] hsr0: entered promiscuous mode [ 68.916104][ T4287] loop0: p1 start 134217728 is beyond EOD, truncated [ 68.933060][ T4287] loop0: p2 size 591360 extends beyond EOD, truncated [ 68.954877][ T4287] loop0: p5 size 591360 extends beyond EOD, truncated [ 69.131704][ T4309] loop1: detected capacity change from 0 to 1024 [ 69.154978][ T4309] EXT4-fs: Ignoring removed nobh option [ 69.182229][ T4309] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.217409][ T4309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.236957][ T4300] netlink: 'syz.2.230': attribute type 11 has an invalid length. [ 69.270629][ T4300] netlink: 132 bytes leftover after parsing attributes in process `syz.2.230'. [ 69.960359][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.978516][ T4311] loop4: detected capacity change from 0 to 1024 [ 70.082952][ T4323] FAULT_INJECTION: forcing a failure. [ 70.082952][ T4323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.128568][ T4323] CPU: 1 UID: 0 PID: 4323 Comm: syz.0.236 Tainted: G W syzkaller #0 PREEMPT(full) [ 70.128678][ T4323] Tainted: [W]=WARN [ 70.128686][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 70.128698][ T4323] Call Trace: [ 70.128705][ T4323] [ 70.128713][ T4323] __dump_stack+0x1d/0x30 [ 70.128794][ T4323] dump_stack_lvl+0x95/0xd0 [ 70.128825][ T4323] dump_stack+0x15/0x1b [ 70.128848][ T4323] should_fail_ex+0x263/0x280 [ 70.128870][ T4323] should_fail+0xb/0x20 [ 70.128926][ T4323] should_fail_usercopy+0x1a/0x20 [ 70.128950][ T4323] _copy_from_user+0x1c/0xb0 [ 70.128995][ T4323] vt_resizex+0x4a/0x3d0 [ 70.129081][ T4323] vt_ioctl+0x10a3/0x18d0 [ 70.129113][ T4323] ? tty_jobctrl_ioctl+0x29c/0x810 [ 70.129144][ T4323] tty_ioctl+0x7d7/0xb80 [ 70.129165][ T4323] ? __pfx_tty_ioctl+0x10/0x10 [ 70.129201][ T4323] __se_sys_ioctl+0xce/0x140 [ 70.129278][ T4323] __x64_sys_ioctl+0x43/0x50 [ 70.129309][ T4323] x64_sys_call+0x1563/0x3020 [ 70.129378][ T4323] do_syscall_64+0x12c/0x370 [ 70.129412][ T4323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.129435][ T4323] RIP: 0033:0x7f013273c629 [ 70.129452][ T4323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.129543][ T4323] RSP: 002b:00007f013118f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.129561][ T4323] RAX: ffffffffffffffda RBX: 00007f01329b5fa0 RCX: 00007f013273c629 [ 70.129576][ T4323] RDX: 0000200000000000 RSI: 000000000000560a RDI: 0000000000000003 [ 70.129590][ T4323] RBP: 00007f013118f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.129608][ T4323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.129622][ T4323] R13: 00007f01329b6038 R14: 00007f01329b5fa0 R15: 00007ffe46660b68 [ 70.129648][ T4323] [ 70.129685][ T4311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.240098][ T4311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 70.284984][ T4311] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.233: bit already cleared for inode 13 [ 70.419610][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.715013][ T4338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 70.752274][ T4347] netlink: 156 bytes leftover after parsing attributes in process `syz.4.242'. [ 70.762326][ T4346] netlink: 'syz.0.243': attribute type 21 has an invalid length. [ 70.774646][ T4349] loop1: detected capacity change from 0 to 1764 [ 70.780991][ T4346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 70.793626][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 70.793642][ T28] audit: type=1400 audit(1771903455.252:402): avc: denied { mount } for pid=4344 comm="syz.4.242" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 70.830562][ T28] audit: type=1400 audit(1771903455.252:403): avc: denied { map } for pid=4344 comm="syz.4.242" path="socket:[6129]" dev="sockfs" ino=6129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.857066][ T4349] iso9660: Unknown parameter 'showassc' [ 70.914650][ T28] audit: type=1400 audit(1771903455.252:404): avc: denied { read } for pid=4344 comm="syz.4.242" path="socket:[6129]" dev="sockfs" ino=6129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.043208][ T4361] loop4: detected capacity change from 0 to 512 [ 71.068612][ T4361] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.101157][ T4365] netlink: 80 bytes leftover after parsing attributes in process `syz.0.250'. [ 71.113521][ T4364] loop1: detected capacity change from 0 to 2048 [ 71.137145][ T4361] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.248: bg 0: block 4: invalid block bitmap [ 71.154402][ T4364] EXT4-fs: Ignoring removed orlov option [ 71.160085][ T4364] EXT4-fs: Ignoring removed oldalloc option [ 71.166352][ T4361] loop4: lost filesystem error report for type 5 error -117 [ 71.170654][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 71.185134][ C1] EXT4-fs (loop4): initial error at time 1771903455: ext4_validate_block_bitmap:432 [ 71.195180][ C1] EXT4-fs (loop4): last error at time 1771903455: ext4_validate_block_bitmap:432 [ 71.200852][ T4364] EXT4-fs (loop1): filesystem too large to mount safely on this system [ 71.207436][ T4361] EXT4-fs (loop4): 1 truncate cleaned up [ 71.231638][ T4361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.351518][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.427565][ T4364] loop1: detected capacity change from 0 to 1024 [ 71.448023][ T4364] EXT4-fs: Ignoring removed bh option [ 71.501975][ T4377] loop4: detected capacity change from 0 to 128 [ 71.650677][ T28] audit: type=1400 audit(1771903456.073:405): avc: denied { create } for pid=4376 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.729799][ T4364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.979015][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.071685][ T4387] bond3: ARP target 9.0.0.0 is already present [ 72.079885][ T4387] bond3: option arp_ip_target: invalid value (9) [ 72.091967][ T4387] bond3 (unregistering): Released all slaves [ 72.120168][ T4393] loop4: detected capacity change from 0 to 512 [ 72.128158][ T4393] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 72.141629][ T4393] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.259: bad orphan inode 15 [ 72.160448][ T4393] loop4: lost filesystem error report for type 5 error -117 [ 72.170258][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 72.184272][ C0] EXT4-fs (loop4): initial error at time 1771903456: ext4_orphan_get:1417 [ 72.192838][ C0] EXT4-fs (loop4): last error at time 1771903456: ext4_orphan_get:1417 [ 72.209768][ T4393] ext4_test_bit(bit=14, block=18) = 0 [ 72.215858][ T4393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 72.229083][ T4393] ext2 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.309274][ T28] audit: type=1326 audit(1771903456.763:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299b93c629 code=0x7ffc0000 [ 72.343529][ T4398] netlink: 'syz.1.261': attribute type 1 has an invalid length. [ 72.351600][ T4401] bond_slave_0: entered promiscuous mode [ 72.353289][ T28] audit: type=1326 audit(1771903456.763:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299b93c629 code=0x7ffc0000 [ 72.357266][ T4401] bond_slave_1: entered promiscuous mode [ 72.396048][ T28] audit: type=1326 audit(1771903456.853:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f299b93c629 code=0x7ffc0000 [ 72.425952][ T4401] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 72.429343][ T28] audit: type=1326 audit(1771903456.853:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299b93c629 code=0x7ffc0000 [ 72.461837][ T28] audit: type=1326 audit(1771903456.853:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f299b93c629 code=0x7ffc0000 [ 72.485671][ T28] audit: type=1326 audit(1771903456.853:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299b93c629 code=0x7ffc0000 [ 72.522803][ T4411] loop2: detected capacity change from 0 to 512 [ 72.580141][ T4411] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.580419][ T4401] bond_slave_0: left promiscuous mode [ 72.595667][ T4401] bond_slave_1: left promiscuous mode [ 72.604446][ T4411] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.265: bg 0: block 4: invalid block bitmap [ 72.627399][ T4411] loop2: lost filesystem error report for type 5 error -117 [ 72.628259][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 72.628414][ T4398] bond3: entered promiscuous mode [ 72.639568][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 72.645786][ T4398] bond3: entered allmulticast mode [ 72.649775][ C1] EXT4-fs (loop2): initial error at time 1771903457: ext4_validate_block_bitmap:432 [ 72.656705][ T4398] 8021q: adding VLAN 0 to HW filter on device bond3 [ 72.661356][ C1] [ 72.661364][ C1] EXT4-fs (loop2): last error at time 1771903457: ext4_validate_block_bitmap:432 [ 72.662762][ T4411] EXT4-fs (loop2): 1 truncate cleaned up [ 72.707597][ T4411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.719217][ T4408] macvlan3: entered promiscuous mode [ 72.733489][ T4408] macvlan3: entered allmulticast mode [ 72.746660][ T4420] FAULT_INJECTION: forcing a failure. [ 72.746660][ T4420] name failslab, interval 1, probability 0, space 0, times 0 [ 72.750968][ T4408] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 72.759898][ T4420] CPU: 0 UID: 0 PID: 4420 Comm: syz.4.267 Tainted: G W syzkaller #0 PREEMPT(full) [ 72.759967][ T4420] Tainted: [W]=WARN [ 72.759974][ T4420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 72.759986][ T4420] Call Trace: [ 72.759994][ T4420] [ 72.760002][ T4420] __dump_stack+0x1d/0x30 [ 72.760028][ T4420] dump_stack_lvl+0x95/0xd0 [ 72.760103][ T4420] dump_stack+0x15/0x1b [ 72.760132][ T4420] should_fail_ex+0x263/0x280 [ 72.760158][ T4420] should_failslab+0x8c/0xb0 [ 72.760228][ T4420] __kmalloc_noprof+0xb8/0x4e0 [ 72.760250][ T4420] ? copy_splice_read+0xc2/0x6c0 [ 72.760282][ T4420] copy_splice_read+0xc2/0x6c0 [ 72.760360][ T4420] ? avc_has_perm+0x101/0x190 [ 72.760387][ T4420] sock_splice_read+0xa5/0xb0 [ 72.760417][ T4420] ? __pfx_sock_splice_read+0x10/0x10 [ 72.760509][ T4420] splice_file_to_pipe+0x237/0x390 [ 72.760561][ T4420] do_splice+0xc46/0x10b0 [ 72.760580][ T4420] ? proc_fail_nth_write+0x13b/0x160 [ 72.760608][ T4420] ? __rcu_read_unlock+0x4e/0x70 [ 72.760629][ T4420] ? __fget_files+0x184/0x1c0 [ 72.760737][ T4420] __se_sys_splice+0x26c/0x3a0 [ 72.760760][ T4420] __x64_sys_splice+0x78/0x90 [ 72.760780][ T4420] x64_sys_call+0x16ef/0x3020 [ 72.760806][ T4420] do_syscall_64+0x12c/0x370 [ 72.760847][ T4420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.760961][ T4420] RIP: 0033:0x7feb7e68c629 [ 72.760977][ T4420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.760994][ T4420] RSP: 002b:00007feb7d0e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 72.761015][ T4420] RAX: ffffffffffffffda RBX: 00007feb7e905fa0 RCX: 00007feb7e68c629 [ 72.761116][ T4420] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000006 [ 72.761128][ T4420] RBP: 00007feb7d0e7090 R08: 0000000000000f3a R09: 0000000000000000 [ 72.761142][ T4420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.761154][ T4420] R13: 00007feb7e906038 R14: 00007feb7e905fa0 R15: 00007fff32df7608 [ 72.761173][ T4420] [ 72.797271][ T4422] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.049018][ T4418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.074833][ T4416] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.266: bit already cleared for inode 13 [ 73.205699][ T4440] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.227448][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 73.253029][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.303797][ T4450] EXT4-fs: Ignoring removed nobh option [ 73.340346][ T4450] EXT4-fs (loop2): orphan cleanup on readonly fs [ 73.360578][ T4450] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.272: EA inode hash validation failed [ 73.362656][ T4457] __nla_validate_parse: 1 callbacks suppressed [ 73.362670][ T4457] netlink: 72 bytes leftover after parsing attributes in process `syz.1.274'. [ 73.380239][ T4450] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.416265][ T4450] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.272: corrupted inode contents [ 73.431762][ T4450] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.440103][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 73.440240][ T4450] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.272: mark_inode_dirty error [ 73.452080][ C0] EXT4-fs (loop2): initial error at time 1771903457: ext4_do_update_inode:5569: inode 15 [ 73.480908][ C0] EXT4-fs (loop2): last error at time 1771903457: ext4_do_update_inode:5569: inode 15 [ 73.481216][ T4450] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.502774][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.522678][ T4461] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.533982][ T4450] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.272: corrupted inode contents [ 73.550197][ T4450] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.550335][ T4450] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.272: mark_inode_dirty error [ 73.574589][ T4450] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.575049][ T4461] EXT4-fs (loop1): 1 truncate cleaned up [ 73.575077][ T4450] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3002: inode #15: comm syz.2.272: mark inode dirty (error -117) [ 73.575639][ T4461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.585054][ T4450] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.640425][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.648679][ T4466] FAULT_INJECTION: forcing a failure. [ 73.648679][ T4466] name failslab, interval 1, probability 0, space 0, times 0 [ 73.659391][ T4450] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 73.676577][ T4466] CPU: 0 UID: 0 PID: 4466 Comm: syz.3.277 Tainted: G W syzkaller #0 PREEMPT(full) [ 73.676669][ T4466] Tainted: [W]=WARN [ 73.676676][ T4466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 73.676688][ T4466] Call Trace: [ 73.676694][ T4466] [ 73.676702][ T4466] __dump_stack+0x1d/0x30 [ 73.676729][ T4466] dump_stack_lvl+0x95/0xd0 [ 73.676752][ T4466] dump_stack+0x15/0x1b [ 73.676773][ T4466] should_fail_ex+0x263/0x280 [ 73.676829][ T4466] should_failslab+0x8c/0xb0 [ 73.676850][ T4466] kmem_cache_alloc_noprof+0x66/0x400 [ 73.676870][ T4466] ? audit_log_start+0x34c/0x730 [ 73.676893][ T4466] audit_log_start+0x34c/0x730 [ 73.676914][ T4466] ? kstrtouint_from_user+0xa8/0xf0 [ 73.677072][ T4466] audit_seccomp+0x47/0x100 [ 73.677101][ T4466] ? __seccomp_filter+0x8db/0x1350 [ 73.677128][ T4466] __seccomp_filter+0x8ec/0x1350 [ 73.677237][ T4466] ? __rcu_read_unlock+0x4e/0x70 [ 73.677280][ T4466] ? __fget_files+0x184/0x1c0 [ 73.677377][ T4466] ? mutex_lock+0x57/0x90 [ 73.677401][ T4466] ? mutex_unlock+0x4e/0x90 [ 73.677429][ T4466] __secure_computing+0x81/0x150 [ 73.677455][ T4466] do_syscall_64+0xd3/0x370 [ 73.677488][ T4466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.677518][ T4466] RIP: 0033:0x7f4210c4c629 [ 73.677534][ T4466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.677629][ T4466] RSP: 002b:00007f420f6a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 73.677668][ T4466] RAX: ffffffffffffffda RBX: 00007f4210ec5fa0 RCX: 00007f4210c4c629 [ 73.677683][ T4466] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000000 [ 73.677696][ T4466] RBP: 00007f420f6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.677734][ T4466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.677750][ T4466] R13: 00007f4210ec6038 R14: 00007f4210ec5fa0 R15: 00007ffe87c07108 [ 73.677769][ T4466] [ 73.884970][ T4450] EXT4-fs (loop2): 1 orphan inode deleted [ 73.891321][ T4450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.969994][ T4474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.989425][ T4474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.026738][ T4472] set_capacity_and_notify: 3 callbacks suppressed [ 74.026971][ T4472] loop1: detected capacity change from 0 to 1024 [ 74.044458][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.087447][ T4476] netlink: 'syz.2.281': attribute type 1 has an invalid length. [ 75.260215][ T3601] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.740620][ T4476] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 76.796627][ T4487] loop1: detected capacity change from 0 to 512 [ 76.843533][ T4487] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.857505][ T4489] loop4: detected capacity change from 0 to 2048 [ 76.865377][ T4489] EXT4-fs: Ignoring removed orlov option [ 76.871322][ T4489] EXT4-fs: Ignoring removed oldalloc option [ 76.882948][ T4487] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.283: bg 0: block 4: invalid block bitmap [ 76.895630][ T4487] loop1: lost filesystem error report for type 5 error -117 [ 76.896545][ T4489] EXT4-fs (loop4): filesystem too large to mount safely on this system [ 76.898537][ T4487] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 76.903909][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 76.903929][ C0] EXT4-fs (loop1): initial error at time 1771903461: ext4_validate_block_bitmap:432 [ 76.903948][ C0] EXT4-fs (loop1): last error at time 1771903461: ext4_validate_block_bitmap:432 [ 76.957452][ T4487] EXT4-fs (loop1): 1 truncate cleaned up [ 76.971263][ T4487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.066144][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.114809][ T4489] loop4: detected capacity change from 0 to 1024 [ 77.132760][ T4489] EXT4-fs: Ignoring removed bh option [ 77.175443][ T4489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.273421][ T4500] loop0: detected capacity change from 0 to 512 [ 77.310606][ T4500] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 77.338805][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.362257][ T4500] EXT4-fs (loop0): 1 truncate cleaned up [ 77.368632][ T4500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.413875][ T4508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.444667][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 77.444703][ T28] audit: type=1400 audit(1771903461.890:438): avc: denied { create } for pid=4509 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.471370][ T4510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.290'. [ 77.509301][ T4508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.537726][ T28] audit: type=1400 audit(1771903461.890:439): avc: denied { ioctl } for pid=4509 comm="syz.4.290" path="socket:[8406]" dev="sockfs" ino=8406 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.591383][ T28] audit: type=1400 audit(1771903461.960:440): avc: denied { firmware_load } for pid=4509 comm="syz.4.290" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 77.618720][ T28] audit: type=1400 audit(1771903461.970:441): avc: denied { bind } for pid=4509 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.638503][ T28] audit: type=1400 audit(1771903461.980:442): avc: denied { create } for pid=4509 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.659081][ T28] audit: type=1400 audit(1771903461.980:443): avc: denied { setopt } for pid=4509 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.678740][ T28] audit: type=1400 audit(1771903461.980:444): avc: denied { write } for pid=4509 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.733824][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.831737][ T4518] IPVS: set_ctl: invalid protocol: 59 172.20.20.52:20001 [ 77.839259][ T28] audit: type=1400 audit(1771903462.280:445): avc: denied { setopt } for pid=4517 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.918206][ T28] audit: type=1400 audit(1771903462.350:446): avc: denied { create } for pid=4517 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 77.970180][ T28] audit: type=1400 audit(1771903462.380:447): avc: denied { ioctl } for pid=4517 comm="syz.0.293" path="socket:[8434]" dev="sockfs" ino=8434 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 78.425122][ T4529] loop0: detected capacity change from 0 to 1764 [ 78.432264][ T4529] iso9660: Unknown parameter 'showassc' [ 78.621758][ T4535] loop4: detected capacity change from 0 to 2048 [ 78.628483][ T4535] EXT4-fs: Ignoring removed orlov option [ 78.652392][ T4535] EXT4-fs: Ignoring removed oldalloc option [ 78.683931][ T4535] EXT4-fs (loop4): filesystem too large to mount safely on this system [ 78.791236][ T4535] loop4: detected capacity change from 0 to 1024 [ 78.821258][ T4535] EXT4-fs: Ignoring removed bh option [ 78.836584][ T4536] tipc: Enabling of bearer rejected, failed to enable media [ 78.859855][ T4535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.889063][ T4494] loop2: detected capacity change from 0 to 1024 [ 78.978655][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.130728][ T4494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.355567][ T4495] EXT4-fs error (device loop2): ext4_free_inode:354: comm syz.2.286: bit already cleared for inode 13 [ 79.363493][ T4549] netlink: 'syz.4.303': attribute type 1 has an invalid length. [ 79.456434][ T4549] bond4: entered promiscuous mode [ 79.476508][ T4549] bond4: entered allmulticast mode [ 79.524410][ T4549] 8021q: adding VLAN 0 to HW filter on device bond4 [ 79.595559][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.783105][ T4558] loop0: detected capacity change from 0 to 8192 [ 79.860396][ T3303] loop0: p1 < > p2 p4 < p5 > [ 79.869914][ T3303] loop0: partition table partially beyond EOD, truncated [ 79.887442][ T3303] loop0: p1 start 134217728 is beyond EOD, truncated [ 79.902358][ T3303] loop0: p2 size 591360 extends beyond EOD, truncated [ 79.924662][ T3303] loop0: p5 size 591360 extends beyond EOD, truncated [ 80.083210][ T4558] loop0: p1 < > p2 p4 < p5 > [ 80.088009][ T4558] loop0: partition table partially beyond EOD, truncated [ 80.095634][ T4558] loop0: p1 start 134217728 is beyond EOD, truncated [ 80.102864][ T4558] loop0: p2 size 591360 extends beyond EOD, truncated [ 80.126244][ T4572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.135603][ T4558] loop0: p5 size 591360 extends beyond EOD, truncated [ 80.140465][ T4572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.324498][ T4572] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.331814][ T4572] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.345236][ T4580] netlink: 20 bytes leftover after parsing attributes in process `syz.3.312'. [ 80.360585][ T4582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.313'. [ 80.365772][ T4578] loop4: detected capacity change from 0 to 1024 [ 80.420431][ T4578] EXT4-fs: Ignoring removed bh option [ 80.452085][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 80.452197][ T3532] udevd[3532]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 80.464397][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 80.501501][ T4578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.547398][ T4591] program syz.0.315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.548894][ T4572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.582894][ T4572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.609414][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.664635][ T4595] netlink: 28 bytes leftover after parsing attributes in process `syz.0.317'. [ 80.716621][ T4596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.733207][ T4596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.782956][ T356] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.793220][ T356] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.891517][ T356] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.913797][ T356] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.957646][ T4608] IPVS: set_ctl: invalid protocol: 59 172.20.20.52:20001 [ 81.274107][ T4612] loop0: detected capacity change from 0 to 4096 [ 81.282881][ T4612] EXT4-fs: Ignoring removed bh option [ 81.329680][ T4612] ext2: Bad value for 'stripe' [ 81.952070][ T4624] loop0: detected capacity change from 0 to 512 [ 81.976475][ T4624] EXT4-fs: Ignoring removed nobh option [ 82.084268][ T4624] EXT4-fs (loop0): orphan cleanup on readonly fs [ 82.127816][ T4624] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.326: EA inode hash validation failed [ 82.158432][ T4632] syzkaller0: entered promiscuous mode [ 82.172067][ T4624] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 82.190192][ T4632] syzkaller0: entered allmulticast mode [ 82.224594][ T4624] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.326: corrupted inode contents [ 82.257727][ T4624] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.260428][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 82.277205][ C0] EXT4-fs (loop0): initial error at time 1771903466: ext4_do_update_inode:5569: inode 15 [ 82.287596][ C0] EXT4-fs (loop0): last error at time 1771903466: ext4_do_update_inode:5569: inode 15 [ 82.290914][ T4624] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.326: mark_inode_dirty error [ 82.403567][ T4624] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.404436][ T4624] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.326: corrupted inode contents [ 82.427123][ T4624] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.427991][ T4624] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.326: mark_inode_dirty error [ 82.451177][ T4624] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.453670][ T4624] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.326: mark inode dirty (error -117) [ 82.480292][ T4634] syzkaller0: entered promiscuous mode [ 82.486135][ T4634] syzkaller0: entered allmulticast mode [ 82.493894][ T4624] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.497906][ T4634] FAULT_INJECTION: forcing a failure. [ 82.497906][ T4634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.520536][ T4624] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 82.530295][ T4634] CPU: 1 UID: 0 PID: 4634 Comm: syz.3.330 Tainted: G W syzkaller #0 PREEMPT(full) [ 82.530327][ T4634] Tainted: [W]=WARN [ 82.530335][ T4634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.530345][ T4634] Call Trace: [ 82.530351][ T4634] [ 82.530390][ T4634] __dump_stack+0x1d/0x30 [ 82.530419][ T4634] dump_stack_lvl+0x95/0xd0 [ 82.530481][ T4634] dump_stack+0x15/0x1b [ 82.530503][ T4634] should_fail_ex+0x263/0x280 [ 82.530526][ T4634] should_fail+0xb/0x20 [ 82.530545][ T4634] should_fail_usercopy+0x1a/0x20 [ 82.530596][ T4634] _copy_from_user+0x1c/0xb0 [ 82.530623][ T4634] __sys_sendto+0x1ca/0x4d0 [ 82.530718][ T4634] __x64_sys_sendto+0x76/0x90 [ 82.530743][ T4634] x64_sys_call+0x2d35/0x3020 [ 82.530770][ T4634] do_syscall_64+0x12c/0x370 [ 82.530803][ T4634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.530865][ T4634] RIP: 0033:0x7f4210c4c629 [ 82.530882][ T4634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.530900][ T4634] RSP: 002b:00007f420f6a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 82.530983][ T4634] RAX: ffffffffffffffda RBX: 00007f4210ec5fa0 RCX: 00007f4210c4c629 [ 82.530997][ T4634] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 82.531063][ T4634] RBP: 00007f420f6a7090 R08: 0000200000000140 R09: 0000000000000014 [ 82.531134][ T4634] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 82.531146][ T4634] R13: 00007f4210ec6038 R14: 00007f4210ec5fa0 R15: 00007ffe87c07108 [ 82.531165][ T4634] [ 82.531855][ T4624] EXT4-fs (loop0): 1 orphan inode deleted [ 82.720672][ T4624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 82.815728][ T4639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.332'. [ 82.990360][ T4644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.001660][ T4644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.020531][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.156691][ T4647] loop3: detected capacity change from 0 to 512 [ 83.189331][ T4647] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.192678][ T4651] loop0: detected capacity change from 0 to 1024 [ 83.221341][ T4651] EXT4-fs: Ignoring removed bh option [ 83.242736][ T4647] EXT4-fs (loop3): 1 orphan inode deleted [ 83.251999][ T4647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.282885][ T4651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.336104][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.380019][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.416686][ T4666] loop0: detected capacity change from 0 to 512 [ 83.476836][ T4672] loop1: detected capacity change from 0 to 512 [ 83.510176][ T4672] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.520531][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 83.520544][ T28] audit: type=1400 audit(1771903467.960:531): avc: denied { create } for pid=4667 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.548733][ T4666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.563882][ T4670] delete_channel: no stack [ 83.571399][ T4672] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.342: bg 0: block 4: invalid block bitmap [ 83.582704][ T4670] delete_channel: no stack [ 83.588925][ T4666] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.608709][ T28] audit: type=1326 audit(1771903468.050:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4210c4c629 code=0x7ffc0000 [ 83.614029][ T4672] loop1: lost filesystem error report for type 5 error -117 [ 83.662000][ T28] audit: type=1326 audit(1771903468.090:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4210c0cece code=0x7ffc0000 [ 83.722009][ T28] audit: type=1326 audit(1771903468.090:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4210c0cece code=0x7ffc0000 [ 83.745983][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 83.746002][ C1] EXT4-fs (loop1): initial error at time 1771903468: ext4_validate_block_bitmap:432 [ 83.746027][ C1] EXT4-fs (loop1): last error at time 1771903468: ext4_validate_block_bitmap:432 [ 83.772060][ T28] audit: type=1400 audit(1771903468.100:535): avc: denied { listen } for pid=4676 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.776189][ T4672] EXT4-fs (loop1): 1 truncate cleaned up [ 83.792803][ T28] audit: type=1400 audit(1771903468.100:536): avc: denied { getopt } for pid=4676 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.818465][ T28] audit: type=1326 audit(1771903468.160:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4210c4c629 code=0x7ffc0000 [ 83.842445][ T28] audit: type=1326 audit(1771903468.160:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4210c4c629 code=0x7ffc0000 [ 83.867188][ T4672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.936527][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.956288][ T28] audit: type=1400 audit(1771903468.400:539): avc: denied { watch } for pid=4687 comm="syz.2.346" path="/proc/151" dev="proc" ino=7814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 83.981561][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.996170][ T3392] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 84.004479][ T28] audit: type=1400 audit(1771903468.440:540): avc: denied { read write } for pid=4692 comm="syz.1.347" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 84.031486][ T4698] netlink: 60 bytes leftover after parsing attributes in process `syz.2.349'. [ 84.032427][ T3392] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.050769][ T4697] netlink: 60 bytes leftover after parsing attributes in process `syz.2.349'. [ 84.069051][ T4696] loop3: detected capacity change from 0 to 2048 [ 84.080275][ T4697] netlink: 60 bytes leftover after parsing attributes in process `syz.2.349'. [ 84.090326][ T4696] EXT4-fs: Ignoring removed orlov option [ 84.097014][ T4696] EXT4-fs: Ignoring removed oldalloc option [ 84.128162][ T4696] EXT4-fs (loop3): filesystem too large to mount safely on this system [ 84.160022][ T4699] fido_id[4699]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 84.222373][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 84.244106][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.349666][ T4715] loop1: detected capacity change from 0 to 512 [ 84.369516][ T4696] EXT4-fs: Ignoring removed bh option [ 84.380537][ T4715] EXT4-fs: Ignoring removed orlov option [ 84.390247][ T4715] EXT4-fs: Ignoring removed oldalloc option [ 84.425019][ T4715] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a043c018, mo2=0002] [ 84.433773][ T4715] System zones: 0-2, 18-18, 34-35 [ 84.444593][ T4715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.458631][ T4696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.481179][ T4715] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.892472][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.902319][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.927616][ T4722] set_capacity_and_notify: 1 callbacks suppressed [ 84.927632][ T4722] loop0: detected capacity change from 0 to 512 [ 84.944357][ T4722] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.977202][ T4722] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.358: bg 0: block 4: invalid block bitmap [ 85.022705][ T4725] loop3: detected capacity change from 0 to 512 [ 85.039222][ T4722] loop0: lost filesystem error report for type 5 error -117 [ 85.040075][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 85.053905][ C1] EXT4-fs (loop0): initial error at time 1771903469: ext4_validate_block_bitmap:432 [ 85.063594][ C1] EXT4-fs (loop0): last error at time 1771903469: ext4_validate_block_bitmap:432 [ 85.064486][ T4722] EXT4-fs (loop0): 1 truncate cleaned up [ 85.095198][ T4725] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 85.130807][ T4722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.150470][ T4725] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 85.175153][ T4725] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #11: comm syz.3.357: corrupted inode contents [ 85.187022][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 85.187042][ C0] EXT4-fs (loop3): initial error at time 1771903469: mb_free_blocks:2047: inode 11: block 64 [ 85.187079][ C0] EXT4-fs (loop3): last error at time 1771903469: mb_free_blocks:2047: inode 11: block 64 [ 85.230713][ T4730] FAULT_INJECTION: forcing a failure. [ 85.230713][ T4730] name fail_futex, interval 1, probability 0, space 0, times 1 [ 85.254022][ T4730] CPU: 0 UID: 0 PID: 4730 Comm: syz.1.356 Tainted: G W syzkaller #0 PREEMPT(full) [ 85.254054][ T4730] Tainted: [W]=WARN [ 85.254060][ T4730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 85.254071][ T4730] Call Trace: [ 85.254078][ T4730] [ 85.254085][ T4730] __dump_stack+0x1d/0x30 [ 85.254141][ T4730] dump_stack_lvl+0x95/0xd0 [ 85.254165][ T4730] dump_stack+0x15/0x1b [ 85.254187][ T4730] should_fail_ex+0x263/0x280 [ 85.254210][ T4730] should_fail+0xb/0x20 [ 85.254270][ T4730] get_futex_key+0x12f/0xbe0 [ 85.254293][ T4730] ? css_rstat_updated+0xbb/0x280 [ 85.254311][ T4730] futex_wake+0x84/0x380 [ 85.254341][ T4730] ? perf_lock_task_context+0x260/0x2d0 [ 85.254367][ T4730] do_futex+0x323/0x380 [ 85.254395][ T4730] mm_release+0xa1/0x190 [ 85.254421][ T4730] exit_mm_release+0x25/0x30 [ 85.254517][ T4730] exit_mm+0x37/0x180 [ 85.254545][ T4730] do_exit+0x3fa/0x15a0 [ 85.254577][ T4730] ? __list_del_entry_valid_or_report+0x65/0x130 [ 85.254688][ T4730] do_group_exit+0xfe/0x140 [ 85.254718][ T4730] ? get_signal+0xe4c/0xf60 [ 85.254748][ T4730] get_signal+0xe54/0xf60 [ 85.254824][ T4730] ? mutex_unlock+0x4e/0x90 [ 85.254854][ T4730] arch_do_signal_or_restart+0x96/0x450 [ 85.254906][ T4730] exit_to_user_mode_loop+0x6a/0x6f0 [ 85.254985][ T4730] ? trace_syscall_exit+0xe1/0x110 [ 85.255010][ T4730] do_syscall_64+0x249/0x370 [ 85.255106][ T4730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.255148][ T4730] RIP: 0033:0x7f299b93c629 [ 85.255166][ T4730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.255185][ T4730] RSP: 002b:00007f299a355028 EFLAGS: 00000246 ORIG_RAX: 0000000000000114 [ 85.255207][ T4730] RAX: 0000000000000001 RBX: 00007f299bbb6180 RCX: 00007f299b93c629 [ 85.255222][ T4730] RDX: 00000000000008f5 RSI: 0000000000000008 RDI: 0000000000000003 [ 85.255235][ T4730] RBP: 00007f299a355090 R08: 0000000000000000 R09: 0000000000000000 [ 85.255259][ T4730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.255271][ T4730] R13: 00007f299bbb6218 R14: 00007f299bbb6180 R15: 00007ffd513cc768 [ 85.255292][ T4730] [ 85.310377][ T4725] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 85.486981][ T4725] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #11: comm syz.3.357: mark_inode_dirty error [ 85.512071][ T4725] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 85.521434][ T4725] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.357: invalid indirect mapped block 1 (level 1) [ 85.544412][ T4725] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 85.544728][ T4725] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #11: comm syz.3.357: corrupted inode contents [ 85.566792][ T4725] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 85.566936][ T4725] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 85.590496][ T4725] loop3: lost filesystem error report for type 5 error -117 [ 85.590686][ T4725] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #11: comm syz.3.357: corrupted inode contents [ 85.590712][ T4725] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 85.590876][ T4725] EXT4-fs error (device loop3): ext4_truncate:4587: inode #11: comm syz.3.357: mark_inode_dirty error [ 85.591028][ T4725] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 85.640726][ T4725] loop3: lost filesystem error report for type 5 error -117 [ 85.648021][ T4725] EXT4-fs (loop3): 1 truncate cleaned up [ 85.661943][ T4725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.675341][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.683657][ T4725] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz.3.357: invalid fast symlink length 39 [ 85.697585][ T4725] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz.3.357: invalid fast symlink length 39 [ 85.722521][ T4742] loop0: detected capacity change from 0 to 1024 [ 85.752526][ T4742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.772714][ T4747] loop2: detected capacity change from 0 to 128 [ 85.780181][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.930501][ T4754] netlink: 766 bytes leftover after parsing attributes in process `syz.3.363'. [ 85.963336][ T4754] loop3: detected capacity change from 0 to 512 [ 85.970243][ T4754] EXT4-fs: Ignoring removed nobh option [ 86.003698][ T4754] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 86.046158][ T4754] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.363: attempt to clear invalid blocks 1 len 1 [ 86.089492][ T4767] netlink: 'syz.2.369': attribute type 1 has an invalid length. [ 86.091401][ T4754] EXT4-fs (loop3): Remounting filesystem read-only [ 86.104875][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 86.104900][ C1] EXT4-fs (loop3): initial error at time 1771903470: ext4_clear_blocks:876: inode 13 [ 86.104949][ C1] EXT4-fs (loop3): last error at time 1771903470: ext4_clear_blocks:876: inode 13 [ 86.144465][ T4754] EXT4-fs (loop3): 1 truncate cleaned up [ 86.151417][ T4754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.160528][ T4767] bond2: entered promiscuous mode [ 86.172583][ T4767] bond2: entered allmulticast mode [ 86.178076][ T4767] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.183833][ T4751] ieee802154 phy0 wpan0: encryption failed: -22 [ 86.281233][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.384023][ T4776] loop1: detected capacity change from 0 to 2048 [ 86.392056][ T4777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.392613][ T4776] EXT4-fs: Ignoring removed orlov option [ 86.408442][ T4776] EXT4-fs: Ignoring removed oldalloc option [ 86.418995][ T4776] EXT4-fs (loop1): filesystem too large to mount safely on this system [ 86.441826][ T4777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.609097][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.470889][ T4776] loop1: detected capacity change from 0 to 1024 [ 87.520001][ T4776] EXT4-fs: Ignoring removed bh option [ 87.598930][ T4776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.823447][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.020858][ T2998] ================================================================== [ 88.029056][ T2998] BUG: KCSAN: data-race in d_delete / lookup_fast [ 88.035492][ T2998] [ 88.037821][ T2998] read-write to 0xffff88811a8ef900 of 4 bytes by task 3529 on cpu 0: [ 88.045983][ T2998] d_delete+0xbe/0xe0 [ 88.049983][ T2998] d_delete_notify+0x32/0x100 [ 88.054673][ T2998] vfs_unlink+0x289/0x490 [ 88.059013][ T2998] filename_unlinkat+0x1e2/0x410 [ 88.063978][ T2998] __se_sys_unlink+0x2b/0xe0 [ 88.068564][ T2998] __x64_sys_unlink+0x1f/0x30 [ 88.073380][ T2998] x64_sys_call+0x2eb6/0x3020 [ 88.078260][ T2998] do_syscall_64+0x12c/0x370 [ 88.082854][ T2998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.088913][ T2998] [ 88.091228][ T2998] read to 0xffff88811a8ef900 of 4 bytes by task 2998 on cpu 1: [ 88.098774][ T2998] lookup_fast+0xf0/0x320 [ 88.103115][ T2998] path_lookupat+0x15c/0x500 [ 88.107719][ T2998] filename_lookup+0x190/0x390 [ 88.112483][ T2998] do_readlinkat+0x74/0x2f0 [ 88.116988][ T2998] __x64_sys_readlink+0x47/0x60 [ 88.121837][ T2998] x64_sys_call+0x2b51/0x3020 [ 88.126524][ T2998] do_syscall_64+0x12c/0x370 [ 88.131120][ T2998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.137016][ T2998] [ 88.139413][ T2998] value changed: 0x00300180 -> 0x00004080 [ 88.145134][ T2998] [ 88.147446][ T2998] Reported by Kernel Concurrency Sanitizer on: [ 88.153590][ T2998] CPU: 1 UID: 0 PID: 2998 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 88.164003][ T2998] Tainted: [W]=WARN [ 88.167795][ T2998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.177840][ T2998] ================================================================== [ 88.319207][ T4816] FAULT_INJECTION: forcing a failure. [ 88.319207][ T4816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.333162][ T4816] CPU: 0 UID: 0 PID: 4816 Comm: syz.2.380 Tainted: G W syzkaller #0 PREEMPT(full) [ 88.333199][ T4816] Tainted: [W]=WARN [ 88.333207][ T4816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.333275][ T4816] Call Trace: [ 88.333281][ T4816] [ 88.333366][ T4816] __dump_stack+0x1d/0x30 [ 88.333388][ T4816] dump_stack_lvl+0x95/0xd0 [ 88.333476][ T4816] dump_stack+0x15/0x1b [ 88.333572][ T4816] should_fail_ex+0x263/0x280 [ 88.333595][ T4816] should_fail+0xb/0x20 [ 88.333615][ T4816] should_fail_usercopy+0x1a/0x20 [ 88.333639][ T4816] _copy_to_user+0x20/0xa0 [ 88.333693][ T4816] simple_read_from_buffer+0xb5/0x130 [ 88.333712][ T4816] proc_fail_nth_read+0x10e/0x150 [ 88.333821][ T4816] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.333843][ T4816] vfs_read+0x1ab/0x7f0 [ 88.333867][ T4816] ? __rcu_read_unlock+0x4e/0x70 [ 88.333951][ T4816] ? __fget_files+0x184/0x1c0 [ 88.333973][ T4816] ? mutex_lock+0x57/0x90 [ 88.333996][ T4816] ksys_read+0xdc/0x1a0 [ 88.334030][ T4816] __x64_sys_read+0x40/0x50 [ 88.334141][ T4816] x64_sys_call+0x2886/0x3020 [ 88.334169][ T4816] do_syscall_64+0x12c/0x370 [ 88.334210][ T4816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.334241][ T4816] RIP: 0033:0x7f1f81f9cece [ 88.334255][ T4816] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.334270][ T4816] RSP: 002b:00007f1f80a36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.334369][ T4816] RAX: ffffffffffffffda RBX: 00007f1f80a376c0 RCX: 00007f1f81f9cece [ 88.334381][ T4816] RDX: 000000000000000f RSI: 00007f1f80a370a0 RDI: 0000000000000003 [ 88.334392][ T4816] RBP: 00007f1f80a37090 R08: 0000000000000000 R09: 0000000000000000 [ 88.334403][ T4816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.334414][ T4816] R13: 00007f1f82256038 R14: 00007f1f82255fa0 R15: 00007fff25ea4a78 [ 88.334440][ T4816]