last executing test programs: 7.326477628s ago: executing program 3 (id=1514): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) epoll_create1(0x0) socket(0x1d, 0x2, 0x6) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 7.119424258s ago: executing program 3 (id=1519): syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @private=0xa010102, {[@generic={0x7, 0x5, "044158"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d8}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) setsockopt$packet_tx_ring(r5, 0x107, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) preadv(r4, 0x0, 0x0, 0x8, 0x7) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) writev(r6, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) writev(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_evm(r3, &(0x7f0000000580), &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x9, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', r7, 0x2f, 0x4, 0x3, 0x0, 0x30, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x7, 0x700, 0x7ff, 0x8}}) 3.742110035s ago: executing program 3 (id=1526): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r1, 0x9) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r2, 0x4b48, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r3 = socket(0x2, 0x80805, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x2, 0x8, 0x400, 0xfffffffd, 0x4}, 0x14) writev(r0, &(0x7f0000000980)=[{&(0x7f00000002c0)="0fc481d447827ff7ed115698872494", 0xf}, {&(0x7f0000000680)="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", 0x15c}, {&(0x7f0000000340)="317e43f3ee1a0b73a4c0f1083e07ab2e5976aaa005986ee92afa5573dd4bbaed27434f5143b7a075b0384938e35b8dac3143c34da764", 0x36}, {&(0x7f00000008c0)="3d0de0bd60b555dab16e7a21ad30ca65cb234a92c8a85acf325b480445d375c434b58d823c68f64d0dd8d50eee6e66ca5a8e9c8f6307fee4b7262472efac1a685c73527a0c8ee925c69ab54f098cae670000e7b2915c5e314c47c333c354d3cd194aa4331107c143be0632d2ccaa", 0x6e}], 0x4) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x107}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50f", 0xb2}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.705346457s ago: executing program 1 (id=1527): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x80) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="d77c2494aee7f13c7ffee047d74a49cdc513c47fee5ad710da6f04a6522020289394ef66d9d59ea489b56c48bab2a7c94c301d66d7e6810394b996da4b2fbb369c422390870120ee80eb35589e5901f15ffe002589f94f128d19728b64b1", 0x5e}], 0x1, &(0x7f0000000240)=[@ip_ttl={{0x14, 0x0, 0x2, 0xe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x48}, 0x20004004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) dup(0xffffffffffffffff) r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) 3.613699851s ago: executing program 1 (id=1528): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x9) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, @phonet={0x23, 0x5, 0x8, 0x3}, @phonet={0x23, 0x2, 0x1, 0xef}, 0xaf4f, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)='veth1_to_bridge\x00', 0x5, 0x8001, 0x9}) 3.358128634s ago: executing program 0 (id=1532): io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 3.268373778s ago: executing program 0 (id=1534): openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) 3.214963591s ago: executing program 0 (id=1536): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x10c108, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r2}, 0xc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) r4 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x80c002, &(0x7f00000009c0)={[{@errors_remount}, {@grpquota}]}, 0x2, 0x517, &(0x7f0000000140)="$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") ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x2, 0x6, 0x2, 0xc, 0x1}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x6, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x48, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908fec000000000000000ff0000ac14140a000000000000000000000000ac1414aa"], 0xfdef) ftruncate(r4, 0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x9) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000048000), 0x0) add_key$keyring(0x0, &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x20) acct(&(0x7f0000000100)='./file1\x00') 2.820809831s ago: executing program 2 (id=1538): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2.783198452s ago: executing program 1 (id=1539): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x25, 0x4, @void}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet6(0xa, 0x3, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000080)=0xfff, 0x4) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$sock_ifreq(r2, 0x8949, &(0x7f0000000180)={'batadv_slave_1\x00', @ifru_addrs=@isdn={0x22, 0xff, 0x3d, 0x92, 0x7}}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f00000009c0)={[{@grpquota}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x164, 0x10, 0x713, 0x0, 0x25dfdbfe, {{@in=@rand_addr=0x64010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x4, 0x2, 0x0, 0x0, 0x1d}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0xfe, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffff55, 0x1, 0x6, 0x7fffffff, 0x543}, {0x4, 0x7ffffffffffffffe, 0x6, 0x3ffffffffffffffc}, {0x2}, 0x70bd2d, 0x3504, 0x2, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e24, @in=@private=0xa010100}}, @algo_aead={0x56, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x50, 0x40, "210466d38547aa140db9"}}]}, 0x164}, 0x1, 0x0, 0x0, 0x880}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@local, @in=@remote, 0x4e22, 0x8, 0x4e23, 0x0, 0xa, 0x80, 0x0, 0x2}, {0x1, 0x3, 0x8, 0x6, 0x2, 0x600d382c, 0x80, 0x4}, {0x17e, 0x9, 0x8, 0xfffffffffffffff8}, 0x100, 0x6e6bbb, 0x0, 0x0, 0x3, 0x2}, {{@in=@broadcast, 0x4d3, 0x2b}, 0xa, @in6=@mcast1, 0x3503, 0x0, 0x3, 0x7, 0xc, 0x6, 0x400}}, 0xe8) write$P9_RUNLINKAT(r6, 0x0, 0x0) r7 = memfd_create(0x0, 0x0) fcntl$setpipe(r5, 0x407, 0x8001a0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000810}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24020000210023f50000001e00cc000010000000e97209bb38200ce8c2a1d9f8329122edff1d6649a5df2aeb"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) splice(r5, 0x0, r7, 0x0, 0x200005, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@noauto_da_alloc}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000000440)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") 2.558434153s ago: executing program 3 (id=1540): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) (async) close$binfmt(r0) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) (async) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000c80)='./bus\x00', 0x210000, &(0x7f0000000080)={[{@max_batch_time={'max_batch_time', 0x3d, 0x479}}, {@nomblk_io_submit}, {@jqfmt_vfsold}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xffff}}, {@resgid}, {@auto_da_alloc}, {@grpid}, {@jqfmt_vfsv0}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}, {@obj_role={'obj_role', 0x3d, '@\\{)+E('}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x34, 0x33, 0x39, 0x35, 0x32, 0x34, 0x39], 0x2d, [0x35, 0x63, 0x0, 0x38], 0x2d, [0x62, 0x30, 0x1, 0x34], 0x2d, [0x34, 0x38, 0x65, 0x31], 0x2d, [0x66, 0x30, 0x30, 0x64, 0x30, 0x35, 0x7dfa56f01d02499e, 0x38]}}}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$eJzs3U1rXFUfAPD/nUzSNu3zNIVS1IUUurBSO2kSXyoI1pWIFgu6r0MyDSWTTslMShMLtgu7cSNFELEgfgD3LotfwE9R0EKREnQhQuRO7qTTZCavE2fS+f3gtufMuTfn/nPuOTln7gw3gL51Mv0nF/FiRHydRBxtKstHVnhyZb+lJ7cm0y2J5eVP/kgiyV5r7J9k/x/OMi9ExC9fRpzJra+3urA4UyyXS3NZfrQ2e320urB49upscbo0Xbo2PjFx/o2J8bfferNjsb566a/vPn7wwfmvTi19+9OjY/eSuBBHsrLmOHbhdnPmZPGfLDUYF9bsONaBynpJ0u0TYEcGsn4+GOkYcDQGsl4PPP++iIhloE8l+j/0qcY8oLG279A6eN94/N7KAqge+1Bz/PmV90biYH1tNLyUPLMySte7Ix2oP63j59/v30u32Ph9iEOb5AG25fadiDiXz68f/5Ns/Nu5c/U3jze2to5++/sD3fQgnf+81mr+l1ud/0SL+c/hFn13Jzbv/7lHHaimrXT+907L+e/q0DUykOX+V5/zDSZXrpZL5yLi/xFxOgYPpPmN7uecX3q43K6sef6Xbmn9jblgdh6P8geePWaqWCtGxNBu4m54fCfipXyr+JPV9k9atH/6+7i0xTpOlO6/3K5s8/j31vKPEa+0bP+nd7SSje9Pjtavh9HGVbHen3dP/Nqu/m7Hn7b/8MbxjyTN92ur26/jh4N/l9qVpfEP7+D6H0o+racbneBmsVabG4sYSj5a//r402Mb+cb+afynT63E/+xkJbfh9Z8uvj7bYvx3j99tu2svtP/Uttp/+4mHH37+fbv6tzb+vV5Pnc5eyca/1rJrZasnuNvfHwAAAAAAAPSSXEQciSRXWE3ncoXCyuc7jsdwrlyp1s5cqcxfm4r6d2VHYjDXuNN9tOnzEGPZ52Eb+fE1+YmIOBYR3wwcqucLk5XyVLeDBwAAAAAAAAAAAAAAAAAAgB5xuM33/1O/DXT77IA9V3+wwYFunwXQDZs+8r8TT3oCetKm/R94bun/0L/0f+hfa/t/R54sDOwL/v5D/9L/oX/p/9C/9H8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqEsXL6bb8tKTW5NpfurGwvxM5cbZqVJ1pjA7P1mYrMxdL0xXKtPlUmGyMrvZzytXKtfHxmP+5mitVK2NVhcWL89W5q/VLl+dLU6XLpcG/5OoAAAAAAAAAAAAAAAAAAAAYH+pLizOFMvl0txqIp+VzK0v6tPEu9ETp7GXAa7Y0eH5XolibxLvD/TEaewmcSdr3u0d1aUBCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa+DcAAP//Rm0oPg==") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) setresuid(0x0, 0xee01, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000240)={0x4, 0x7, 0x7fff}, 0xc) timer_create(0x3, 0x0, &(0x7f0000000340)=0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) timer_gettime(r3, &(0x7f0000000100)) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async, rerun: 64) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xfffffffffffffe6d, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="0815010021100000280012800b00010069703667726500001800028014000700fc01000000000000000000000000000108000a00", @ANYRES32=r6, @ANYBLOB="46d29db7013ef809f10172e91f8d3de3def2482178bb6cccdadaf356c3941e70256bba03000000eca221adf80d2ce7c55fc19f6e437aeabe6096fe270fccf2a46c56efd21b02000000000d6aa7c5482ff4765bc9225cb004b94a8ea71cfa68"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010002000800000000000000000000000cce952a7b614b1ac5395c7d81405d0e0d447aba44b77a59978c8b3924e2ace072656fedec4fce9b8f784bd0a4d2c7be436cac00810d9da8fb5a2aa00aad10e03b3dc26135806784eba5c2777f822455635a5f57d5ff18dac66cd609a69ad8c090c10025cf9fea8a46915c7f039b156", @ANYRES32=r6, @ANYBLOB="01010000000002001c00128009000100626f6e64000000000c0002800800090001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44040}, 0x0) (async) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000002, &(0x7f0000000180)=[{0x1000, 0x60d, 0xda5a}, {0x8000000000000001, 0x5, 0x1000000000000a2}], 0x2, 0x237, 0x0, 0x2, 0x0, 0x2}) (async) r8 = socket$kcm(0x2b, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r9) sendmsg$TIPC_CMD_SET_LINK_PRI(r9, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r10, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x2, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x40010) (async) listen(r1, 0xca) (async) setsockopt$sock_attach_bpf(r8, 0x6, 0x21, &(0x7f0000000200), 0x10) 2.474357088s ago: executing program 3 (id=1541): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x54, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1, @ANYRES8=r4], 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 2.341099174s ago: executing program 0 (id=1542): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a00800008000600"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1.888386127s ago: executing program 2 (id=1546): syz_emit_ethernet(0x4a, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x5, 0x40, 0x2}, &(0x7f0000000900)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000c80)={0x0, 0xc0, "6f7e5cb460507151297e35fc878e6d14e87f05291a6a645d6dae96cd1c8f5e74602343bd701b41efbdf13439c50801174eae3c0c85f3aad20d032ab2778c8f8ee7efdd3b44b9361cf0a53934e1f8e3a838dde19fac6d5ac62279b381e32715b4a4bb22f40149de2f3d5eba8124b4290d7817c59891fcd7ade2302b71f4dba00e3f2a3831f97f103517d0c888ccd84ca73e1325ca8ecdbccabd7947a8bf05a093b34c5b3d20d817732fd6e94908c411ce0931f1adfda44f9646867ec22b87f981"}, &(0x7f0000000d80)=0xc8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x85, &(0x7f0000000380)={r3, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f0000000500)=0x90) 1.536277004s ago: executing program 1 (id=1549): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10e, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {@nodelalloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x458, &(0x7f0000000300)="$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") setfsgid(0xee00) syz_clone3(&(0x7f00000002c0)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r0, 0x0, 0x0, 0x65, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.360908103s ago: executing program 4 (id=1552): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000340)={{&(0x7f0000000640), 0x0, 0x40, 0x8, 0xfffffffffffffffe}, {&(0x7f0000000140)=[{0x5cdea3ea, 0x2}, {0x9, 0x84}, {0x4, 0x800}, {0x4fe9, 0x3}, {0xfffffffffffffff9, 0x8}], 0x5, 0x10, 0x0, 0x3aa}, {0x0, 0x0, 0x8, 0x6, 0x3ff}, {&(0x7f0000000240)=[{0x9, 0x7f, 0x351, 0x7, 0x54}, {0x8, 0xa8a, 0x8, 0xfffffffffffffff9, 0x663}], 0x2, 0x28, 0x8, 0x1476}, {&(0x7f00000002c0)=[0x1400000, 0xfffffffffffffff7, 0x528, 0xe], 0x4, 0x8, 0xf8, 0x1}}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000600)=ANY=[@ANYRES16, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x1, 0x49}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000001680)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x1000, @mcast2}, 0x1c, 0x0}}], 0x1, 0x84) ppoll(&(0x7f0000000080)=[{r3, 0x50b5}, {r2, 0x5404}], 0x2, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.300675986s ago: executing program 2 (id=1553): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000740)='./file0\x00', 0x2e408a4, &(0x7f00000006c0)=ANY=[], 0x5, 0x80a, &(0x7f0000000800)="$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") bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) 1.299975676s ago: executing program 0 (id=1554): fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x7045, &(0x7f0000000340)={0x0, 0x2b13, 0x10000, 0x0, 0x25c, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x3d3e, 0x2001, 0x0, 0x0, 0x0) 1.065364737s ago: executing program 2 (id=1555): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x0, 0x56}, 0x28) getgroups(0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x6000, 0x2, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, 0x0, 0x0, r3, 0x1000) setregid(0x0, r3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r2}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xd, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x101081) socket$nl_generic(0x10, 0x3, 0x10) 675.274757ms ago: executing program 1 (id=1556): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) epoll_create1(0x0) socket(0x1d, 0x2, 0x6) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 661.981307ms ago: executing program 3 (id=1557): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x25, 0x4, @void}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet6(0xa, 0x3, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000080)=0xfff, 0x4) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$sock_ifreq(r2, 0x8949, &(0x7f0000000180)={'batadv_slave_1\x00', @ifru_addrs=@isdn={0x22, 0xff, 0x3d, 0x92, 0x7}}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f00000009c0)={[{@grpquota}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x164, 0x10, 0x713, 0x0, 0x25dfdbfe, {{@in=@rand_addr=0x64010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x4, 0x2, 0x0, 0x0, 0x1d}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0xfe, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffff55, 0x1, 0x6, 0x7fffffff, 0x543}, {0x4, 0x7ffffffffffffffe, 0x6, 0x3ffffffffffffffc}, {0x2}, 0x70bd2d, 0x3504, 0x2, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e24, @in=@private=0xa010100}}, @algo_aead={0x56, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x50, 0x40, "210466d38547aa140db9"}}]}, 0x164}, 0x1, 0x0, 0x0, 0x880}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@local, @in=@remote, 0x4e22, 0x8, 0x4e23, 0x0, 0xa, 0x80, 0x0, 0x2}, {0x1, 0x3, 0x8, 0x6, 0x2, 0x600d382c, 0x80, 0x4}, {0x17e, 0x9, 0x8, 0xfffffffffffffff8}, 0x100, 0x6e6bbb, 0x0, 0x0, 0x3, 0x2}, {{@in=@broadcast, 0x4d3, 0x2b}, 0xa, @in6=@mcast1, 0x3503, 0x0, 0x3, 0x7, 0xc, 0x6, 0x400}}, 0xe8) write$P9_RUNLINKAT(r6, &(0x7f0000000140)={0x7, 0x4d, 0x2}, 0x7) r7 = memfd_create(0x0, 0x0) fcntl$setpipe(r5, 0x407, 0x8001a0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x28, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000810}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24020000210023f50000001e00cc000010000000e97209bb38200ce8c2a1d9f8329122edff1d6649a5df2aeb"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) splice(r5, 0x0, r7, 0x0, 0x200005, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@noauto_da_alloc}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000000440)="$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") 468.383357ms ago: executing program 4 (id=1558): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000480)={[{@data_err_abort}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x56b, &(0x7f00000018c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 414.650789ms ago: executing program 1 (id=1559): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x30}], 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xfffffffffffffe09, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4}}}, 0x54}}, 0x4050) (async) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x4, @private1, 0xe60}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)="55ed", 0x2}, {&(0x7f0000000500)="9ccdcd2bc8745bdf03ff84d2d0fb9ef2d19023912770903f97ee534269d784ef6254c4d69e058c423a9ce9a02c47a16bd59d195380523ff2809c5fac0273aeb4408b87fefa14b7b7ca86eb9bd411d3df3ae15f1703f04198ea47a37b9de2c9b312189e3b125148ab84c6b755d020152a1f5bb5c464642284b19a570b950135bdccfecc5b2b2734b88588d9dc64a3bdc5366d62df866884c00a2faf89006540f8ebfbaecbe505c4", 0xa7}, {&(0x7f0000000280)="6d669dc74ea18d2e7dd03b5321ae2720288e86f9b55c48d1ac68b2f2fdd4", 0x1e}, {&(0x7f00000002c0)="7f33f049678ba5e9b4e4d06664a8cd258fc33cd6c73a7a6d9015e03c55116ee330fa", 0x22}, {&(0x7f00000005c0)="ea604c59c1c8cafbb503b9ffe82d026b0d9b03bbb7f1d52123a4b2d626e314357f22e380fb2458496c5a281397ee6f18d6fe4c54dc5cda9e9499801f31edcd9a6392acaa75c3003676ea3e9850ecd571190958c9c81f948c106df2864715ceef89ef07565e3d1e0a1486033f99d4937d740380c3e4be3e734a18e17fd659504b314f1d82", 0x84}], 0x5, 0x0, 0x0, 0x10}, 0x4000) 414.318079ms ago: executing program 32 (id=1559): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00000000000000000000000034b0a2aeafc08dcfad34ba0000000000000000010000125a41d5af7ccf60420a525dbb7d54fe0082a995c99f64ccba4e32b12d99dc5abb6e817e3c04e3426723e94b04bee1848ec412cc017705f7d2353db8ae38afe25f86b9cb7cd9dc0e2cfe63b5673fc84ac93269184e2fd47e15c79ac76f4693511be6c229d12c0a8ba7b5c3ce23a604eb1393c3c6ac78c844d89b8eca132d5ef3bf7e9e94f08bf2e9224db08929cfc7f0a4560376f00aa750d545f042156f64015d84048b98a9cc73e293dfb5091aa67136590602b911d731f32c4229ba3a8d384949046e86df54510a7ec8f49d8d59f770307b8314a2c5c3f8397b83fb", @ANYRES32=0x0], 0x30}], 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xfffffffffffffe09, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4}}}, 0x54}}, 0x4050) (async) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x4, @private1, 0xe60}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)="55ed", 0x2}, {&(0x7f0000000500)="9ccdcd2bc8745bdf03ff84d2d0fb9ef2d19023912770903f97ee534269d784ef6254c4d69e058c423a9ce9a02c47a16bd59d195380523ff2809c5fac0273aeb4408b87fefa14b7b7ca86eb9bd411d3df3ae15f1703f04198ea47a37b9de2c9b312189e3b125148ab84c6b755d020152a1f5bb5c464642284b19a570b950135bdccfecc5b2b2734b88588d9dc64a3bdc5366d62df866884c00a2faf89006540f8ebfbaecbe505c4", 0xa7}, {&(0x7f0000000280)="6d669dc74ea18d2e7dd03b5321ae2720288e86f9b55c48d1ac68b2f2fdd4", 0x1e}, {&(0x7f00000002c0)="7f33f049678ba5e9b4e4d06664a8cd258fc33cd6c73a7a6d9015e03c55116ee330fa", 0x22}, {&(0x7f00000005c0)="ea604c59c1c8cafbb503b9ffe82d026b0d9b03bbb7f1d52123a4b2d626e314357f22e380fb2458496c5a281397ee6f18d6fe4c54dc5cda9e9499801f31edcd9a6392acaa75c3003676ea3e9850ecd571190958c9c81f948c106df2864715ceef89ef07565e3d1e0a1486033f99d4937d740380c3e4be3e734a18e17fd659504b314f1d82", 0x84}], 0x5, 0x0, 0x0, 0x10}, 0x4000) 414.026629ms ago: executing program 4 (id=1561): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) epoll_create1(0x0) socket(0x1d, 0x2, 0x6) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e000000001800", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 333.716844ms ago: executing program 4 (id=1562): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r2, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xfd) shutdown(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r8, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r8, &(0x7f000000a480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="a47c13", 0x3}], 0x1}}], 0x1, 0x24044c45) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="e779a888000000005400128009000100766c616e000000004c000280400003800c000100597f0000ff0300000c00010007000000ff7f00000c00010000000000fcffffff0c00010002000000050000000c000100060000003e0a000008000500", @ANYRES32=r9, @ANYBLOB], 0x7c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000010001fff26bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e6576650000140002800500040001000000050008000100000008000a00", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x48880}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="8832", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffff7, @loopback, 0x43bc}, 0x1c) 187.05116ms ago: executing program 4 (id=1563): syz_emit_ethernet(0x4a, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x5, 0x40, 0x2}, &(0x7f0000000900)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000c80)={0x0, 0xc0, "6f7e5cb460507151297e35fc878e6d14e87f05291a6a645d6dae96cd1c8f5e74602343bd701b41efbdf13439c50801174eae3c0c85f3aad20d032ab2778c8f8ee7efdd3b44b9361cf0a53934e1f8e3a838dde19fac6d5ac62279b381e32715b4a4bb22f40149de2f3d5eba8124b4290d7817c59891fcd7ade2302b71f4dba00e3f2a3831f97f103517d0c888ccd84ca73e1325ca8ecdbccabd7947a8bf05a093b34c5b3d20d817732fd6e94908c411ce0931f1adfda44f9646867ec22b87f981"}, &(0x7f0000000d80)=0xc8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x85, &(0x7f0000000380)={r3, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f0000000500)=0x90) 179.965161ms ago: executing program 2 (id=1564): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x804) (async) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000080)=ANY=[], 0xf8, 0x309, &(0x7f0000000040)="$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") 141.607083ms ago: executing program 4 (id=1565): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000700)="53fd7da3848b253a4d6963b4c79c1da751af29219839387986f1b9d7295da81ef9ecf7fa174e3bc5a6e6f2ed8915e6f35a918ac36f922c14e9cdc7612d49185b96b8d9b941a77e35a97de1c0ff2b231ca5aac67af82daaf60cd4ac2cee97e01e842c466e8635a31899fb0ff9d7866c887587786633af4686b8698a54f45547a0ff4bc571d21c9ee0e316ba3c4779391ac2123a006f5d01fe60e454850dfc343e374eb00040f97580daa2ec12b0716b77e9126d65f439981cf9c85b8dbd4bc0bc60d6febc366d884f9f5fef4beda37701609cbba49efac2eda682839d705decdb62b08fca9a5c4acc0df52e292b2c06be16b61a9ce8d445dea0674ca0", 0xfc}, {&(0x7f0000000540)="49d3cdec4ab80fd7820be0e959e0116677f4a880c097a98fa3f8482f134ce192dea681072f8955e906", 0x29}], 0x2}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) 8.68524ms ago: executing program 2 (id=1566): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 0s ago: executing program 0 (id=1567): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x54, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1, @ANYRES8=r4], 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) kernel console output (not intermixed with test programs): 316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.697302][ T7055] EXT4-fs: Ignoring removed bh option [ 135.704913][ T7052] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 135.706949][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 135.722457][ C0] EXT4-fs (loop0): initial error at time 1774226233: ext4_ext_check_inode:521: inode 2 [ 135.732121][ C0] EXT4-fs (loop0): last error at time 1774226233: ext4_ext_check_inode:521: inode 2 [ 135.745685][ T7052] EXT4-fs (loop0): get root inode failed [ 135.760488][ T7052] EXT4-fs (loop0): mount failed [ 135.822861][ T7055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.979837][ T7053] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.1137: Allocating blocks 449-513 which overlap fs metadata [ 136.173927][ T7066] FAT-fs (loop1): Directory bread(block 64) failed [ 136.180735][ T7066] FAT-fs (loop1): Directory bread(block 65) failed [ 136.187475][ T7066] FAT-fs (loop1): Directory bread(block 66) failed [ 136.194098][ T7066] FAT-fs (loop1): Directory bread(block 67) failed [ 136.200904][ T7066] FAT-fs (loop1): Directory bread(block 68) failed [ 136.207646][ T7066] FAT-fs (loop1): Directory bread(block 69) failed [ 136.214247][ T7066] FAT-fs (loop1): Directory bread(block 70) failed [ 136.220886][ T7066] FAT-fs (loop1): Directory bread(block 71) failed [ 136.227805][ T7066] FAT-fs (loop1): Directory bread(block 72) failed [ 136.234869][ T7066] FAT-fs (loop1): Directory bread(block 73) failed [ 136.297845][ T7065] FAULT_INJECTION: forcing a failure. [ 136.297845][ T7065] name failslab, interval 1, probability 0, space 0, times 1 [ 136.389912][ T7065] CPU: 1 UID: 0 PID: 7065 Comm: syz.3.1140 Tainted: G W syzkaller #0 PREEMPT(full) [ 136.389947][ T7065] Tainted: [W]=WARN [ 136.389953][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 136.389996][ T7065] Call Trace: [ 136.390004][ T7065] [ 136.390012][ T7065] __dump_stack+0x1d/0x30 [ 136.390102][ T7065] dump_stack_lvl+0x95/0xd0 [ 136.390122][ T7065] dump_stack+0x15/0x1b [ 136.390146][ T7065] should_fail_ex+0x263/0x280 [ 136.390177][ T7065] should_failslab+0x8c/0xb0 [ 136.390201][ T7065] kmem_cache_alloc_noprof+0x66/0x400 [ 136.390284][ T7065] ? alloc_empty_file+0x76/0x200 [ 136.390312][ T7065] alloc_empty_file+0x76/0x200 [ 136.390361][ T7065] path_openat+0x65/0x2050 [ 136.390417][ T7065] ? _parse_integer_limit+0x170/0x190 [ 136.390464][ T7065] ? _parse_integer+0x27/0x40 [ 136.390562][ T7065] ? kstrtoull+0x111/0x140 [ 136.390586][ T7065] ? kstrtouint+0x76/0xc0 [ 136.390611][ T7065] do_file_open+0x16c/0x290 [ 136.390644][ T7065] do_sys_openat2+0x94/0x130 [ 136.390684][ T7065] __x64_sys_openat+0xf2/0x120 [ 136.390709][ T7065] x64_sys_call+0x1e39/0x3020 [ 136.390733][ T7065] do_syscall_64+0x12c/0x370 [ 136.390754][ T7065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.390823][ T7065] RIP: 0033:0x7f152839c799 [ 136.390841][ T7065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.390938][ T7065] RSP: 002b:00007f1526def028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 136.390958][ T7065] RAX: ffffffffffffffda RBX: 00007f1528615fa0 RCX: 00007f152839c799 [ 136.390971][ T7065] RDX: 00000000001a10c1 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 136.390984][ T7065] RBP: 00007f1526def090 R08: 0000000000000000 R09: 0000000000000000 [ 136.390998][ T7065] R10: 9c37611dc13d0d83 R11: 0000000000000246 R12: 0000000000000001 [ 136.391014][ T7065] R13: 00007f1528616038 R14: 00007f1528615fa0 R15: 00007ffe958c4298 [ 136.391034][ T7065] [ 136.666781][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.141520][ T7071] batadv0: entered allmulticast mode [ 137.337216][ T7076] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #2: comm syz.3.1143: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 137.359533][ T7076] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 137.360053][ T7076] EXT4-fs (loop3): get root inode failed [ 137.369135][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 137.369156][ C1] EXT4-fs (loop3): initial error at time 1774226235: ext4_ext_check_inode:521: inode 2 [ 137.369187][ C1] EXT4-fs (loop3): last error at time 1774226235: ext4_ext_check_inode:521: inode 2 [ 137.457299][ T7080] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 137.506870][ T7080] EXT4-fs (loop2): 1 truncate cleaned up [ 137.533798][ T7080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.546433][ T7076] EXT4-fs (loop3): mount failed [ 137.581900][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.846151][ T7086] set_capacity_and_notify: 7 callbacks suppressed [ 137.846167][ T7086] loop3: detected capacity change from 0 to 1024 [ 137.870303][ T7086] EXT4-fs: inline encryption not supported [ 137.900173][ T7086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.909515][ T7092] loop0: detected capacity change from 0 to 128 [ 137.942837][ T7092] FAT-fs (loop0): bogus logical sector size 2134 [ 137.966715][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 137.966799][ T28] audit: type=1400 audit(1774226236.022:271): avc: denied { name_bind } for pid=7098 comm="syz.1.1151" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 137.973107][ T7092] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 138.004287][ T7092] FAT-fs (loop0): Can't find a valid FAT filesystem [ 138.044908][ T7101] loop4: detected capacity change from 0 to 8192 [ 138.068535][ T28] audit: type=1400 audit(1774226236.132:272): avc: denied { setopt } for pid=7098 comm="syz.1.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.156452][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.183255][ T7110] loop1: detected capacity change from 0 to 512 [ 138.190684][ T7110] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 138.378535][ T7110] EXT4-fs (loop1): 1 truncate cleaned up [ 138.385265][ T7110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.442774][ T28] audit: type=1400 audit(1774226236.472:273): avc: denied { create } for pid=7116 comm="syz.3.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 138.535424][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.570963][ T7101] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 138.729615][ T28] audit: type=1400 audit(1774226236.542:274): avc: denied { write } for pid=7116 comm="syz.3.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 138.748832][ T7101] FAT-fs (loop4): Filesystem has been set read-only [ 138.749326][ T28] audit: type=1400 audit(1774226236.562:275): avc: denied { map } for pid=7116 comm="syz.3.1156" path="socket:[15726]" dev="sockfs" ino=15726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.762611][ T7119] 9pnet_fd: p9_fd_create_unix (7119): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 138.790820][ T28] audit: type=1400 audit(1774226236.562:276): avc: denied { accept } for pid=7116 comm="syz.3.1156" path="socket:[15726]" dev="sockfs" ino=15726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.954786][ T28] audit: type=1400 audit(1774226237.002:277): avc: denied { create } for pid=7124 comm="syz.1.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.156742][ T7149] 8021q: VLANs not supported on ip6gre0 [ 139.248503][ T7155] FAULT_INJECTION: forcing a failure. [ 139.248503][ T7155] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 139.261683][ T7155] CPU: 0 UID: 0 PID: 7155 Comm: syz.4.1172 Tainted: G W syzkaller #0 PREEMPT(full) [ 139.261751][ T7155] Tainted: [W]=WARN [ 139.261760][ T7155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 139.261844][ T7155] Call Trace: [ 139.261898][ T7155] [ 139.261906][ T7155] __dump_stack+0x1d/0x30 [ 139.261934][ T7155] dump_stack_lvl+0x95/0xd0 [ 139.261959][ T7155] dump_stack+0x15/0x1b [ 139.261990][ T7155] should_fail_ex+0x263/0x280 [ 139.262018][ T7155] should_fail+0xb/0x20 [ 139.262043][ T7155] should_fail_usercopy+0x1a/0x20 [ 139.262103][ T7155] _copy_to_user+0x20/0xa0 [ 139.262250][ T7155] simple_read_from_buffer+0xb5/0x130 [ 139.262310][ T7155] proc_fail_nth_read+0x10e/0x150 [ 139.262341][ T7155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.262371][ T7155] vfs_read+0x1ab/0x7f0 [ 139.262459][ T7155] ? __rcu_read_unlock+0x4e/0x70 [ 139.262559][ T7155] ? __fget_files+0x184/0x1c0 [ 139.262583][ T7155] ? mutex_lock+0x57/0x90 [ 139.262628][ T7155] ksys_read+0xdc/0x1a0 [ 139.262648][ T7155] __x64_sys_read+0x40/0x50 [ 139.262689][ T7155] x64_sys_call+0x2886/0x3020 [ 139.262717][ T7155] do_syscall_64+0x12c/0x370 [ 139.262741][ T7155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.262789][ T7155] RIP: 0033:0x7fb9a244cfce [ 139.262808][ T7155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 139.262826][ T7155] RSP: 002b:00007fb9a0ee6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 139.262849][ T7155] RAX: ffffffffffffffda RBX: 00007fb9a0ee76c0 RCX: 00007fb9a244cfce [ 139.262865][ T7155] RDX: 000000000000000f RSI: 00007fb9a0ee70a0 RDI: 000000000000000c [ 139.262933][ T7155] RBP: 00007fb9a0ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 139.262947][ T7155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.262962][ T7155] R13: 00007fb9a2706038 R14: 00007fb9a2705fa0 R15: 00007ffe30f81758 [ 139.263012][ T7155] [ 139.629413][ T7162] loop3: detected capacity change from 0 to 4096 [ 139.652069][ T7162] EXT4-fs: Ignoring removed bh option [ 139.685172][ T7162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.710348][ T7162] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 139.720810][ T7165] tipc: Started in network mode [ 139.725875][ T7165] tipc: Node identity fedbf881d9f4, cluster identity 4711 [ 139.748396][ T7162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.762064][ T28] audit: type=1400 audit(1774226237.832:278): avc: denied { ioctl } for pid=7160 comm="syz.4.1173" path="socket:[15830]" dev="sockfs" ino=15830 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.767589][ T7165] tipc: Enabled bearer , priority 0 [ 139.827233][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1170'. [ 139.885873][ T7161] syzkaller0: entered allmulticast mode [ 140.031809][ T7170] 9pnet_fd: p9_fd_create_unix (7170): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 140.040709][ T7160] tipc: Resetting bearer [ 140.212927][ T7160] tipc: Disabling bearer [ 140.224827][ T7136] loop0: detected capacity change from 0 to 4096 [ 140.250908][ T28] audit: type=1400 audit(1774226238.292:279): avc: denied { create } for pid=7173 comm="syz.2.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 140.283418][ T7181] 8021q: VLANs not supported on ip6gre0 [ 140.300937][ T28] audit: type=1400 audit(1774226238.292:280): avc: denied { write } for pid=7173 comm="syz.2.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 140.450829][ T7136] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #2: comm syz.0.1165: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 140.477761][ T7136] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 140.479799][ T7136] EXT4-fs (loop0): get root inode failed [ 140.489628][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 140.489858][ C0] EXT4-fs (loop0): initial error at time 1774226238: ext4_ext_check_inode:521: inode 2 [ 140.490477][ C0] EXT4-fs (loop0): last error at time 1774226238: ext4_ext_check_inode:521: inode 2 [ 140.524481][ T7136] EXT4-fs (loop0): mount failed [ 140.547268][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.095678][ T7136] loop0: detected capacity change from 0 to 1024 [ 141.117198][ T7136] EXT4-fs: inline encryption not supported [ 141.162642][ T7136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.178241][ T7195] rtc_cmos 00:00: Alarms can be up to one day in the future [ 141.221101][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.305638][ T7212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1189'. [ 141.318270][ T7212] vlan2: entered promiscuous mode [ 141.381247][ T7213] 9pnet_fd: p9_fd_create_unix (7213): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 141.545906][ T7215] loop2: detected capacity change from 0 to 4096 [ 141.669583][ T7219] loop1: detected capacity change from 0 to 1024 [ 141.677476][ T7219] EXT4-fs: test_dummy_encryption option not supported [ 141.691725][ T7215] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #2: comm syz.2.1190: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 141.711694][ T7215] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 141.714048][ T7215] EXT4-fs (loop2): get root inode failed [ 141.724097][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 141.724298][ C0] EXT4-fs (loop2): initial error at time 1774226239: ext4_ext_check_inode:521: inode 2 [ 141.724817][ C0] EXT4-fs (loop2): last error at time 1774226239: ext4_ext_check_inode:521: inode 2 [ 141.763539][ T7215] EXT4-fs (loop2): mount failed [ 142.046005][ T7224] loop1: detected capacity change from 0 to 512 [ 142.169158][ T7224] EXT4-fs (loop1): 1 orphan inode deleted [ 142.185477][ T7224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.202298][ T7224] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.287717][ T7225] EXT4-fs: inline encryption not supported [ 142.410845][ T7225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.431069][ T7234] FAULT_INJECTION: forcing a failure. [ 142.431069][ T7234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.454382][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 142.462139][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 142.470350][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 142.478062][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 142.485463][ T10] rtc rtc0: __rtc_set_alarm: err=-22 [ 142.694348][ T7234] CPU: 0 UID: 0 PID: 7234 Comm: syz.4.1195 Tainted: G W syzkaller #0 PREEMPT(full) [ 142.694444][ T7234] Tainted: [W]=WARN [ 142.694452][ T7234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 142.694466][ T7234] Call Trace: [ 142.694474][ T7234] [ 142.694484][ T7234] __dump_stack+0x1d/0x30 [ 142.694515][ T7234] dump_stack_lvl+0x95/0xd0 [ 142.694539][ T7234] dump_stack+0x15/0x1b [ 142.694703][ T7234] should_fail_ex+0x263/0x280 [ 142.694796][ T7234] should_fail+0xb/0x20 [ 142.694822][ T7234] should_fail_usercopy+0x1a/0x20 [ 142.694850][ T7234] _copy_from_user+0x1c/0xb0 [ 142.694884][ T7234] hidp_sock_ioctl+0xc4/0x470 [ 142.695010][ T7234] sock_do_ioctl+0x73/0x230 [ 142.695095][ T7234] sock_ioctl+0x41b/0x610 [ 142.695114][ T7234] ? __pfx_sock_ioctl+0x10/0x10 [ 142.695132][ T7234] __se_sys_ioctl+0xce/0x140 [ 142.695153][ T7234] __x64_sys_ioctl+0x43/0x50 [ 142.695183][ T7234] x64_sys_call+0x1563/0x3020 [ 142.695205][ T7234] do_syscall_64+0x12c/0x370 [ 142.695227][ T7234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.695249][ T7234] RIP: 0033:0x7fb9a248c799 [ 142.695267][ T7234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.695315][ T7234] RSP: 002b:00007fb9a0ee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.695347][ T7234] RAX: ffffffffffffffda RBX: 00007fb9a2705fa0 RCX: 00007fb9a248c799 [ 142.695361][ T7234] RDX: 0000200000000940 RSI: 00000000800448d3 RDI: 0000000000000004 [ 142.695373][ T7234] RBP: 00007fb9a0ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 142.695385][ T7234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.695399][ T7234] R13: 00007fb9a2706038 R14: 00007fb9a2705fa0 R15: 00007ffe30f81758 [ 142.695488][ T7234] [ 142.908275][ T3552] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:9: Failed to release dquot type 1 [ 142.929680][ T7231] set_capacity_and_notify: 1 callbacks suppressed [ 142.929699][ T7231] loop3: detected capacity change from 0 to 512 [ 142.945292][ T7231] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 142.956397][ T7231] EXT4-fs (loop3): 1 truncate cleaned up [ 142.962566][ T7231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.132198][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 143.132217][ T28] audit: type=1400 audit(1774226241.092:281): avc: denied { remove_name } for pid=7229 comm="syz.3.1194" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.511992][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.522448][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.617666][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1200'. [ 143.626778][ T28] audit: type=1400 audit(1774226241.092:282): avc: denied { unlink } for pid=7229 comm="syz.3.1194" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.652221][ T7246] vlan2: entered promiscuous mode [ 143.674584][ T28] audit: type=1400 audit(1774226241.502:283): avc: denied { mount } for pid=7229 comm="syz.3.1194" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 143.704010][ T28] audit: type=1400 audit(1774226241.522:284): avc: denied { create } for pid=7238 comm="syz.4.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.793841][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.897396][ T7258] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1204'. [ 143.906945][ T28] audit: type=1400 audit(1774226241.962:285): avc: denied { bind } for pid=7257 comm="syz.4.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.158325][ T7267] 9pnet_fd: p9_fd_create_unix (7267): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 144.376482][ T7252] loop1: detected capacity change from 0 to 4096 [ 144.527621][ T7252] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.1198: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 144.551657][ T7252] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 144.552279][ T7252] EXT4-fs (loop1): get root inode failed [ 144.561593][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 144.561682][ C0] EXT4-fs (loop1): initial error at time 1774226242: ext4_ext_check_inode:521: inode 2 [ 144.561943][ C0] EXT4-fs (loop1): last error at time 1774226242: ext4_ext_check_inode:521: inode 2 [ 144.599748][ T7252] EXT4-fs (loop1): mount failed [ 145.029996][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'. [ 145.139043][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'. [ 145.350872][ T7288] loop0: detected capacity change from 0 to 512 [ 145.384633][ T7288] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 145.450988][ T7288] EXT4-fs (loop0): 1 truncate cleaned up [ 145.466703][ T7294] loop2: detected capacity change from 0 to 512 [ 145.476751][ T7288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.517683][ T7294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.588540][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.600734][ T7294] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.628998][ T7294] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 145.644274][ T7294] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1217'. [ 145.749027][ T7302] 8021q: VLANs not supported on ip6gre0 [ 145.791014][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.828785][ T7304] vlan2: entered promiscuous mode [ 145.968523][ T28] audit: type=1400 audit(1774226244.022:286): avc: denied { create } for pid=7305 comm="syz.3.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 146.033147][ T28] audit: type=1400 audit(1774226244.062:287): avc: denied { read } for pid=7305 comm="syz.3.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 146.101734][ T7252] loop1: detected capacity change from 0 to 1024 [ 146.129873][ T7252] EXT4-fs: inline encryption not supported [ 146.180625][ T7252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.271943][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.282000][ T7319] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 146.288704][ T7319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 146.303513][ T7319] vhci_hcd vhci_hcd.0: Device attached [ 146.325948][ T7319] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15) [ 146.332764][ T7319] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 146.342433][ T7319] vhci_hcd vhci_hcd.0: Device attached [ 146.344772][ T7330] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 146.354980][ T7330] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 146.363137][ T7330] vhci_hcd vhci_hcd.0: Device attached [ 146.369429][ T7319] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(17) [ 146.376101][ T7319] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 146.383939][ T7319] vhci_hcd vhci_hcd.0: Device attached [ 146.386948][ T7330] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(15) [ 146.396092][ T7330] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 146.398469][ T7319] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(19) [ 146.404336][ T7330] vhci_hcd vhci_hcd.0: Device attached [ 146.410131][ T7319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 146.410505][ T7319] vhci_hcd vhci_hcd.0: Device attached [ 146.434945][ T7330] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(17) [ 146.438100][ T7319] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(21) [ 146.441612][ T7330] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 146.448196][ T7319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 146.456089][ T7330] vhci_hcd vhci_hcd.0: Device attached [ 146.463667][ T7319] vhci_hcd vhci_hcd.0: Device attached [ 146.482199][ T7319] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 146.491963][ T7319] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 146.504466][ T7319] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(27) [ 146.511110][ T7319] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 146.519145][ T7330] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(19) [ 146.525780][ T7330] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 146.534685][ T7330] vhci_hcd vhci_hcd.0: Device attached [ 146.542966][ T7319] vhci_hcd vhci_hcd.0: Device attached [ 146.548779][ T7330] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(21) [ 146.555453][ T7330] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 146.564433][ T7330] vhci_hcd vhci_hcd.0: Device attached [ 146.566930][ T10] usb 5-1: new low-speed USB device number 6 using vhci_hcd [ 146.573310][ T7330] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 146.592772][ T7330] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 146.601419][ T7346] vhci_hcd: connection closed [ 146.601786][ T7342] vhci_hcd: connection closed [ 146.606575][ T30] vhci_hcd vhci_hcd.2: stop threads [ 146.617404][ T7320] vhci_hcd: connection reset by peer [ 146.622789][ T7326] vhci_hcd: connection closed [ 146.622947][ T7354] loop0: detected capacity change from 0 to 512 [ 146.627321][ T30] vhci_hcd vhci_hcd.2: release socket [ 146.627948][ T3402] usb 3-1: new low-speed USB device number 7 using vhci_hcd [ 146.634151][ T30] vhci_hcd vhci_hcd.2: disconnect device [ 146.639502][ T7333] vhci_hcd: connection closed [ 146.652893][ T7337] vhci_hcd: connection closed [ 146.659290][ T7354] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 146.660499][ T30] vhci_hcd vhci_hcd.2: stop threads [ 146.669826][ T7354] EXT4-fs (loop0): 1 truncate cleaned up [ 146.674960][ T30] vhci_hcd vhci_hcd.2: release socket [ 146.689691][ T7354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.691050][ T30] vhci_hcd vhci_hcd.2: disconnect device [ 146.712017][ T7330] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(27) [ 146.713272][ T30] vhci_hcd vhci_hcd.2: stop threads [ 146.718640][ T7330] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 146.729449][ T7330] vhci_hcd vhci_hcd.0: Device attached [ 146.731980][ T30] vhci_hcd vhci_hcd.2: release socket [ 146.743068][ T30] vhci_hcd vhci_hcd.2: disconnect device [ 146.744676][ T7356] vhci_hcd: connection closed [ 146.749097][ T30] vhci_hcd vhci_hcd.2: stop threads [ 146.749751][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.753822][ T30] vhci_hcd vhci_hcd.2: release socket [ 146.760937][ T7350] vhci_hcd: connection closed [ 146.768270][ T30] vhci_hcd vhci_hcd.2: disconnect device [ 146.779210][ T7335] vhci_hcd: connection closed [ 146.783795][ T7340] vhci_hcd: connection closed [ 146.783894][ T7331] vhci_hcd: connection reset by peer [ 146.801758][ T7360] 8021q: VLANs not supported on ip6gre0 [ 146.803363][ T7348] vhci_hcd: connection closed [ 146.811606][ T30] vhci_hcd vhci_hcd.2: stop threads [ 146.821710][ T30] vhci_hcd vhci_hcd.2: release socket [ 146.827409][ T30] vhci_hcd vhci_hcd.2: disconnect device [ 146.833206][ T30] vhci_hcd vhci_hcd.2: stop threads [ 146.838650][ T30] vhci_hcd vhci_hcd.2: release socket [ 146.842889][ T7362] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.844144][ T30] vhci_hcd vhci_hcd.2: disconnect device [ 146.857273][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1233'. [ 146.871928][ T30] vhci_hcd vhci_hcd.1: stop threads [ 146.877291][ T30] vhci_hcd vhci_hcd.1: release socket [ 146.886756][ T30] vhci_hcd vhci_hcd.1: disconnect device [ 146.893998][ T30] vhci_hcd vhci_hcd.1: stop threads [ 146.899306][ T30] vhci_hcd vhci_hcd.1: release socket [ 146.904896][ T30] vhci_hcd vhci_hcd.1: disconnect device [ 146.916990][ T28] audit: type=1400 audit(1774226244.952:288): avc: denied { connect } for pid=7363 comm="syz.0.1234" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.920445][ T30] vhci_hcd vhci_hcd.1: stop threads [ 146.957499][ T30] vhci_hcd vhci_hcd.1: release socket [ 146.962961][ T30] vhci_hcd vhci_hcd.1: disconnect device [ 146.963099][ T30] vhci_hcd vhci_hcd.1: stop threads [ 146.963115][ T30] vhci_hcd vhci_hcd.1: release socket [ 146.963159][ T30] vhci_hcd vhci_hcd.1: disconnect device [ 146.963318][ T30] vhci_hcd vhci_hcd.1: stop threads [ 146.963333][ T30] vhci_hcd vhci_hcd.1: release socket [ 146.963375][ T30] vhci_hcd vhci_hcd.1: disconnect device [ 146.969565][ T30] vhci_hcd vhci_hcd.1: stop threads [ 146.969583][ T30] vhci_hcd vhci_hcd.1: release socket [ 146.969649][ T30] vhci_hcd vhci_hcd.1: disconnect device [ 146.990954][ T28] audit: type=1326 audit(1774226245.012:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.3.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152839c799 code=0x7ffc0000 [ 146.991047][ T28] audit: type=1326 audit(1774226245.012:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.3.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f152839c799 code=0x7ffc0000 [ 147.408194][ T7382] loop2: detected capacity change from 0 to 512 [ 147.441020][ T7382] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 147.499216][ T7382] EXT4-fs (loop2): 1 truncate cleaned up [ 147.564727][ T7382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.730165][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 147.739273][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 147.748536][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 147.881961][ T7394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1244'. [ 147.891143][ T7392] loop1: detected capacity change from 0 to 4096 [ 147.900927][ T7394] vlan2: entered promiscuous mode [ 147.919110][ T7392] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.1243: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 147.970915][ T7392] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 147.976959][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 147.992628][ C0] EXT4-fs (loop1): initial error at time 1774226246: ext4_ext_check_inode:521: inode 2 [ 147.995026][ T7392] EXT4-fs (loop1): get root inode failed [ 148.002315][ C0] EXT4-fs (loop1): last error at time 1774226246: ext4_ext_check_inode:521: inode 2 [ 148.024985][ T7392] EXT4-fs (loop1): mount failed [ 148.039412][ T7401] 8021q: VLANs not supported on ip6tnl0 [ 148.119844][ T7399] 9pnet_fd: p9_fd_create_unix (7399): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 148.200536][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.701588][ T7391] loop1: detected capacity change from 0 to 1024 [ 148.868252][ T7391] EXT4-fs: inline encryption not supported [ 149.158641][ T7391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.347153][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.456098][ T7424] vlan2: entered promiscuous mode [ 149.582450][ T7426] loop0: detected capacity change from 0 to 8192 [ 149.618714][ T7428] syz_tun: refused to change device tx_queue_len [ 149.629746][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1256'. [ 149.647004][ T7428] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 149.664776][ T3293] loop0: p2 p3 p4 [ 149.674719][ T3293] loop0: p2 start 4293394690 is beyond EOD, truncated [ 149.688349][ T7430] vlan2: entered promiscuous mode [ 149.696914][ T3293] loop0: p3 start 32768 is beyond EOD, truncated [ 149.703274][ T3293] loop0: p4 start 65537 is beyond EOD, truncated [ 149.739243][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 149.739260][ T28] audit: type=1400 audit(1774226247.802:327): avc: denied { read } for pid=7425 comm="syz.0.1254" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 149.847848][ T7435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1257'. [ 149.881911][ T28] audit: type=1400 audit(1774226247.802:328): avc: denied { open } for pid=7425 comm="syz.0.1254" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 149.922215][ T7435] vlan2: entered promiscuous mode [ 150.009067][ T7439] 8021q: VLANs not supported on ip6gre0 [ 150.020982][ T7426] loop0: p2 p3 p4 [ 150.025220][ T7426] loop0: p2 start 4293394690 is beyond EOD, truncated [ 150.044717][ T7426] loop0: p3 start 32768 is beyond EOD, truncated [ 150.063914][ T7426] loop0: p4 start 65537 is beyond EOD, truncated [ 150.101836][ T7442] netlink: 'syz.3.1260': attribute type 13 has an invalid length. [ 150.128718][ T7442] netlink: 'syz.3.1260': attribute type 17 has an invalid length. [ 150.147329][ T7441] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.154648][ T7441] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.169431][ T28] audit: type=1400 audit(1774226248.232:329): avc: denied { ioctl } for pid=7425 comm="syz.0.1254" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x227d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 150.205374][ T28] audit: type=1400 audit(1774226248.262:330): avc: denied { setopt } for pid=7440 comm="syz.3.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.235364][ T28] audit: type=1400 audit(1774226248.272:331): avc: denied { read } for pid=7440 comm="syz.3.1260" path="socket:[17428]" dev="sockfs" ino=17428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.270585][ T28] audit: type=1400 audit(1774226248.332:332): avc: denied { read } for pid=7440 comm="syz.3.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 150.290366][ T7441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.333103][ T7441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.461791][ T7446] 9pnet_fd: p9_fd_create_unix (7446): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 150.591247][ T7442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.698054][ T7442] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.709145][ T7455] 9p: Bad value for 'rfdno' [ 150.714714][ T7442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.754487][ T40] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.764244][ T7455] netlink: 'syz.4.1264': attribute type 15 has an invalid length. [ 150.772457][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'. [ 150.781700][ T40] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.804293][ T40] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.807167][ T7455] netlink: 'syz.4.1264': attribute type 15 has an invalid length. [ 150.823994][ T40] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.833288][ T40] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 150.844959][ T40] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 150.876953][ T40] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 150.885695][ T40] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 150.894939][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'. [ 151.000129][ T7464] vlan2: entered promiscuous mode [ 151.103816][ T7469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1270'. [ 151.149593][ T7469] vlan2: entered promiscuous mode [ 151.151891][ T7437] loop1: detected capacity change from 0 to 4096 [ 151.154673][ T7469] team0: entered promiscuous mode [ 151.154691][ T7469] team_slave_0: entered promiscuous mode [ 151.154757][ T7469] team_slave_1: entered promiscuous mode [ 151.168005][ T7462] loop3: detected capacity change from 0 to 512 [ 151.203125][ T7437] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.1258: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 151.226577][ T7437] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 151.234344][ T7437] EXT4-fs (loop1): get root inode failed [ 151.243994][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 151.244061][ C0] EXT4-fs (loop1): initial error at time 1774226249: ext4_ext_check_inode:521: inode 2 [ 151.244385][ C0] EXT4-fs (loop1): last error at time 1774226249: ext4_ext_check_inode:521: inode 2 [ 151.293401][ T7462] EXT4-fs (loop3): 1 orphan inode deleted [ 151.300181][ T7462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.307252][ T7437] EXT4-fs (loop1): mount failed [ 151.482140][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.522206][ T7486] 8021q: VLANs not supported on ip6gre0 [ 151.578870][ T7488] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 151.585592][ T7488] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.593740][ T7488] vhci_hcd vhci_hcd.0: Device attached [ 151.601691][ T7488] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 151.608314][ T7488] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 151.618424][ T7488] vhci_hcd vhci_hcd.0: Device attached [ 151.632941][ T10] usb 5-1: enqueue for inactive port 0 [ 151.638726][ T10] usb 5-1: enqueue for inactive port 0 [ 151.646413][ T7488] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(17) [ 151.653162][ T7488] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 151.661003][ T7488] vhci_hcd vhci_hcd.0: Device attached [ 151.668762][ T7488] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(19) [ 151.675408][ T7488] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.683370][ T7488] vhci_hcd vhci_hcd.0: Device attached [ 151.708461][ T3402] usb 3-1: enqueue for inactive port 0 [ 151.714139][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 151.720779][ T3402] usb 3-1: enqueue for inactive port 0 [ 151.727111][ T7488] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(21) [ 151.733728][ T7488] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.753165][ T7488] vhci_hcd vhci_hcd.0: Device attached [ 151.754106][ T7502] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 151.769349][ T7488] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 151.787978][ T3402] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 151.804703][ T7488] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(27) [ 151.811314][ T7488] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 151.819325][ T7488] vhci_hcd vhci_hcd.0: Device attached [ 151.845590][ T7500] vhci_hcd: connection closed [ 151.845830][ T1651] vhci_hcd vhci_hcd.3: stop threads [ 151.845886][ T7489] vhci_hcd: connection closed [ 151.850695][ T9] usb 7-1: new low-speed USB device number 4 using vhci_hcd [ 151.863333][ T7503] vhci_hcd: connection closed [ 151.868901][ T7491] vhci_hcd: connection closed [ 151.873768][ T1651] vhci_hcd vhci_hcd.3: release socket [ 151.884605][ T7507] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1277'. [ 151.896984][ T7494] vhci_hcd: connection closed [ 151.897126][ T7496] vhci_hcd: connection closed [ 151.908110][ T1651] vhci_hcd vhci_hcd.3: disconnect device [ 151.924514][ T7490] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 151.935231][ T1651] vhci_hcd vhci_hcd.3: stop threads [ 151.938573][ T7437] loop1: detected capacity change from 0 to 1024 [ 151.949743][ T1651] vhci_hcd vhci_hcd.3: release socket [ 151.960846][ T1651] vhci_hcd vhci_hcd.3: disconnect device [ 151.972709][ T7437] EXT4-fs: inline encryption not supported [ 151.990818][ T1651] vhci_hcd vhci_hcd.3: stop threads [ 152.001805][ T1651] vhci_hcd vhci_hcd.3: release socket [ 152.017739][ T1651] vhci_hcd vhci_hcd.3: disconnect device [ 152.024382][ T1651] vhci_hcd vhci_hcd.3: stop threads [ 152.031159][ T7510] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 152.038719][ T1651] vhci_hcd vhci_hcd.3: release socket [ 152.046194][ T1651] vhci_hcd vhci_hcd.3: disconnect device [ 152.057955][ T1651] vhci_hcd vhci_hcd.3: stop threads [ 152.067738][ T1651] vhci_hcd vhci_hcd.3: release socket [ 152.069978][ T7437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.077619][ T1651] vhci_hcd vhci_hcd.3: disconnect device [ 152.120177][ T1651] vhci_hcd vhci_hcd.3: stop threads [ 152.219747][ T1651] vhci_hcd vhci_hcd.3: release socket [ 152.225218][ T1651] vhci_hcd vhci_hcd.3: disconnect device [ 152.254329][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.362199][ T7533] 8021q: VLANs not supported on ip6gre0 [ 153.476034][ T7534] loop3: detected capacity change from 0 to 512 [ 153.494968][ T7539] FAULT_INJECTION: forcing a failure. [ 153.494968][ T7539] name failslab, interval 1, probability 0, space 0, times 0 [ 153.543604][ T7539] CPU: 1 UID: 0 PID: 7539 Comm: syz.0.1287 Tainted: G W syzkaller #0 PREEMPT(full) [ 153.543639][ T7539] Tainted: [W]=WARN [ 153.543645][ T7539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 153.543656][ T7539] Call Trace: [ 153.543664][ T7539] [ 153.543671][ T7539] __dump_stack+0x1d/0x30 [ 153.543720][ T7539] dump_stack_lvl+0x95/0xd0 [ 153.543747][ T7539] dump_stack+0x15/0x1b [ 153.543771][ T7539] should_fail_ex+0x263/0x280 [ 153.543800][ T7539] should_failslab+0x8c/0xb0 [ 153.543849][ T7539] kmem_cache_alloc_noprof+0x66/0x400 [ 153.543869][ T7539] ? do_getname+0x2e/0x1c0 [ 153.543898][ T7539] do_getname+0x2e/0x1c0 [ 153.543923][ T7539] __se_sys_mkdir+0x1e/0xf0 [ 153.543942][ T7539] __x64_sys_mkdir+0x31/0x40 [ 153.544002][ T7539] x64_sys_call+0x2eab/0x3020 [ 153.544031][ T7539] do_syscall_64+0x12c/0x370 [ 153.544058][ T7539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.544083][ T7539] RIP: 0033:0x7fcab216c799 [ 153.544164][ T7539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.544185][ T7539] RSP: 002b:00007fcab0bc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 153.544208][ T7539] RAX: ffffffffffffffda RBX: 00007fcab23e5fa0 RCX: 00007fcab216c799 [ 153.544292][ T7539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 153.544304][ T7539] RBP: 00007fcab0bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 153.544315][ T7539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.544327][ T7539] R13: 00007fcab23e6038 R14: 00007fcab23e5fa0 R15: 00007ffd72f38cd8 [ 153.544362][ T7539] [ 153.835486][ T7534] EXT4-fs (loop3): 1 orphan inode deleted [ 153.841850][ T7534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.140812][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.170610][ T7556] loop3: detected capacity change from 0 to 256 [ 155.053696][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1298'. [ 155.085940][ T7577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.114222][ T7577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.143030][ T28] audit: type=1400 audit(1774226253.202:333): avc: denied { bind } for pid=7575 comm="syz.0.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 155.286992][ T28] audit: type=1400 audit(1774226253.202:334): avc: denied { node_bind } for pid=7575 comm="syz.0.1298" saddr=fe80::bb src=32798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 156.091304][ T7585] FAULT_INJECTION: forcing a failure. [ 156.091304][ T7585] name failslab, interval 1, probability 0, space 0, times 0 [ 156.195162][ T7585] CPU: 0 UID: 0 PID: 7585 Comm: syz.3.1301 Tainted: G W syzkaller #0 PREEMPT(full) [ 156.195198][ T7585] Tainted: [W]=WARN [ 156.195205][ T7585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.195216][ T7585] Call Trace: [ 156.195287][ T7585] [ 156.195298][ T7585] __dump_stack+0x1d/0x30 [ 156.195328][ T7585] dump_stack_lvl+0x95/0xd0 [ 156.195354][ T7585] dump_stack+0x15/0x1b [ 156.195438][ T7585] should_fail_ex+0x263/0x280 [ 156.195468][ T7585] should_failslab+0x8c/0xb0 [ 156.195549][ T7585] __kvmalloc_node_noprof+0x155/0x650 [ 156.195578][ T7585] ? traverse+0xa2/0x3a0 [ 156.195638][ T7585] traverse+0xa2/0x3a0 [ 156.195671][ T7585] seq_read_iter+0x85f/0x940 [ 156.195770][ T7585] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 156.195804][ T7585] ? proc_reg_read_iter+0x38/0x180 [ 156.195836][ T7585] proc_reg_read_iter+0x110/0x180 [ 156.195885][ T7585] copy_splice_read+0x471/0x6c0 [ 156.195907][ T7585] ? __pfx_copy_splice_read+0x10/0x10 [ 156.195960][ T7585] splice_direct_to_actor+0x26e/0x670 [ 156.195985][ T7585] ? __pfx_direct_splice_actor+0x10/0x10 [ 156.196013][ T7585] do_splice_direct+0x119/0x1a0 [ 156.196035][ T7585] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 156.196143][ T7585] do_sendfile+0x382/0x650 [ 156.196171][ T7585] __x64_sys_sendfile64+0xb8/0x150 [ 156.196204][ T7585] x64_sys_call+0x2dc4/0x3020 [ 156.196264][ T7585] do_syscall_64+0x12c/0x370 [ 156.196290][ T7585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.196372][ T7585] RIP: 0033:0x7f152839c799 [ 156.196388][ T7585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.196449][ T7585] RSP: 002b:00007f1526def028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 156.196471][ T7585] RAX: ffffffffffffffda RBX: 00007f1528615fa0 RCX: 00007f152839c799 [ 156.196496][ T7585] RDX: 0000200000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 156.196508][ T7585] RBP: 00007f1526def090 R08: 0000000000000000 R09: 0000000000000000 [ 156.196522][ T7585] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 156.196544][ T7585] R13: 00007f1528616038 R14: 00007f1528615fa0 R15: 00007ffe958c4298 [ 156.196584][ T7585] [ 156.666689][ T7590] vcan0: tx address claim with dest, not broadcast [ 156.743611][ T7592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1303'. [ 156.756022][ T7592] vlan3: entered promiscuous mode [ 156.987015][ T9] usb 7-1: enqueue for inactive port 0 [ 156.998129][ T9] usb 7-1: enqueue for inactive port 0 [ 157.097137][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 157.123271][ T7600] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.130616][ T7600] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.188619][ T7600] bridge0: entered promiscuous mode [ 157.207315][ T7600] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 157.241396][ T28] audit: type=1400 audit(1774226255.302:335): avc: denied { setopt } for pid=7598 comm="syz.1.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.279527][ T28] audit: type=1400 audit(1774226255.332:336): avc: denied { write } for pid=7598 comm="syz.1.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 157.304485][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1309'. [ 157.377230][ T7615] loop5: detected capacity change from 0 to 7 [ 157.424633][ T7620] loop3: detected capacity change from 0 to 512 [ 157.505023][ T7620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.518098][ T7620] ext4 filesystem being mounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.537080][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1314'. [ 158.121881][ T7634] loop0: detected capacity change from 0 to 2048 [ 158.160490][ T7634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.247017][ T7634] FAULT_INJECTION: forcing a failure. [ 158.247017][ T7634] name failslab, interval 1, probability 0, space 0, times 0 [ 158.327347][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.337289][ T7634] CPU: 1 UID: 0 PID: 7634 Comm: syz.0.1317 Tainted: G W syzkaller #0 PREEMPT(full) [ 158.337329][ T7634] Tainted: [W]=WARN [ 158.337337][ T7634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.337348][ T7634] Call Trace: [ 158.337355][ T7634] [ 158.337362][ T7634] __dump_stack+0x1d/0x30 [ 158.337387][ T7634] dump_stack_lvl+0x95/0xd0 [ 158.337410][ T7634] dump_stack+0x15/0x1b [ 158.337483][ T7634] should_fail_ex+0x263/0x280 [ 158.337512][ T7634] should_failslab+0x8c/0xb0 [ 158.337539][ T7634] __kmalloc_noprof+0xb8/0x4e0 [ 158.337564][ T7634] ? ext4_find_extent+0x17a/0x790 [ 158.337608][ T7634] ext4_find_extent+0x17a/0x790 [ 158.337636][ T7634] ? ext4_ext_map_blocks+0x1df2/0x2fb0 [ 158.337662][ T7634] ext4_ext_map_blocks+0x10d/0x2fb0 [ 158.337715][ T7634] ? __brelse+0x32/0x60 [ 158.337740][ T7634] ? from_kprojid+0x171/0x3a0 [ 158.337769][ T7634] ? ext4_mark_iloc_dirty+0xd4e/0xdb0 [ 158.337788][ T7634] ? mark_buffer_dirty+0xfa/0x220 [ 158.337822][ T7634] ? ext4_fc_track_inode+0x9f/0x5f0 [ 158.337843][ T7634] ext4_map_create_blocks+0xce/0x3a0 [ 158.337885][ T7634] ext4_map_blocks+0x594/0x970 [ 158.337939][ T7634] ext4_convert_inline_data_nolock+0x195/0x5a0 [ 158.338039][ T7634] ext4_convert_inline_data+0x2bd/0x360 [ 158.338064][ T7634] ext4_fallocate+0x163/0x2f0 [ 158.338088][ T7634] vfs_fallocate+0x3b6/0x450 [ 158.338189][ T7634] __x64_sys_fallocate+0x7a/0xd0 [ 158.338212][ T7634] x64_sys_call+0x298e/0x3020 [ 158.338241][ T7634] do_syscall_64+0x12c/0x370 [ 158.338372][ T7634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.338391][ T7634] RIP: 0033:0x7fcab216c799 [ 158.338406][ T7634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.338480][ T7634] RSP: 002b:00007fcab0bc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 158.338504][ T7634] RAX: ffffffffffffffda RBX: 00007fcab23e5fa0 RCX: 00007fcab216c799 [ 158.338518][ T7634] RDX: 0000000000000006 RSI: 0000000000000010 RDI: 0000000000000004 [ 158.338600][ T7634] RBP: 00007fcab0bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 158.338612][ T7634] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000001 [ 158.338624][ T7634] R13: 00007fcab23e6038 R14: 00007fcab23e5fa0 R15: 00007ffd72f38cd8 [ 158.338646][ T7634] [ 158.609068][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.391843][ T7654] loop5: detected capacity change from 0 to 7 [ 159.464482][ T7655] loop0: detected capacity change from 0 to 256 [ 159.599349][ T7655] FAT-fs (loop0): Directory bread(block 64) failed [ 159.606128][ T7655] FAT-fs (loop0): Directory bread(block 65) failed [ 159.612751][ T7655] FAT-fs (loop0): Directory bread(block 66) failed [ 159.619479][ T7655] FAT-fs (loop0): Directory bread(block 67) failed [ 159.626268][ T7655] FAT-fs (loop0): Directory bread(block 68) failed [ 159.633077][ T7655] FAT-fs (loop0): Directory bread(block 69) failed [ 159.639845][ T7655] FAT-fs (loop0): Directory bread(block 70) failed [ 159.646565][ T7655] FAT-fs (loop0): Directory bread(block 71) failed [ 159.653378][ T7655] FAT-fs (loop0): Directory bread(block 72) failed [ 159.660014][ T7655] FAT-fs (loop0): Directory bread(block 73) failed [ 159.900384][ T7642] loop2: detected capacity change from 0 to 4096 [ 160.171628][ T7642] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #2: comm syz.2.1321: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 160.262820][ T7642] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 160.271533][ T7642] EXT4-fs (loop2): get root inode failed [ 160.281802][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 160.281892][ C1] EXT4-fs (loop2): initial error at time 1774226258: ext4_ext_check_inode:521: inode 2 [ 160.282247][ C1] EXT4-fs (loop2): last error at time 1774226258: ext4_ext_check_inode:521: inode 2 [ 160.397084][ T7642] EXT4-fs (loop2): mount failed [ 160.856234][ T7668] loop1: detected capacity change from 0 to 128 [ 160.889512][ T7668] vfat: Unknown parameter 'utf0' [ 160.985888][ T28] audit: type=1400 audit(1774226259.032:337): avc: denied { map } for pid=7670 comm="syz.4.1330" path="socket:[18780]" dev="sockfs" ino=18780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.100397][ T7669] loop1: detected capacity change from 0 to 8192 [ 161.110641][ T7673] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1331'. [ 161.167271][ T7668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00004614) [ 161.169280][ T7649] loop3: detected capacity change from 0 to 4096 [ 161.203355][ T7668] FAT-fs (loop1): Filesystem has been set read-only [ 161.217896][ T7668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00004614) [ 161.251542][ T7668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00004614) [ 161.300805][ T7668] syz.1.1329: attempt to access beyond end of device [ 161.300805][ T7668] loop1: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 161.342495][ T7671] team_slave_1: Caught tx_queue_len zero misconfig [ 161.376663][ T7668] Buffer I/O error on dev loop1, logical block 18010, async page read [ 161.401343][ T7649] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #2: comm syz.3.1319: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 161.419865][ T7668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00004614) [ 161.419905][ T7668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00004614) [ 161.419926][ T7668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00004614) [ 161.420526][ T7668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00004614) [ 161.420549][ T7668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00004614) [ 161.420568][ T7668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00004614) [ 161.420590][ T7668] syz.1.1329: attempt to access beyond end of device [ 161.420590][ T7668] loop1: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 161.420614][ T7668] Buffer I/O error on dev loop1, logical block 18010, async page read [ 161.420706][ T7668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00004614) [ 161.420731][ T7668] syz.1.1329: attempt to access beyond end of device [ 161.420731][ T7668] loop1: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 161.420755][ T7668] Buffer I/O error on dev loop1, logical block 18010, async page read [ 161.420792][ T7668] syz.1.1329: attempt to access beyond end of device [ 161.420792][ T7668] loop1: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 161.420825][ T7668] Buffer I/O error on dev loop1, logical block 18010, async page read [ 161.420877][ T7668] syz.1.1329: attempt to access beyond end of device [ 161.420877][ T7668] loop1: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 161.420901][ T7668] Buffer I/O error on dev loop1, logical block 18010, async page read [ 161.420974][ T7668] syz.1.1329: attempt to access beyond end of device [ 161.420974][ T7668] loop1: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 161.420999][ T7668] Buffer I/O error on dev loop1, logical block 18010, async page read [ 161.421079][ T7668] syz.1.1329: attempt to access beyond end of device [ 161.421079][ T7668] loop1: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 161.421104][ T7668] Buffer I/O error on dev loop1, logical block 18010, async page read [ 161.421140][ T7668] syz.1.1329: attempt to access beyond end of device [ 161.421140][ T7668] loop1: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 161.421164][ T7668] Buffer I/O error on dev loop1, logical block 18010, async page read [ 161.421217][ T7668] syz.1.1329: attempt to access beyond end of device [ 161.421217][ T7668] loop1: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 161.421239][ T7668] Buffer I/O error on dev loop1, logical block 18010, async page read [ 161.421330][ T7668] syz.1.1329: attempt to access beyond end of device [ 161.421330][ T7668] loop1: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 161.421352][ T7668] Buffer I/O error on dev loop1, logical block 18010, async page read [ 161.726071][ T7649] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 161.804375][ T7642] loop2: detected capacity change from 0 to 1024 [ 161.880842][ T7649] EXT4-fs (loop3): get root inode failed [ 161.887441][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 161.887582][ C0] EXT4-fs (loop3): initial error at time 1774226259: ext4_ext_check_inode:521: inode 2 [ 161.887792][ C0] EXT4-fs (loop3): last error at time 1774226259: ext4_ext_check_inode:521: inode 2 [ 161.940332][ T7642] EXT4-fs: inline encryption not supported [ 162.045206][ T7649] EXT4-fs (loop3): mount failed [ 162.093146][ T7642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.198701][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.599552][ T28] audit: type=1400 audit(1774226261.652:338): avc: denied { checkpoint_restore } for pid=7717 comm="syz.1.1346" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 163.879891][ T7729] loop0: detected capacity change from 0 to 1024 [ 163.928886][ T7729] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 164.057024][ T28] audit: type=1400 audit(1774226262.112:339): avc: denied { connect } for pid=7728 comm="syz.0.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.180688][ T7741] 8021q: VLANs not supported on ip6gre0 [ 165.501376][ T7744] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1356'. [ 165.598028][ T7744] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1356'. [ 166.332818][ T7721] loop3: detected capacity change from 0 to 4096 [ 166.538819][ T7721] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #2: comm syz.3.1347: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 166.576604][ T7723] loop1: detected capacity change from 0 to 4096 [ 166.591910][ T7725] loop2: detected capacity change from 0 to 4096 [ 166.600653][ T7721] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 166.602699][ T7721] EXT4-fs (loop3): get root inode failed [ 166.612781][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 166.612842][ C1] EXT4-fs (loop3): initial error at time 1774226264: ext4_ext_check_inode:521: inode 2 [ 166.613680][ C1] EXT4-fs (loop3): last error at time 1774226264: ext4_ext_check_inode:521: inode 2 [ 166.662659][ T7721] EXT4-fs (loop3): mount failed [ 166.696463][ T7723] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.1349: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 166.777117][ T7723] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 166.796885][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 166.812436][ C1] EXT4-fs (loop1): initial error at time 1774226264: ext4_ext_check_inode:521: inode 2 [ 166.822150][ C1] EXT4-fs (loop1): last error at time 1774226264: ext4_ext_check_inode:521: inode 2 [ 166.838898][ T7725] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #2: comm syz.2.1338: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 166.877572][ T7725] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 166.886919][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 166.901564][ T7723] EXT4-fs (loop1): get root inode failed [ 166.902471][ C0] EXT4-fs (loop2): initial error at time 1774226264: ext4_ext_check_inode:521: inode 2 [ 166.902505][ C0] EXT4-fs (loop2): last error at time 1774226264: ext4_ext_check_inode:521: inode 2 [ 166.931910][ T7725] EXT4-fs (loop2): get root inode failed [ 166.937048][ T7723] EXT4-fs (loop1): mount failed [ 166.939003][ T7725] EXT4-fs (loop2): mount failed [ 167.228377][ T7760] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 167.489954][ T28] audit: type=1400 audit(1774226265.542:340): avc: denied { write } for pid=7762 comm="syz.1.1362" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 167.521487][ T7765] loop0: detected capacity change from 0 to 512 [ 167.863985][ T28] audit: type=1400 audit(1774226265.542:341): avc: denied { ioctl } for pid=7762 comm="syz.1.1362" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 168.731517][ T7765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.047112][ T7765] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.453327][ T7782] loop1: detected capacity change from 0 to 512 [ 169.495274][ T7782] EXT4-fs (loop1): 1 orphan inode deleted [ 169.519029][ T7782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.719720][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.738100][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.432034][ T7812] loop2: detected capacity change from 0 to 512 [ 170.514375][ T7812] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 170.757510][ T7812] EXT4-fs (loop2): 1 truncate cleaned up [ 170.777550][ T7812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.215944][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.326310][ T7814] loop1: detected capacity change from 0 to 512 [ 171.339777][ T7814] EXT4-fs (loop1): 1 orphan inode deleted [ 171.354252][ T7814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.665658][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.760538][ T7830] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 171.779418][ T7827] tipc: Enabled bearer , priority 0 [ 171.792939][ T7830] vhci_hcd vhci_hcd.1: invalid port number 96 [ 171.808280][ T7827] tipc: Disabling bearer [ 171.811827][ T7831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1379'. [ 171.822823][ T7830] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0 [ 171.841202][ T7831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.849883][ T7831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.972222][ T7835] netlink: 'syz.1.1380': attribute type 13 has an invalid length. [ 172.003591][ T7835] netlink: 'syz.1.1380': attribute type 17 has an invalid length. [ 172.084878][ T7834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.123039][ T7834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.350978][ T7835] bridge0: left promiscuous mode [ 172.394837][ T7835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.415028][ T7835] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.440865][ T7835] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.477648][ T118] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.490402][ T118] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.517383][ T118] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.526578][ T118] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.570602][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1381'. [ 172.620801][ T7842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1382'. [ 172.797268][ T7809] loop0: detected capacity change from 0 to 4096 [ 173.096488][ T7809] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #2: comm syz.0.1370: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 173.220356][ T7809] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 173.226892][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 173.242455][ C0] EXT4-fs (loop0): initial error at time 1774226271: ext4_ext_check_inode:521: inode 2 [ 173.252152][ C0] EXT4-fs (loop0): last error at time 1774226271: ext4_ext_check_inode:521: inode 2 [ 173.290370][ T7809] EXT4-fs (loop0): get root inode failed [ 173.296849][ T7809] EXT4-fs (loop0): mount failed [ 173.833432][ T7855] 8021q: VLANs not supported on ip6tnl0 [ 173.846712][ T7858] loop0: detected capacity change from 0 to 256 [ 174.541102][ T118] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 174.550285][ T118] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 174.588148][ T7865] netlink: 'syz.4.1391': attribute type 13 has an invalid length. [ 174.874080][ T7865] netlink: 'syz.4.1391': attribute type 17 has an invalid length. [ 174.882758][ T7872] netlink: 'syz.3.1392': attribute type 13 has an invalid length. [ 174.925314][ T7874] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 174.931976][ T7874] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.940079][ T7872] netlink: 'syz.3.1392': attribute type 17 has an invalid length. [ 174.961250][ T118] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 174.985863][ T7874] vhci_hcd vhci_hcd.0: Device attached [ 174.998006][ T118] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 175.021932][ T7879] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(18) [ 175.028563][ T7879] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 175.061480][ T7874] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(17) [ 175.068145][ T7874] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 175.112453][ T7879] vhci_hcd vhci_hcd.0: Device attached [ 175.136449][ T7874] vhci_hcd vhci_hcd.0: Device attached [ 175.159044][ T7887] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(20) [ 175.165737][ T7887] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 175.180068][ T7865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.201696][ T7874] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(22) [ 175.208941][ T7874] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 175.218788][ T10] usb 3-1: new low-speed USB device number 8 using vhci_hcd [ 175.239864][ T7865] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.252568][ T7865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.280223][ T7887] vhci_hcd vhci_hcd.0: Device attached [ 175.286034][ T7879] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 175.325386][ T7879] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 175.348980][ T7874] vhci_hcd vhci_hcd.0: Device attached [ 175.372893][ T7874] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(26) [ 175.379610][ T7874] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 175.449280][ T7872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.457330][ T7874] vhci_hcd vhci_hcd.0: Device attached [ 175.476405][ T7894] vhci_hcd: connection closed [ 175.476697][ T118] vhci_hcd vhci_hcd.1: stop threads [ 175.497091][ T7880] vhci_hcd: connection closed [ 175.497220][ T7883] vhci_hcd: connection closed [ 175.502071][ T7876] vhci_hcd: connection reset by peer [ 175.512346][ T7888] vhci_hcd: connection closed [ 175.518676][ T7890] vhci_hcd: connection closed [ 175.523690][ T118] vhci_hcd vhci_hcd.1: release socket [ 175.558907][ T7872] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.567337][ T118] vhci_hcd vhci_hcd.1: disconnect device [ 175.593570][ T118] vhci_hcd vhci_hcd.1: stop threads [ 175.603464][ T7872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.634970][ T118] vhci_hcd vhci_hcd.1: release socket [ 175.650748][ T118] vhci_hcd vhci_hcd.1: disconnect device [ 175.676832][ T118] vhci_hcd vhci_hcd.1: stop threads [ 175.692387][ T118] vhci_hcd vhci_hcd.1: release socket [ 175.725745][ T118] vhci_hcd vhci_hcd.1: disconnect device [ 175.747763][ T118] vhci_hcd vhci_hcd.1: stop threads [ 175.770687][ T118] vhci_hcd vhci_hcd.1: release socket [ 175.786720][ T118] vhci_hcd vhci_hcd.1: disconnect device [ 175.795226][ T118] vhci_hcd vhci_hcd.1: stop threads [ 175.835136][ T118] vhci_hcd vhci_hcd.1: release socket [ 175.861361][ T118] vhci_hcd vhci_hcd.1: disconnect device [ 175.887068][ T118] vhci_hcd vhci_hcd.1: stop threads [ 175.897769][ T118] vhci_hcd vhci_hcd.1: release socket [ 175.927240][ T118] vhci_hcd vhci_hcd.1: disconnect device [ 175.950933][ T28] audit: type=1400 audit(1774226274.012:342): avc: denied { firmware_load } for pid=7907 comm="syz.2.1400" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 175.963245][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1401'. [ 176.088815][ T28] audit: type=1400 audit(1774226274.152:343): avc: denied { append } for pid=7924 comm="syz.0.1404" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 176.117286][ T7925] loop0: detected capacity change from 0 to 512 [ 176.125903][ T28] audit: type=1400 audit(1774226274.182:344): avc: denied { remount } for pid=7924 comm="syz.0.1404" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 176.150204][ T28] audit: type=1400 audit(1774226274.192:345): avc: denied { bind } for pid=7924 comm="syz.0.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 176.205513][ T7931] loop2: detected capacity change from 0 to 512 [ 176.231900][ T7931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.244563][ T7931] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.259302][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1406'. [ 176.746024][ T7902] loop3: detected capacity change from 0 to 4096 [ 176.805589][ T7902] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #2: comm syz.3.1397: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 176.825121][ T7902] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 176.826653][ T7902] EXT4-fs (loop3): get root inode failed [ 176.827211][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 176.827316][ C1] EXT4-fs (loop3): initial error at time 1774226274: ext4_ext_check_inode:521: inode 2 [ 176.827636][ C1] EXT4-fs (loop3): last error at time 1774226274: ext4_ext_check_inode:521: inode 2 [ 176.872163][ T7902] EXT4-fs (loop3): mount failed [ 176.902497][ T7941] loop5: detected capacity change from 0 to 7 [ 177.056683][ T7949] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 177.063326][ T7949] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 177.088046][ T7949] vhci_hcd vhci_hcd.0: Device attached [ 177.124331][ T7949] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(17) [ 177.131133][ T7949] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 177.139028][ T7949] vhci_hcd vhci_hcd.0: Device attached [ 177.158753][ T7949] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(19) [ 177.165512][ T7949] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 177.175861][ T7949] vhci_hcd vhci_hcd.0: Device attached [ 177.221513][ T7949] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(21) [ 177.228172][ T7949] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 177.248681][ T7949] vhci_hcd vhci_hcd.0: Device attached [ 177.279556][ T7958] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(24) [ 177.286280][ T7958] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 177.294221][ T7958] vhci_hcd vhci_hcd.0: Device attached [ 177.307588][ T7949] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 177.318590][ T7949] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 177.343929][ T7949] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(29) [ 177.350576][ T7949] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 177.382812][ T7949] vhci_hcd vhci_hcd.0: Device attached [ 177.392003][ T7959] vhci_hcd: connection closed [ 177.392057][ T7952] vhci_hcd: connection closed [ 177.392401][ T7950] vhci_hcd: connection closed [ 177.396990][ T7956] vhci_hcd: connection closed [ 177.406450][ T7954] vhci_hcd: connection closed [ 177.411701][ T3552] vhci_hcd vhci_hcd.1: stop threads [ 177.421864][ T3552] vhci_hcd vhci_hcd.1: release socket [ 177.428600][ T7961] vhci_hcd: connection closed [ 177.430397][ T3552] vhci_hcd vhci_hcd.1: disconnect device [ 177.456337][ T3552] vhci_hcd vhci_hcd.1: stop threads [ 177.465289][ T3552] vhci_hcd vhci_hcd.1: release socket [ 177.471058][ T3552] vhci_hcd vhci_hcd.1: disconnect device [ 177.479184][ T3552] vhci_hcd vhci_hcd.1: stop threads [ 177.488545][ T3552] vhci_hcd vhci_hcd.1: release socket [ 177.497406][ T3552] vhci_hcd vhci_hcd.1: disconnect device [ 177.503612][ T3552] vhci_hcd vhci_hcd.1: stop threads [ 177.507008][ T28] audit: type=1400 audit(1774226275.562:346): avc: denied { name_bind } for pid=7965 comm="syz.4.1414" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 177.509502][ T3552] vhci_hcd vhci_hcd.1: release socket [ 177.536348][ T3552] vhci_hcd vhci_hcd.1: disconnect device [ 177.542430][ T3552] vhci_hcd vhci_hcd.1: stop threads [ 177.548115][ T3552] vhci_hcd vhci_hcd.1: release socket [ 177.553609][ T3552] vhci_hcd vhci_hcd.1: disconnect device [ 177.560089][ T7902] loop3: detected capacity change from 0 to 1024 [ 177.560699][ T3552] vhci_hcd vhci_hcd.1: stop threads [ 177.572429][ T3552] vhci_hcd vhci_hcd.1: release socket [ 177.578037][ T3552] vhci_hcd vhci_hcd.1: disconnect device [ 177.584294][ T7902] EXT4-fs: inline encryption not supported [ 177.614446][ T7902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.655048][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.697967][ T7973] loop3: detected capacity change from 0 to 512 [ 177.755855][ T7975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.764658][ T7975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.913036][ T7977] loop5: detected capacity change from 0 to 7 [ 177.989050][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.011622][ T28] audit: type=1400 audit(1774226276.072:347): avc: denied { mount } for pid=7980 comm="syz.1.1420" name="/" dev="ramfs" ino=18992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 178.099253][ T7987] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1423'. [ 178.430292][ T7994] netlink: 'syz.4.1426': attribute type 13 has an invalid length. [ 178.439662][ T7994] netlink: 'syz.4.1426': attribute type 17 has an invalid length. [ 178.495933][ T7994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.508886][ T7994] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.538222][ T7994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.875965][ T7998] loop1: detected capacity change from 0 to 1024 [ 178.885519][ T7998] EXT4-fs: test_dummy_encryption option not supported [ 179.000717][ T7990] loop2: detected capacity change from 0 to 4096 [ 179.041452][ T7990] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #2: comm syz.2.1424: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 179.060485][ T7990] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 179.063356][ T7990] EXT4-fs (loop2): get root inode failed [ 179.073219][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 179.073288][ C0] EXT4-fs (loop2): initial error at time 1774226277: ext4_ext_check_inode:521: inode 2 [ 179.073409][ C0] EXT4-fs (loop2): last error at time 1774226277: ext4_ext_check_inode:521: inode 2 [ 179.108501][ T7990] EXT4-fs (loop2): mount failed [ 179.275423][ T8001] loop1: detected capacity change from 0 to 512 [ 179.424338][ T8003] loop3: detected capacity change from 0 to 256 [ 179.496165][ T8001] EXT4-fs (loop1): 1 orphan inode deleted [ 179.513190][ T8001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.529490][ T8001] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.058054][ T30] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 180.091332][ T30] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 1 [ 180.642434][ T10] usb 3-1: enqueue for inactive port 0 [ 180.780563][ T8020] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 180.795870][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.834470][ T8022] loop2: detected capacity change from 0 to 1024 [ 180.918150][ T8022] EXT4-fs: inline encryption not supported [ 181.030499][ T8022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.032623][ T10] usb 3-1: enqueue for inactive port 0 [ 181.072947][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.034384][ T10] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 182.083856][ T8028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1434'. [ 182.177737][ T8030] 8021q: VLANs not supported on ip6gre0 [ 182.410309][ T28] audit: type=1400 audit(1774226280.472:348): avc: denied { watch } for pid=8037 comm="syz.2.1439" path="/proc/606/map_files" dev="proc" ino=19593 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 182.662265][ T8024] loop1: detected capacity change from 0 to 4096 [ 182.733345][ T8024] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.1433: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 182.759434][ T8024] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 182.764753][ T8024] EXT4-fs (loop1): get root inode failed [ 182.774692][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 182.774722][ C0] EXT4-fs (loop1): initial error at time 1774226280: ext4_ext_check_inode:521: inode 2 [ 182.774855][ C0] EXT4-fs (loop1): last error at time 1774226280: ext4_ext_check_inode:521: inode 2 [ 182.825147][ T8024] EXT4-fs (loop1): mount failed [ 182.850581][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1442'. [ 182.862696][ T8049] vlan2: entered promiscuous mode [ 182.867993][ T8049] gretap0: entered promiscuous mode [ 183.423076][ T8057] loop2: detected capacity change from 0 to 256 [ 184.065724][ T8024] loop1: detected capacity change from 0 to 1024 [ 184.227296][ T8064] 8021q: VLANs not supported on ip6gre0 [ 184.341586][ T8066] loop1: detected capacity change from 0 to 2048 [ 184.354141][ T8068] loop3: detected capacity change from 0 to 1024 [ 184.371293][ T8066] EXT4-fs: Ignoring removed i_version option [ 184.418645][ T8068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.468027][ T8066] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002c019, mo2=0002] [ 184.484668][ T28] audit: type=1400 audit(1774226282.542:349): avc: denied { add_name } for pid=8067 comm="syz.3.1449" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.512337][ T8066] System zones: 0-7 [ 184.527790][ T8066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.574226][ T28] audit: type=1400 audit(1774226282.542:350): avc: denied { append open } for pid=8067 comm="syz.3.1449" path="/312/file1/memory.events" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 184.628865][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.661393][ T8075] syzkaller0: entered promiscuous mode [ 184.672505][ T8075] syzkaller0: entered allmulticast mode [ 184.686983][ T28] audit: type=1400 audit(1774226282.722:351): avc: denied { ioctl } for pid=8065 comm="syz.1.1448" path="socket:[19685]" dev="sockfs" ino=19685 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 184.722637][ T8066] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.1448: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 184.766212][ T8077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1451'. [ 184.800363][ T8077] vlan2: entered promiscuous mode [ 184.939762][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.048574][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1455'. [ 185.063255][ T8090] vlan4: entered promiscuous mode [ 185.075163][ T8090] bridge0: entered promiscuous mode [ 185.126797][ T8079] loop3: detected capacity change from 0 to 512 [ 185.169661][ T8095] loop1: detected capacity change from 0 to 512 [ 185.170734][ T8079] EXT4-fs (loop3): 1 orphan inode deleted [ 185.183903][ T8095] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.190532][ T8079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.213166][ T8095] EXT4-fs (loop1): 1 truncate cleaned up [ 185.244488][ T28] audit: type=1400 audit(1774226283.302:352): avc: denied { create } for pid=8100 comm="syz.0.1458" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netrom_socket permissive=1 [ 185.274754][ T8095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.328588][ T8108] loop0: detected capacity change from 0 to 256 [ 185.332225][ T28] audit: type=1400 audit(1774226283.362:353): avc: denied { create } for pid=8100 comm="syz.0.1458" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 185.395495][ T28] audit: type=1400 audit(1774226283.362:354): avc: denied { setopt } for pid=8100 comm="syz.0.1458" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 185.424182][ T28] audit: type=1400 audit(1774226283.362:355): avc: denied { write } for pid=8100 comm="syz.0.1458" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 185.425707][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.445092][ T28] audit: type=1400 audit(1774226283.362:356): avc: denied { read append } for pid=8100 comm="syz.0.1458" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 185.487970][ T28] audit: type=1400 audit(1774226283.362:357): avc: denied { open } for pid=8100 comm="syz.0.1458" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 186.021905][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.463325][ T8119] loop3: detected capacity change from 0 to 512 [ 186.487509][ T8119] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 186.626283][ T8119] EXT4-fs (loop3): orphan file too big: 4294967295 [ 186.651051][ T8122] loop5: detected capacity change from 0 to 7 [ 186.656980][ T8119] EXT4-fs (loop3): mount failed [ 186.829185][ T8124] loop1: detected capacity change from 0 to 128 [ 186.918125][ T8124] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.950214][ T8124] ext4 filesystem being mounted at /292/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 187.492857][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1466'. [ 187.517319][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.573087][ T8139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1468'. [ 187.595367][ T8139] vlan2: entered promiscuous mode [ 187.623205][ T8139] bridge0: entered promiscuous mode [ 187.865571][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 187.865588][ T28] audit: type=1400 audit(1774226285.922:369): avc: denied { map } for pid=8150 comm="syz.1.1475" path="pipe:[489]" dev="pipefs" ino=489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 188.002455][ T8155] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1475'. [ 188.204012][ T8156] EXT4-fs (loop3): 1 orphan inode deleted [ 188.222594][ T8156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.830800][ T8170] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1479'. [ 188.844484][ T28] audit: type=1400 audit(1774226285.922:370): avc: denied { execute } for pid=8150 comm="syz.1.1475" path="pipe:[489]" dev="pipefs" ino=489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 188.937425][ T28] audit: type=1400 audit(1774226287.002:371): avc: denied { listen } for pid=8165 comm="syz.2.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 188.957165][ T28] audit: type=1400 audit(1774226287.002:372): avc: denied { ioctl } for pid=8165 comm="syz.2.1477" path="socket:[19303]" dev="sockfs" ino=19303 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 189.017142][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.047285][ T28] audit: type=1400 audit(1774226287.022:373): avc: denied { setopt } for pid=8172 comm="syz.4.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 189.086926][ T28] audit: type=1400 audit(1774226287.022:374): avc: denied { accept } for pid=8172 comm="syz.4.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 189.113932][ T8175] bond1 (unregistering): Released all slaves [ 189.159800][ T8177] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1480'. [ 189.489121][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1483'. [ 190.125326][ T8185] vlan3: entered promiscuous mode [ 190.143091][ T28] audit: type=1400 audit(1774226287.672:375): avc: denied { connect } for pid=8181 comm="syz.1.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 190.228201][ T8191] 8021q: VLANs not supported on ip6gre0 [ 190.321387][ T8197] set_capacity_and_notify: 3 callbacks suppressed [ 190.321408][ T8197] loop3: detected capacity change from 0 to 512 [ 190.338819][ T8197] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 190.351849][ T8197] loop3: detected capacity change from 0 to 512 [ 190.358872][ T8197] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 190.374257][ T28] audit: type=1400 audit(1774226288.432:376): avc: denied { append } for pid=8196 comm="syz.3.1487" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 190.390195][ T8200] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 190.404068][ T8200] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.426993][ T8200] vhci_hcd vhci_hcd.0: Device attached [ 190.444166][ T8209] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 190.450829][ T8209] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.483290][ T8200] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(17) [ 190.489935][ T8200] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 190.497129][ T8209] vhci_hcd vhci_hcd.0: Device attached [ 190.505161][ T8217] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(18) [ 190.511901][ T8217] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 190.519643][ T8200] vhci_hcd vhci_hcd.0: Device attached [ 190.528537][ T8217] vhci_hcd vhci_hcd.0: Device attached [ 190.534337][ T8200] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(19) [ 190.541062][ T8200] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 190.549619][ T8200] vhci_hcd vhci_hcd.0: Device attached [ 190.555418][ T8209] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(17) [ 190.562043][ T8209] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 190.578122][ T8200] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(21) [ 190.584757][ T8200] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.600419][ T8217] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(22) [ 190.607277][ T8217] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.614838][ T8209] vhci_hcd vhci_hcd.0: Device attached [ 190.623131][ T8200] vhci_hcd vhci_hcd.0: Device attached [ 190.630894][ T8217] vhci_hcd vhci_hcd.0: Device attached [ 190.640884][ T8234] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(24) [ 190.647516][ T8234] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.659339][ T8209] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(21) [ 190.666001][ T8209] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.677110][ T3402] usb 3-1: new low-speed USB device number 9 using vhci_hcd [ 190.692982][ T8200] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.701268][ T8209] vhci_hcd vhci_hcd.0: Device attached [ 190.718123][ T8217] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.726652][ T8217] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.736915][ T3598] usb 5-1: new low-speed USB device number 7 using vhci_hcd [ 190.754823][ T8234] vhci_hcd vhci_hcd.0: Device attached [ 190.767258][ T8200] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.786964][ T8200] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(29) [ 190.793677][ T8200] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 190.856081][ T8200] vhci_hcd vhci_hcd.0: Device attached [ 190.864432][ T8228] vhci_hcd: connection closed [ 190.864635][ T8222] vhci_hcd: connection closed [ 190.869832][ T3552] vhci_hcd vhci_hcd.1: stop threads [ 190.870075][ T8215] vhci_hcd: connection closed [ 190.874562][ T8209] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(25) [ 190.879865][ T8201] vhci_hcd: connection reset by peer [ 190.884533][ T8209] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 190.904500][ T8243] vhci_hcd: connection closed [ 190.904653][ T8235] vhci_hcd: connection closed [ 190.909440][ T3552] vhci_hcd vhci_hcd.1: release socket [ 190.920488][ T3552] vhci_hcd vhci_hcd.1: disconnect device [ 190.926698][ T3552] vhci_hcd vhci_hcd.1: stop threads [ 190.946627][ T28] audit: type=1400 audit(1774226289.002:377): avc: denied { wake_alarm } for pid=8246 comm="syz.3.1490" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 190.977077][ T8209] vhci_hcd vhci_hcd.0: Device attached [ 190.980136][ T3552] vhci_hcd vhci_hcd.1: release socket [ 190.992158][ T3552] vhci_hcd vhci_hcd.1: disconnect device [ 190.996321][ T8240] vhci_hcd: connection closed [ 190.998268][ T8231] vhci_hcd: connection closed [ 190.999034][ T8242] vhci_hcd: connection closed [ 191.003259][ T8219] vhci_hcd: connection closed [ 191.008278][ T28] audit: type=1400 audit(1774226289.002:378): avc: denied { associate } for pid=8246 comm="syz.3.1490" name="cgroup.controllers" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 191.012506][ T8226] vhci_hcd: connection closed [ 191.014140][ T8210] vhci_hcd: connection reset by peer [ 191.018186][ T3552] vhci_hcd vhci_hcd.1: stop threads [ 191.039549][ T8252] netlink: 'syz.3.1492': attribute type 27 has an invalid length. [ 191.047511][ T3552] vhci_hcd vhci_hcd.1: release socket [ 191.068268][ T3552] vhci_hcd vhci_hcd.1: disconnect device [ 191.074129][ T3552] vhci_hcd vhci_hcd.1: stop threads [ 191.079623][ T3552] vhci_hcd vhci_hcd.1: release socket [ 191.085159][ T3552] vhci_hcd vhci_hcd.1: disconnect device [ 191.178526][ T3552] vhci_hcd vhci_hcd.1: stop threads [ 191.183864][ T3552] vhci_hcd vhci_hcd.1: release socket [ 191.195085][ T8252] vlan2: left promiscuous mode [ 191.203058][ T3552] vhci_hcd vhci_hcd.1: disconnect device [ 191.217128][ T3552] vhci_hcd vhci_hcd.1: stop threads [ 191.222494][ T3552] vhci_hcd vhci_hcd.1: release socket [ 191.230461][ T3552] vhci_hcd vhci_hcd.1: disconnect device [ 191.230527][ T8254] loop0: detected capacity change from 0 to 256 [ 191.238268][ T8253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.265663][ T3552] vhci_hcd vhci_hcd.2: stop threads [ 191.267629][ T8254] FAT-fs (loop0): Directory bread(block 64) failed [ 191.276703][ T3552] vhci_hcd vhci_hcd.2: release socket [ 191.277556][ T8254] FAT-fs (loop0): Directory bread(block 65) failed [ 191.277591][ T8254] FAT-fs (loop0): Directory bread(block 66) failed [ 191.283497][ T3552] vhci_hcd vhci_hcd.2: disconnect device [ 191.289529][ T8254] FAT-fs (loop0): Directory bread(block 67) failed [ 191.302208][ T8253] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.308311][ T8254] FAT-fs (loop0): Directory bread(block 68) failed [ 191.321454][ T8254] FAT-fs (loop0): Directory bread(block 69) failed [ 191.328074][ T8254] FAT-fs (loop0): Directory bread(block 70) failed [ 191.334661][ T8254] FAT-fs (loop0): Directory bread(block 71) failed [ 191.337218][ T3552] vhci_hcd vhci_hcd.2: stop threads [ 191.341298][ T8254] FAT-fs (loop0): Directory bread(block 72) failed [ 191.346546][ T3552] vhci_hcd vhci_hcd.2: release socket [ 191.353061][ T8254] FAT-fs (loop0): Directory bread(block 73) failed [ 191.367463][ T8253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.383778][ T3552] vhci_hcd vhci_hcd.2: disconnect device [ 191.397052][ T3552] vhci_hcd vhci_hcd.2: stop threads [ 191.402346][ T3552] vhci_hcd vhci_hcd.2: release socket [ 191.416944][ T3552] vhci_hcd vhci_hcd.2: disconnect device [ 191.427022][ T3552] vhci_hcd vhci_hcd.2: stop threads [ 191.432297][ T3552] vhci_hcd vhci_hcd.2: release socket [ 191.447004][ T3552] vhci_hcd vhci_hcd.2: disconnect device [ 191.459281][ T3552] vhci_hcd vhci_hcd.2: stop threads [ 191.475000][ T3552] vhci_hcd vhci_hcd.2: release socket [ 191.489825][ T3552] vhci_hcd vhci_hcd.2: disconnect device [ 191.505820][ T3552] vhci_hcd vhci_hcd.2: stop threads [ 191.524112][ T3552] vhci_hcd vhci_hcd.2: release socket [ 191.531589][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1495'. [ 191.541026][ T8267] xt_l2tp: missing protocol rule (udp|l2tpip) [ 191.547381][ T3552] vhci_hcd vhci_hcd.2: disconnect device [ 191.596368][ T8269] loop2: detected capacity change from 0 to 512 [ 191.633796][ T8269] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 191.646938][ T8269] EXT4-fs (loop2): 1 truncate cleaned up [ 191.653223][ T8269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.657275][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 191.674733][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1498'. [ 191.674733][ T8269] FAULT_INJECTION: forcing a failure. [ 191.674733][ T8269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.674766][ T8269] CPU: 1 UID: 0 PID: 8269 Comm: syz.2.1496 Tainted: G W syzkaller #0 PREEMPT(full) [ 191.674795][ T8269] Tainted: [W]=WARN [ 191.674802][ T8269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.674814][ T8269] Call Trace: [ 191.674821][ T8269] [ 191.674829][ T8269] __dump_stack+0x1d/0x30 [ 191.674877][ T8269] dump_stack_lvl+0x95/0xd0 [ 191.674899][ T8269] dump_stack+0x15/0x1b [ 191.674920][ T8269] should_fail_ex+0x263/0x280 [ 191.674946][ T8269] should_fail+0xb/0x20 [ 191.674972][ T8269] should_fail_usercopy+0x1a/0x20 [ 191.674997][ T8269] _copy_to_user+0x20/0xa0 [ 191.675060][ T8269] simple_read_from_buffer+0xb5/0x130 [ 191.675161][ T8269] proc_fail_nth_read+0x10e/0x150 [ 191.675189][ T8269] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.675224][ T8269] vfs_read+0x1ab/0x7f0 [ 191.675330][ T8269] ? __rcu_read_unlock+0x4e/0x70 [ 191.675351][ T8269] ? __fget_files+0x184/0x1c0 [ 191.675384][ T8269] ? mutex_lock+0x57/0x90 [ 191.675422][ T8269] ksys_read+0xdc/0x1a0 [ 191.675440][ T8269] __x64_sys_read+0x40/0x50 [ 191.675457][ T8269] x64_sys_call+0x2886/0x3020 [ 191.675482][ T8269] do_syscall_64+0x12c/0x370 [ 191.675532][ T8269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.675552][ T8269] RIP: 0033:0x7f066701cfce [ 191.675568][ T8269] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 191.675588][ T8269] RSP: 002b:00007f0665aaefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.675625][ T8269] RAX: ffffffffffffffda RBX: 00007f0665aaf6c0 RCX: 00007f066701cfce [ 191.675639][ T8269] RDX: 000000000000000f RSI: 00007f0665aaf0a0 RDI: 0000000000000005 [ 191.675727][ T8269] RBP: 00007f0665aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 191.675740][ T8269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.675752][ T8269] R13: 00007f06672d6038 R14: 00007f06672d5fa0 R15: 00007ffdfc6f3698 [ 191.675796][ T8269] [ 191.897446][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.967440][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1499'. [ 191.987220][ T8283] 8021q: VLANs not supported on vcan0 [ 192.018752][ T8291] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1503'. [ 192.052314][ T8294] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1504'. [ 192.119877][ T8303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1506'. [ 192.173817][ T8301] loop2: detected capacity change from 0 to 512 [ 192.181011][ T8301] EXT4-fs: Ignoring removed bh option [ 192.186429][ T8301] EXT4-fs: inline encryption not supported [ 192.193187][ T8301] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 192.210015][ T8301] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 192.224692][ T8301] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1505: bg 0: block 248: padding at end of block bitmap is not set [ 192.239177][ T8301] loop2: lost filesystem error report for type 5 error -117 [ 192.239388][ T8301] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1505: Failed to acquire dquot type 1 [ 192.258022][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 192.258037][ C0] EXT4-fs (loop2): last error at time 1774226290: ext4_validate_block_bitmap:441 [ 192.274585][ T8301] loop2: lost filesystem error report for type 5 error -117 [ 192.275075][ T8301] EXT4-fs (loop2): 1 truncate cleaned up [ 192.288685][ T8301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 192.331948][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 194.012106][ T8322] loop2: detected capacity change from 0 to 256 [ 194.031232][ T8322] FAT-fs (loop2): Directory bread(block 64) failed [ 194.037827][ T8322] FAT-fs (loop2): Directory bread(block 65) failed [ 194.044368][ T8322] FAT-fs (loop2): Directory bread(block 66) failed [ 194.050912][ T8322] FAT-fs (loop2): Directory bread(block 67) failed [ 194.057508][ T8322] FAT-fs (loop2): Directory bread(block 68) failed [ 194.064050][ T8322] FAT-fs (loop2): Directory bread(block 69) failed [ 194.070727][ T8322] FAT-fs (loop2): Directory bread(block 70) failed [ 194.077368][ T8322] FAT-fs (loop2): Directory bread(block 71) failed [ 194.083980][ T8322] FAT-fs (loop2): Directory bread(block 72) failed [ 194.090525][ T8322] FAT-fs (loop2): Directory bread(block 73) failed [ 194.441187][ T8258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.494461][ T8332] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 194.495481][ T8337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1514'. [ 194.501155][ T8332] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 194.504537][ T8336] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1515'. [ 194.510734][ T8337] 8021q: VLANs not supported on vcan0 [ 194.524582][ T8332] vhci_hcd vhci_hcd.0: Device attached [ 194.527856][ T8335] netlink: 'syz.1.1517': attribute type 6 has an invalid length. [ 194.545554][ T8332] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 194.545617][ T8335] netlink: 'syz.1.1517': attribute type 1 has an invalid length. [ 194.552176][ T8332] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 194.555212][ T8332] vhci_hcd vhci_hcd.0: Device attached [ 194.560134][ T8335] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1517'. [ 194.568097][ T8332] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 194.573862][ T8335] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 194.582136][ T8332] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 194.583296][ T8332] vhci_hcd vhci_hcd.0: Device attached [ 194.621458][ T8338] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(20) [ 194.628097][ T8338] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 194.635883][ T8338] vhci_hcd vhci_hcd.0: Device attached [ 194.637228][ T8334] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 194.648055][ T8334] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 194.655549][ T8332] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(23) [ 194.662168][ T8332] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 194.670102][ T8332] vhci_hcd vhci_hcd.0: Device attached [ 194.683351][ T8338] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 194.707187][ T8332] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 194.715797][ T8332] vhci_hcd vhci_hcd.0: port 0 already used [ 194.722902][ T8338] mmap: syz.0.1516 (8338) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 194.742452][ T8334] vhci_hcd vhci_hcd.0: Device attached [ 194.757847][ T8347] bridge_slave_0: left allmulticast mode [ 194.763627][ T8347] bridge_slave_0: left promiscuous mode [ 194.769372][ T8347] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.783884][ T8340] vhci_hcd: connection closed [ 194.784142][ T1651] vhci_hcd vhci_hcd.0: stop threads [ 194.794954][ T9] usb 1-1: new low-speed USB device number 6 using vhci_hcd [ 194.802393][ T8348] vhci_hcd: connection closed [ 194.803553][ T8347] bridge_slave_1: left allmulticast mode [ 194.817873][ T8342] vhci_hcd: connection closed [ 194.819370][ T8350] vhci_hcd: connection closed [ 194.824346][ T1651] vhci_hcd vhci_hcd.0: release socket [ 194.829618][ T8344] vhci_hcd: connection closed [ 194.834708][ T8352] vhci_hcd: connection closed [ 194.845584][ T8347] bridge_slave_1: left promiscuous mode [ 194.856377][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 194.856395][ T28] audit: type=1400 audit(1774226292.782:383): avc: denied { mount } for pid=8330 comm="syz.0.1516" name="/" dev="configfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 194.887678][ T1651] vhci_hcd vhci_hcd.0: disconnect device [ 194.893501][ T1651] vhci_hcd vhci_hcd.0: stop threads [ 194.899768][ T1651] vhci_hcd vhci_hcd.0: release socket [ 194.905484][ T1651] vhci_hcd vhci_hcd.0: disconnect device [ 194.909726][ T8347] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.913967][ T1651] vhci_hcd vhci_hcd.0: stop threads [ 194.924124][ T1651] vhci_hcd vhci_hcd.0: release socket [ 194.930356][ T1651] vhci_hcd vhci_hcd.0: disconnect device [ 194.941563][ T28] audit: type=1400 audit(1774226293.002:384): avc: denied { map } for pid=8368 comm="syz.4.1524" path="socket:[20655]" dev="sockfs" ino=20655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 194.969715][ T8347] bond0: (slave bond_slave_0): Releasing backup interface [ 194.977267][ T1651] vhci_hcd vhci_hcd.0: stop threads [ 194.982763][ T1651] vhci_hcd vhci_hcd.0: release socket [ 195.750141][ T8371] loop3: detected capacity change from 0 to 4096 [ 195.787187][ T3598] usb 5-1: enqueue for inactive port 0 [ 195.792708][ T3598] usb 5-1: enqueue for inactive port 0 [ 195.812934][ T3402] usb 3-1: enqueue for inactive port 0 [ 195.929987][ T8347] bond_slave_0: left promiscuous mode [ 195.938607][ T1651] vhci_hcd vhci_hcd.0: disconnect device [ 195.957088][ T3402] usb 3-1: enqueue for inactive port 0 [ 195.964164][ T1651] vhci_hcd vhci_hcd.0: stop threads [ 195.971256][ T8347] bond0: (slave bond_slave_1): Releasing backup interface [ 196.017780][ T8371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.031217][ T3598] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 196.037659][ T3402] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 196.938632][ T1651] vhci_hcd vhci_hcd.0: release socket [ 196.947974][ T1651] vhci_hcd vhci_hcd.0: disconnect device [ 196.953692][ T1651] vhci_hcd vhci_hcd.0: stop threads [ 196.959283][ T1651] vhci_hcd vhci_hcd.0: release socket [ 196.964739][ T1651] vhci_hcd vhci_hcd.0: disconnect device [ 196.975276][ T8347] bond_slave_1: left promiscuous mode [ 197.460264][ T8382] 9p: Bad value for 'wfdno' [ 197.479255][ T8347] team_slave_0: left promiscuous mode [ 197.494185][ T8347] team0: Port device team_slave_0 removed [ 197.501364][ T8347] team_slave_1: left promiscuous mode [ 197.507729][ T8347] team0: Port device team_slave_1 removed [ 197.514212][ T8347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.521713][ T8380] netlink: 'syz.4.1524': attribute type 16 has an invalid length. [ 197.535387][ T8380] netlink: 'syz.4.1524': attribute type 17 has an invalid length. [ 197.546554][ T8347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.563163][ T8347] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 198.045779][ T8354] team0: Mode changed to "loadbalance" [ 198.054067][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.172762][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1529'. [ 198.197331][ T8396] vlan3: entered promiscuous mode [ 198.581943][ T8417] loop0: detected capacity change from 0 to 512 [ 198.593059][ T8417] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 198.608576][ T8417] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 198.619172][ T8417] EXT4-fs error (device loop0): ext4_orphan_get:1391: comm syz.0.1536: inode #15: comm syz.0.1536: iget: illegal inode # [ 198.632309][ T8417] loop0: lost filesystem error report for type 5 error -117 [ 198.632516][ T8417] EXT4-fs (loop0): Remounting filesystem read-only [ 198.639902][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 198.639935][ C0] EXT4-fs (loop0): initial error at time 1774226296: ext4_orphan_get:1391 [ 198.639955][ C0] EXT4-fs (loop0): last error at time 1774226296: ext4_orphan_get:1391 [ 198.671824][ T8417] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.052105][ T8430] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 199.148645][ T8429] loop1: detected capacity change from 0 to 4096 [ 199.198998][ T8429] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.1539: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 199.219697][ T8429] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 199.222070][ T8429] EXT4-fs (loop1): get root inode failed [ 199.232324][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 199.232370][ C1] EXT4-fs (loop1): initial error at time 1774226297: ext4_ext_check_inode:521: inode 2 [ 199.232780][ C1] EXT4-fs (loop1): last error at time 1774226297: ext4_ext_check_inode:521: inode 2 [ 199.280009][ T8429] EXT4-fs (loop1): mount failed [ 199.454559][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.478384][ T8441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1543'. [ 199.762431][ T8429] loop1: detected capacity change from 0 to 1024 [ 199.866971][ T9] usb 1-1: enqueue for inactive port 0 [ 199.925747][ T9] usb 1-1: enqueue for inactive port 0 [ 199.935356][ T8429] EXT4-fs: inline encryption not supported [ 199.966575][ T8451] loop5: detected capacity change from 0 to 7 [ 200.038120][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 200.100807][ T8429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.202126][ T8460] netlink: 'syz.4.1548': attribute type 12 has an invalid length. [ 200.214299][ T8460] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1548'. [ 200.230072][ T8460] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1548'. [ 200.259041][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.282177][ T28] audit: type=1400 audit(1774226298.342:385): avc: denied { setattr } for pid=8461 comm="syz.4.1550" path="socket:[20319]" dev="sockfs" ino=20319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 200.508340][ T8469] loop1: detected capacity change from 0 to 512 [ 200.528696][ T8474] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(15) [ 200.535338][ T8474] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.557651][ T28] audit: type=1400 audit(1774226298.612:386): avc: denied { mount } for pid=8470 comm="syz.2.1553" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 200.580142][ T8469] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 200.601683][ T8471] loop2: detected capacity change from 0 to 764 [ 200.613776][ T8474] vhci_hcd vhci_hcd.0: Device attached [ 200.619770][ T8479] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(18) [ 200.626455][ T8469] EXT4-fs (loop1): 1 orphan inode deleted [ 200.626543][ T8479] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 200.642568][ T8469] EXT4-fs (loop1): 1 truncate cleaned up [ 200.645211][ T28] audit: type=1400 audit(1774226298.682:387): avc: denied { remount } for pid=8470 comm="syz.2.1553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 200.651364][ T8469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.668231][ T8479] vhci_hcd vhci_hcd.0: Device attached [ 200.843170][ T8479] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(22) [ 200.849960][ T8479] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.858027][ T8479] vhci_hcd vhci_hcd.0: Device attached [ 200.864286][ T8479] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(24) [ 200.870925][ T8479] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.892008][ T8491] loop2: detected capacity change from 0 to 256 [ 200.912406][ T8491] FAT-fs (loop2): Directory bread(block 64) failed [ 200.919016][ T8491] FAT-fs (loop2): Directory bread(block 65) failed [ 200.925543][ T8491] FAT-fs (loop2): Directory bread(block 66) failed [ 200.932347][ T8491] FAT-fs (loop2): Directory bread(block 67) failed [ 200.938948][ T8491] FAT-fs (loop2): Directory bread(block 68) failed [ 200.945546][ T8491] FAT-fs (loop2): Directory bread(block 69) failed [ 200.952542][ T8491] FAT-fs (loop2): Directory bread(block 70) failed [ 200.959242][ T8491] FAT-fs (loop2): Directory bread(block 71) failed [ 200.965798][ T8491] FAT-fs (loop2): Directory bread(block 72) failed [ 200.972448][ T8491] FAT-fs (loop2): Directory bread(block 73) failed [ 201.015502][ T28] audit: type=1400 audit(1774226299.062:388): avc: denied { create } for pid=8468 comm="syz.1.1549" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 201.062556][ T8493] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 201.080915][ T8479] vhci_hcd vhci_hcd.0: Device attached [ 201.098690][ T8474] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(17) [ 201.105333][ T8474] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 201.118550][ T8492] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.127163][ T8474] vhci_hcd vhci_hcd.0: Device attached [ 201.133365][ T28] audit: type=1400 audit(1774226299.132:389): avc: denied { remove_name } for pid=3317 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.178716][ T8474] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 201.188649][ T28] audit: type=1400 audit(1774226299.132:390): avc: denied { unlink } for pid=3317 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 201.233306][ T8474] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(29) [ 201.233332][ T8474] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 201.233399][ T8474] vhci_hcd vhci_hcd.0: Device attached [ 201.238471][ T8475] vhci_hcd: connection reset by peer [ 201.242750][ T8496] vhci_hcd: connection closed [ 201.259769][ T8489] vhci_hcd: connection closed [ 201.264504][ T50] vhci_hcd vhci_hcd.0: stop threads [ 201.267039][ T8483] vhci_hcd: connection closed [ 201.269388][ T50] vhci_hcd vhci_hcd.0: release socket [ 201.274595][ T8487] vhci_hcd: connection closed [ 201.279739][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 201.285255][ T8480] vhci_hcd: connection closed [ 201.295673][ T50] vhci_hcd vhci_hcd.0: stop threads [ 201.305900][ T50] vhci_hcd vhci_hcd.0: release socket [ 201.311606][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 201.317572][ T50] vhci_hcd vhci_hcd.0: stop threads [ 201.347007][ T50] vhci_hcd vhci_hcd.0: release socket [ 201.352609][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 201.360509][ T50] vhci_hcd vhci_hcd.0: stop threads [ 201.374212][ T50] vhci_hcd vhci_hcd.0: release socket [ 201.383768][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 201.392514][ T50] vhci_hcd vhci_hcd.0: stop threads [ 201.398617][ T50] vhci_hcd vhci_hcd.0: release socket [ 201.404287][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 201.410440][ T50] vhci_hcd vhci_hcd.0: stop threads [ 201.415953][ T50] vhci_hcd vhci_hcd.0: release socket [ 201.421928][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 201.428518][ T8502] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1561'. [ 201.465921][ T8507] netlink: 'syz.4.1562': attribute type 1 has an invalid length. [ 201.480084][ T8507] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.491032][ T8507] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1562'. [ 201.505683][ T8507] bond1: (slave geneve2): making interface the new active one [ 201.514791][ T8507] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 201.523782][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.533763][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.542937][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.577599][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.669825][ T8519] loop2: detected capacity change from 0 to 128 [ 201.688267][ T8519] vfat: Unknown parameter 'ڋo^zd_VZ[~ͯ3۝mv⓹ltͲ{Ļdȭ/nMBVng&E' [ 201.734615][ T8503] chnl_net:caif_netlink_parms(): no params data found [ 201.778137][ T3001] ================================================================== [ 201.786254][ T3001] BUG: KCSAN: data-race in d_delete / path_lookupat [ 201.792856][ T3001] [ 201.795194][ T3001] read-write to 0xffff88811a5089c0 of 4 bytes by task 3293 on cpu 1: [ 201.803365][ T3001] d_delete+0xbe/0xe0 [ 201.807363][ T3001] d_delete_notify+0x32/0x100 [ 201.812038][ T3001] vfs_unlink+0x289/0x490 [ 201.816364][ T3001] filename_unlinkat+0x1e2/0x410 [ 201.821304][ T3001] __se_sys_unlink+0x2b/0xe0 [ 201.825893][ T3001] __x64_sys_unlink+0x1f/0x30 [ 201.830579][ T3001] x64_sys_call+0x2eb6/0x3020 [ 201.835263][ T3001] do_syscall_64+0x12c/0x370 [ 201.839877][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.845780][ T3001] [ 201.848200][ T3001] read to 0xffff88811a5089c0 of 4 bytes by task 3001 on cpu 0: [ 201.855946][ T3001] path_lookupat+0x1d8/0x500 [ 201.860543][ T3001] filename_lookup+0x190/0x390 [ 201.865320][ T3001] do_readlinkat+0x74/0x2f0 [ 201.869923][ T3001] __x64_sys_readlink+0x47/0x60 [ 201.874798][ T3001] x64_sys_call+0x2b51/0x3020 [ 201.879513][ T3001] do_syscall_64+0x12c/0x370 [ 201.884119][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.890040][ T3001] [ 201.892367][ T3001] value changed: 0x00300180 -> 0x00004080 [ 201.898144][ T3001] [ 201.900573][ T3001] Reported by Kernel Concurrency Sanitizer on: [ 201.906736][ T3001] CPU: 0 UID: 0 PID: 3001 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 201.917244][ T3001] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 201.921046][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 201.931100][ T3001] ================================================================== [ 201.944156][ T8529] 8021q: VLANs not supported on ip6gre0 [ 202.288110][ T1651] bond0 (unregistering): Released all slaves [ 206.266981][ T9] usb 1-1: enqueue for inactive port 0 [ 206.272637][ T9] usb 1-1: enqueue for inactive port 0 [ 206.346994][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set