last executing test programs: 20.555084204s ago: executing program 3 (id=351): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) write(r4, &(0x7f0000000000)="64ecf9eaf0405f0ea33689d9ebcb3c37b3394ad3ef1c5f128defdcb64ace5679d1e107009b7d9c0a79ef6d23301d5bd01a4b0d4b2211b677673002d7eecb7eaef33ac229112b26628293def882f18505f4826109e7a5bf17aba0447c20ebd364df71cca3eb38e9c4c21fcf48e96ae303cd25903fbee26e91da980300000000fd0000621d1ca210868e707e55ef051803e4b177e7e603db9e120a81f977c7998de0acc3", 0xa3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000fbdbdf250900020000000000000000000800410072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r0}) syz_open_dev$sg(0x0, 0x0, 0x8002) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r8 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, 0x0, 0x0) 15.222896227s ago: executing program 3 (id=358): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_io_uring_setup(0x760b, &(0x7f0000001400)={0x0, 0x79e7, 0x400, 0xffffffff, 0x11c}, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000000)) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001000"/27], 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000001c0)='./bus/file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2c7, &(0x7f0000000cc0)="$eJzs3MFr22YYx/Hf7Cx2HBJ7MAYbbHvZLtvFJN5hx82MBMYMG1kc2h4KSiO3xqodJJPiUhpfSq/9O0KPvRXa/gO5lF567y0UCr3kUKoSyU7l2EncxI6d5vuB8D7W8z74jaSIR4Jo59KDm5WSly1ZdcWSRjGpqV0psxe1fNEaY0E8qaimfp1++/L7/y9f+SdfKCwsGbOYX/4tZ4yZ/fHJrTsPf3pWn155NPs4oe3M1Z03uVfbk9vf7rxfvlH2TNkz1VrdWGa1Vqtbq45t1speJWvMf45tebYpVz3b7ciXnNr6esNY1bWZ1Lpre56xqg1TsRumXjN1t2Gs61a5arLZrJlJ6QKLSRN9TCtuLS1Z+UPTfnygi8LQTfXa6Lr5Zu9kcesM1gQAAMbM0f1/2Osf3v8XVsLxU/r/b47v/yX6/yFpdnw6pv/HefV79Ox33byVav39dqL/BwAAAAAAAAAAAAAAAAAAAADgPNj1/bTv++m9sbUp+JyQlJTkt/IjXiaGJHr8/cjPMcf/jxEtFwMW+ce9pOTc3yhuFMMxzOdLKsuRrTml9S44H1rCePHvwsKcCWT01Nls1W9uFONKtOvbMr3qf/hqPqw3nfVfKhX9/pzS+rr39+d61k/ql58j9Vml9fyaanK0FpzXH+vvzhvz17+FA/VTwTwAAAAAAD4HWbOv6/49yAcTkurOh/WR5wO+728e9XzgwP31hL7r5xWVAAAAAADg1LzG7YrlOLZ7giAh6RTlgw98Xxr9MuIaj73RGfwpaQyWcVZBUlK4xZyk/PV+eV9Vfh9zJiSNfLccGXReE0Z7XQIAAAAweN3dfx9e3BviigAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuHj6fUNYe35Xqp3o471ikuJn/gsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAY+RDAAAA//943xl0") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0xffffffff, 0xffffffff, 0x400001, 0x0, 0xa, "ff00f7000000000000000020af88008300"}) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0xa4000061) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus/file0\x00', 0x80, 0x0) getdents(r5, 0x0, 0x54) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0xb9, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000038847aaaac90650c092002051b71d24459852c59032361d5563a477e1ea1a5c02f56169a4fa06f5c1f91fff765b952fc4dde2f89b51aa713829e0e9c1ef0ac8e4d3bafc6a81cd7e73f08db357b742ca3ec11ab20a98dd1e5bb4d09530c3b10fcc86d300d4d9e7231d2a8c74e2b84ca30af10652f401394c6d4d9d626bfd9903ec34b54fa1"], 0x0) mbind(&(0x7f00006dc000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000240)=0xff, 0x603e, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x14b0}}, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000280)={0x44, 0x11, 0x306, 0xfffe, 0x0, 0xffffc, 0x0}) 12.129338287s ago: executing program 2 (id=364): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000000)={0x2, 0x5e24, @remote}, 0x10) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)) io_uring_enter(r4, 0x46f3, 0x0, 0x1, 0x0, 0xfe17) set_mempolicy(0x6005, 0x0, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x9}, 0x100e64, 0xc77}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_by_handle_at(r8, &(0x7f0000000080)=ANY=[@ANYRES8=r8], 0x755c00) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 8.93401232s ago: executing program 2 (id=367): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000007c0)={[{@stripe={'stripe', 0x3d, 0x100000000}}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@journal_path={'journal_path', 0x3d, './file1'}}], [{@hash}, {@measure}, {@uid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x30, 0x62, 0x38, 0x34, 0x31, 0x31, 0x35], 0x2d, [0x30, 0x64, 0x66, 0x64], 0x2d, [0x61, 0x64, 0x8, 0x30], 0x2d, [0x63, 0x31, 0x35, 0x62], 0x2d, [0x39, 0x64, 0x64, 0x38, 0x0, 0x61, 0xc3, 0x39]}}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@flag='silent'}, {@context={'context', 0x3d, 'root'}}, {@subj_user={'subj_user', 0x3d, 'nodioread_nolock'}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r2 = dup(r1) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x800, 0x4000000000000000, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xfdff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) write$P9_RSTATFS(r2, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x5f, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) unshare(0x20000400) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x100010, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x1128d0, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x22009}, r0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@delalloc}, {@test_dummy_encryption}, {@data_ordered}, {@debug}, {@jqfmt_vfsold}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$eJzs3c9vHFcdAPDvbLxufji1SzlAJUqBoqSC7MY1bS0OJUgITpUQ5R6MvbGsrL2Rd93GViScvwAJIUBwggsXJP4AJBSJC0eEFAnOIBWBEDhwQAIy1cyOHdeZ3WzSza5/fD7SZN68+fF9bzYznjfzNBPAifVSRFyJiPtpmr4SEdNFfqUYYrs7ZMvd27m1mA1JpOnb/0giKfJ2t5UU43PFaqcj4htfi/h28nDc9ubW9YVms7FeTNc7qzfq7c2tSyurC8uN5cba3Nzs6/NvzL82f3ko9TwfEW9+5S8/+O7Pv/rmrz//7p+v/u1iVu2YKubvr8djyHbRRL8FulWv5vtiV7bC+hMEO6wm8hoWzpQtkaZpej+d3pdzeyQlAwDgoOwC9iMR8emIeCWm41T/y1kAAADgCEq/NBX/S7pPaEpM9sgHAAAAjpBK3gc2qdSKvgBTUanUat0+vB+Ns5Vmq9353LXWxtrS3R9PRcRMVCvXVpqNy0Vf4ZmoJtn0bJ5+MP3qgem5iHguIr4/fSafri22mkvjvvkBAAAAJ8S5A+3/f0932/8AAADAMTPzcFZlHOUAAAAAnp6S9j8AAABwzGj/AwAAwLH29bfeyoZ09/vXS+9sblxvvXNpqdG+XlvdWKwtttZv1JZbreX8nX2r+9c9VbK9Zqt14wuxtnGz3mm0O/X25tbV1dbGWufqygc+gQ0AAACM0HOfvPPHJCK2v3gmHzKT4y4UMBITe6mkGJcc/X96tjt+b0SFAkai7B7+Qe89M4KCACM38URrpYOcNoBDrjruAgBjlzxifs/OO78rxp8abnkAAIDhu/Dx3s//+38DYNsnAuCIcxDDyXXgQV46Pa6CACOXP/8ftMOviwU4VqoD9QAEjrMP/fz/kdL0sQoEAAAM3VQ+JJVacXtvKiqVWi3ifP5ZgGpybaXZuBwRz0bEH6arz2TTs/maySPbDAAAAAAAAAAAAAAAAAAAAAAAAABAV5omkfZzpe9cAAAA4AiIqPw1+U33Xf4Xpl+eOnh/YDL5T/5J4MmIePcnb//w5kKnsz6b5f9zL7/zoyL/1XHcwQAAAAAO2m2n77bjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCY7u3cWry3cyv9786txVHG/fuXI2JmL34+dOdMxOl8fDqqEXH2X0lM7FsviYhTQ4i/fTsiPlYWP8mKtReyLP6Zpx8/Zoq9UBb/3BDiw0l2Jzv/XCk7/irxUj4uP/4mIj4w/aR6n/9i7/x3qsfxf37AGC/c/WW9Z/zbES9MlJ9/duMnD8VPinFloPjf+ubWVq956U8jLkR5/P3R6p3VG/X25talldWF5cZyY21ubvb1+TfmX5u/XL+20mwU/5bG+N4nfnW/X/3P9og/07P+3TK9PFDtI/5/9+bO8z3+XmXxL36mJP5vf1Ys8XD8SrGtzxbpbP6F3fR2N73fi7/4/Yv96r/0oP7VwX7/bsyL/av94AccxoECAAxNe3Pr+kKz2Vg/Conqk6yVtdLLZj1f7IEPX7DJw7J/JB4z8Z2hbjBN07TH/6g7ETHIdpI4DLslT4z3vAQAAAzfg4v+cZcEAAAAAAAAAAAAAAAAAAAATq4hvjNssvQ1eyVvFtjeSyXeDAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBrvBwAA//9pfNv4") mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r7, 0x3, r3, 0x5}) 7.754346378s ago: executing program 4 (id=373): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x2500b0, &(0x7f0000000680)={[{@nobarrier}, {@nodiscard}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@nobh}, {@grpquota}]}, 0xfc, 0x58d, &(0x7f0000001340)="$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") mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x58e, &(0x7f0000001900)="$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") socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000380), 0x2}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) add_key(&(0x7f0000000180)='id_resolver\x00', 0x0, 0x0, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6.638535534s ago: executing program 3 (id=376): unshare(0xc020680) syz_io_uring_setup(0x606d, 0x0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000000)) unshare(0x24020400) 5.716074164s ago: executing program 1 (id=379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000000206010800000000000000000a00000014000780080011400000000005001500e9ffffff0500010006000000050005000a00000005000400010000000900020073797a320000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xc, 0x6}, 0x4580, 0x0, 0x8800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r5 = fspick(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000040)='map=off', 0x0, r4) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="170e0000000000000000010000600500070000000000080009000000000014001f000000000000000000000000000000000008000a0000000000060002000100000014002000ff"], 0x5c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r8) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="01002dbd7000fedbdf2501000000140002007767310000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843"], 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x4008084) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x15, 0x2000000, 'fo\x00', 0xc, 0x4, 0x7b}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r10, 0x0, 0x485, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) 5.471207102s ago: executing program 4 (id=380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000200)={[{@noblock_validity}, {@dioread_nolock}, {@bh}, {@init_itable_val}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r2, &(0x7f00000012c0)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0xff, 0x5, 0x9, 0x8, 0x2, 0x7f, 0x3, 0x36d, 0x40, 0xa2, 0xfa, 0x1, 0x38, 0x3, 0xf, 0x1, 0xec6}, [{0x6, 0x2, 0xffffffffffffffff, 0xea, 0xffffffffffff8e95, 0xdc8, 0x9, 0x200}, {0x4, 0x80000000, 0x7fff, 0x7fffffffffffffff, 0x4, 0x81e5, 0x401, 0xd90c}, {0x3, 0x88a, 0xb1e2, 0x2, 0x8, 0x4, 0x4, 0x8}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6e8) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) lgetxattr(0x0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000100)=""/122, 0x7a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}}, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'veth0_to_hsr\x00', 0x2dbd854266873d48}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000b00)=0x1) socket$packet(0x11, 0x1, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) memfd_create(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGICOUNT(r5, 0x5409, 0x0) poll(&(0x7f0000000080)=[{r5, 0x2200}], 0x1, 0x41f) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000, 0x6040000}], 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000001280)=0x8, 0x4) 5.451693833s ago: executing program 3 (id=390): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x2500b0, &(0x7f0000000680)={[{@nobarrier}, {@nodiscard}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@nobh}, {@grpquota}]}, 0xfc, 0x58d, &(0x7f0000001340)="$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") mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x58e, &(0x7f0000001900)="$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") socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000380), 0x2}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) add_key(&(0x7f0000000180)='id_resolver\x00', 0x0, 0x0, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.746297678s ago: executing program 0 (id=381): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.488428907s ago: executing program 0 (id=382): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x5a, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5392"], 0x59) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, r3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x28}, r3}, 0x14) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 3.363619851s ago: executing program 0 (id=383): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@ipv4_getnexthop={0x20, 0x6a, 0x1601, 0x70bd2a, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$netlink(0x10, 0x3, 0x0) preadv(r6, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/2, 0x2}], 0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000740)={0x0}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={r7}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r8, 0x3, r3, 0x5}) 3.151456558s ago: executing program 1 (id=384): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_io_uring_setup(0x760b, &(0x7f0000001400)={0x0, 0x79e7, 0x400, 0xffffffff, 0x11c}, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000000)) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001000"/27], 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000001c0)='./bus/file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2c7, &(0x7f0000000cc0)="$eJzs3MFr22YYx/Hf7Cx2HBJ7MAYbbHvZLtvFJN5hx82MBMYMG1kc2h4KSiO3xqodJJPiUhpfSq/9O0KPvRXa/gO5lF567y0UCr3kUKoSyU7l2EncxI6d5vuB8D7W8z74jaSIR4Jo59KDm5WSly1ZdcWSRjGpqV0psxe1fNEaY0E8qaimfp1++/L7/y9f+SdfKCwsGbOYX/4tZ4yZ/fHJrTsPf3pWn155NPs4oe3M1Z03uVfbk9vf7rxfvlH2TNkz1VrdWGa1Vqtbq45t1speJWvMf45tebYpVz3b7ciXnNr6esNY1bWZ1Lpre56xqg1TsRumXjN1t2Gs61a5arLZrJlJ6QKLSRN9TCtuLS1Z+UPTfnygi8LQTfXa6Lr5Zu9kcesM1gQAAMbM0f1/2Osf3v8XVsLxU/r/b47v/yX6/yFpdnw6pv/HefV79Ox33byVav39dqL/BwAAAAAAAAAAAAAAAAAAAADgPNj1/bTv++m9sbUp+JyQlJTkt/IjXiaGJHr8/cjPMcf/jxEtFwMW+ce9pOTc3yhuFMMxzOdLKsuRrTml9S44H1rCePHvwsKcCWT01Nls1W9uFONKtOvbMr3qf/hqPqw3nfVfKhX9/pzS+rr39+d61k/ql58j9Vml9fyaanK0FpzXH+vvzhvz17+FA/VTwTwAAAAAAD4HWbOv6/49yAcTkurOh/WR5wO+728e9XzgwP31hL7r5xWVAAAAAADg1LzG7YrlOLZ7giAh6RTlgw98Xxr9MuIaj73RGfwpaQyWcVZBUlK4xZyk/PV+eV9Vfh9zJiSNfLccGXReE0Z7XQIAAAAweN3dfx9e3BviigAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuHj6fUNYe35Xqp3o471ikuJn/gsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAY+RDAAAA//943xl0") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0xffffffff, 0xffffffff, 0x400001, 0x0, 0xa, "ff00f7000000000000000020af88008300"}) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0xa4000061) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus/file0\x00', 0x80, 0x0) getdents(r4, 0x0, 0x54) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0xb9, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000038847aaaac90650c092002051b71d24459852c59032361d5563a477e1ea1a5c02f56169a4fa06f5c1f91fff765b952fc4dde2f89b51aa713829e0e9c1ef0ac8e4d3bafc6a81cd7e73f08db357b742ca3ec11ab20a98dd1e5bb4d09530c3b10fcc86d300d4d9e7231d2a8c74e2b84ca30af10652f401394c6d4d9d626bfd9903ec34b54fa1"], 0x0) mbind(&(0x7f00006dc000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000240)=0xff, 0x603e, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x14b0}}, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000280)={0x44, 0x11, 0x306, 0xfffe, 0x0, 0xffffc, 0x0}) 2.743199331s ago: executing program 4 (id=385): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8010, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a8002b00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff0601150039410000", 0x96) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x800) fsmount(0xffffffffffffffff, 0x1, 0x0) socket$inet(0x2, 0x801, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4c, 0x0, 0x0) ioctl(r7, 0x8916, &(0x7f0000000000)) ioctl(r7, 0x8936, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000f4ffffff0000000020ff000085000000360000009500000000000000bf175242ea9df48d2241feccf723616b9a58264dd6436c272e4c4d4be46c659aad92b4a943a4328a35cde5171c98b50b13aed7b5119dddaa0f08008feaf07115e808c514639d1cf8030872f2a67894e1130539b9ef6d1021a01e9a8aab94c06b5411dd023be9dd2213814a1fe6841f5688331d5da5b06018177d2acea8b5864a1952c845473ef32f6573883e22805d27b91e5aaabd20e51541eca309df26ed939be6c80d8e7607e2836212dc291c0c8e5904f09cb84526d6d6cc1ca8af5270"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") 2.46605157s ago: executing program 0 (id=386): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0300001a"], 0x34c}}, 0x0) 2.216391228s ago: executing program 1 (id=387): prctl$PR_SET_TIMERSLACK(0x1d, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x1, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 1.972648956s ago: executing program 1 (id=388): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_io_uring_setup(0x760b, &(0x7f0000001400)={0x0, 0x79e7, 0x400, 0xffffffff, 0x11c}, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000000)) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) set_mempolicy(0x6005, 0x0, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001000"/27], 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000001c0)='./bus/file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2c7, &(0x7f0000000cc0)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0xffffffff, 0xffffffff, 0x400001, 0x0, 0xa, "ff00f7000000000000000020af88008300"}) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0xa4000061) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus/file0\x00', 0x80, 0x0) getdents(r5, 0x0, 0x54) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0xb9, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000038847aaaac90650c092002051b71d24459852c59032361d5563a477e1ea1a5c02f56169a4fa06f5c1f91fff765b952fc4dde2f89b51aa713829e0e9c1ef0ac8e4d3bafc6a81cd7e73f08db357b742ca3ec11ab20a98dd1e5bb4d09530c3b10fcc86d300d4d9e7231d2a8c74e2b84ca30af10652f401394c6d4d9d626bfd9903ec34b54fa1"], 0x0) mbind(&(0x7f00006dc000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000240)=0xff, 0x603e, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x14b0}}, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000280)={0x44, 0x11, 0x306, 0xfffe, 0x0, 0xffffc, 0x0}) 1.83706958s ago: executing program 4 (id=389): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d08"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x7, 0x9}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) 1.664785026s ago: executing program 2 (id=391): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0xffff}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r2, 0x1) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000800000004000000000000001500000000000000bed6000000000053361e8b048a90609600050000000000000000000000000000000000000000000000000000adb7000000000006000000020000000400000000000000f1b70000000000000500000000000000bcd400"/203]) gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x5}]}, {0x0, [0x2e]}}, 0x0, 0x27, 0x0, 0x1}, 0x28) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r4 = syz_open_pts(r3, 0x80) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000008, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x4, @perf_config_ext={0xffffffff, 0xfc}, 0x6220, 0x0, 0x800000, 0x6, 0x3, 0x200cb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) listen(0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}, 0x2}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) r5 = dup3(r4, r3, 0x80000) read(r5, &(0x7f0000000200)=""/227, 0xe3) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x2000020) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) 1.587234068s ago: executing program 0 (id=392): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") syz_emit_ethernet(0x46, &(0x7f00000014c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000000000103afffe8000000000be000000000000000000aaff0200000000000000000000000000018b009078932980010000000000100008"], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) uname(&(0x7f0000000040)=""/114) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001400)={0x0, 0x2}, &(0x7f0000001440)=0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca82973d2bd4b8", 0x26}, {&(0x7f0000000280)="7d3ed2ea1f2f", 0x6}, {&(0x7f0000000340)="e81d2b8fd6e2deb260723e6a6d4d7dd60ea3b832bc470358601f8b889bd5d319c2f66f6c395f2f5a32f2e7d6d8328eafb2a7c26d", 0x34}], 0x3}, 0x24000008) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001480)={r4, 0x3, 0xce9, 0x3}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000380)='./file1\x00', 0x401) sendfile(r5, r5, 0x0, 0xe3aa6ea) sendfile(r3, r3, 0x0, 0xe3aa6ea) 1.012680867s ago: executing program 2 (id=393): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 962.933778ms ago: executing program 2 (id=394): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x5a000) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000840)={0x0, 0x61d50d4c, 0xb, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000c40)={r5, 0x7, 0x701}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) r10 = getpgrp(0x0) r11 = syz_pidfd_open(r10, 0x0) fremovexattr(r11, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 961.789589ms ago: executing program 1 (id=395): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) times(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_io_uring_setup(0x5c2, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@union={0x4, 0x0, 0x0, 0x5, 0x1, 0x2}]}, {0x0, [0x5f, 0x2e, 0x0, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x3}, 0x28) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x21, 0x801, 0xfffffffc, 0xfffffffc, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x1006c, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0xeaff, &(0x7f0000000200)={&(0x7f0000000040)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) 791.432004ms ago: executing program 4 (id=396): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xfffffffffffffede, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x28, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="a4"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3']}]}}]}]}]}}]}, 0x7c}}, 0x0) 436.276116ms ago: executing program 0 (id=397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000200)={[{@noblock_validity}, {@dioread_nolock}, {@bh}, {@init_itable_val}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r2, &(0x7f00000012c0)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0xff, 0x5, 0x9, 0x8, 0x2, 0x7f, 0x3, 0x36d, 0x40, 0xa2, 0xfa, 0x1, 0x38, 0x3, 0xf, 0x1, 0xec6}, [{0x6, 0x2, 0xffffffffffffffff, 0xea, 0xffffffffffff8e95, 0xdc8, 0x9, 0x200}, {0x4, 0x80000000, 0x7fff, 0x7fffffffffffffff, 0x4, 0x81e5, 0x401, 0xd90c}, {0x3, 0x88a, 0xb1e2, 0x2, 0x8, 0x4, 0x4, 0x8}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6e8) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000100)=""/122, 0x7a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'veth0_to_hsr\x00', 0x2dbd854266873d48}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000b00)=0x1) socket$packet(0x11, 0x1, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) memfd_create(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGICOUNT(r5, 0x5409, 0x0) poll(&(0x7f0000000080)=[{r5, 0x2200}], 0x1, 0x41f) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000, 0x6040000}], 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000001280)=0x8, 0x4) 404.920877ms ago: executing program 4 (id=398): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_io_uring_setup(0x760b, &(0x7f0000001400)={0x0, 0x79e7, 0x400, 0xffffffff, 0x11c}, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000000)) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001000"/27], 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000001c0)='./bus/file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2c7, &(0x7f0000000cc0)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0xffffffff, 0xffffffff, 0x400001, 0x0, 0xa, "ff00f7000000000000000020af88008300"}) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0xa4000061) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus/file0\x00', 0x80, 0x0) getdents(r4, 0x0, 0x54) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0xb9, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000038847aaaac90650c092002051b71d24459852c59032361d5563a477e1ea1a5c02f56169a4fa06f5c1f91fff765b952fc4dde2f89b51aa713829e0e9c1ef0ac8e4d3bafc6a81cd7e73f08db357b742ca3ec11ab20a98dd1e5bb4d09530c3b10fcc86d300d4d9e7231d2a8c74e2b84ca30af10652f401394c6d4d9d626bfd9903ec34b54fa1"], 0x0) mbind(&(0x7f00006dc000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000240)=0xff, 0x603e, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x14b0}}, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000280)={0x44, 0x11, 0x306, 0xfffe, 0x0, 0xffffc, 0x0}) 10.546989ms ago: executing program 1 (id=399): prctl$PR_SET_TIMERSLACK(0x1d, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x1, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 10.227439ms ago: executing program 2 (id=400): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$can_bcm(r0, &(0x7f00000001c0), 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket(0x28, 0x52c9c2b67fec0189, 0x9) read(r2, 0x0, 0x0) 0s ago: executing program 3 (id=401): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8010, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a8002b00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff0601150039410000", 0x96) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x800) fsmount(0xffffffffffffffff, 0x1, 0x0) socket$inet(0x2, 0x801, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4c, 0x0, 0x0) ioctl(r7, 0x8916, &(0x7f0000000000)) ioctl(r7, 0x8936, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000f4ffffff0000000020ff000085000000360000009500000000000000bf175242ea9df48d2241feccf723616b9a58264dd6436c272e4c4d4be46c659aad92b4a943a4328a35cde5171c98b50b13aed7b5119dddaa0f08008feaf07115e808c514639d1cf8030872f2a67894e1130539b9ef6d1021a01e9a8aab94c06b5411dd023be9dd2213814a1fe6841f5688331d5da5b06018177d2acea8b5864a1952c845473ef32f6573883e22805d27b91e5aaabd20e51541eca309df26ed939be6c80d8e7607e2836212dc291c0c8e5904f09cb84526d6d6cc1ca8af5270"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==") kernel console output (not intermixed with test programs): [ 30.460199][ T3493] option from the mount to silence this warning. [ 30.460199][ T3493] ======================================================= [ 30.505740][ T28] audit: type=1400 audit(1775006973.088:119): avc: denied { map } for pid=3500 comm="syz.2.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.513084][ T3503] loop4: detected capacity change from 0 to 512 [ 30.530176][ T28] audit: type=1400 audit(1775006973.088:120): avc: denied { read write } for pid=3500 comm="syz.2.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.546437][ T3503] EXT4-fs: Ignoring removed bh option [ 30.600247][ T3493] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.614693][ T3493] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 30.640604][ T3503] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 30.662625][ T3503] EXT4-fs (loop4): 1 truncate cleaned up [ 30.669384][ T3503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.721976][ T3503] EXT4-fs (loop4): shut down requested (0) [ 30.722113][ T3493] EXT4-fs (loop0): 1 truncate cleaned up [ 30.737838][ T3503] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 30.741248][ T28] audit: type=1400 audit(1775006973.328:121): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 30.746861][ T3503] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 30.771135][ T3493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.800685][ T28] audit: type=1400 audit(1775006973.328:122): avc: denied { search } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.826910][ T3508] loop2: detected capacity change from 0 to 128 [ 30.845446][ T3508] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.3'. [ 30.854503][ T3508] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.3'. [ 30.874819][ T3508] vhci_hcd vhci_hcd.4: invalid port number 254 [ 30.881167][ T3508] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 31.088933][ T28] audit: type=1400 audit(1775006973.328:123): avc: denied { search } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.147351][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.189993][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.242922][ T28] audit: type=1400 audit(1775006973.328:124): avc: denied { add_name } for pid=2980 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.264540][ T28] audit: type=1400 audit(1775006973.328:125): avc: denied { create } for pid=2980 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.285433][ T28] audit: type=1400 audit(1775006973.328:126): avc: denied { append open } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.669440][ T3515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8'. [ 31.678426][ T3515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8'. [ 31.692228][ T3515] Zero length message leads to an empty skb [ 31.820949][ T3524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11'. [ 31.856913][ T3524] loop1: detected capacity change from 0 to 1024 [ 31.896908][ T3524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.940486][ T3524] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 31.968208][ T3524] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.000791][ T3522] netlink: 'syz.2.10': attribute type 1 has an invalid length. [ 32.010623][ T3522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10'. [ 32.033758][ T3493] syz.0.1 (3493) used greatest stack depth: 9864 bytes left [ 32.048485][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.052569][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.121106][ T3533] loop0: detected capacity change from 0 to 512 [ 32.220593][ T3528] loop3: detected capacity change from 0 to 512 [ 32.241751][ T3528] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.348622][ T3538] loop4: detected capacity change from 0 to 128 [ 32.358951][ T3538] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.14'. [ 32.367962][ T3538] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.14'. [ 32.380008][ T3533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.397044][ T3538] vhci_hcd vhci_hcd.4: invalid port number 254 [ 32.403266][ T3538] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 32.444884][ T3533] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.694257][ T3528] EXT4-fs (loop3): 1 truncate cleaned up [ 32.716329][ T3528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.800330][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.829915][ T3542] loop3: detected capacity change from 0 to 512 [ 32.841299][ T3542] EXT4-fs: Ignoring removed bh option [ 32.857712][ T3542] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 32.876244][ T3542] EXT4-fs (loop3): 1 truncate cleaned up [ 32.882522][ T3542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.899066][ T3542] EXT4-fs (loop3): shut down requested (0) [ 32.909065][ T3542] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 32.930951][ T50] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 32.953719][ T3542] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 32.963043][ T50] EXT4-fs (loop1): This should not happen!! Data will be lost [ 32.963043][ T50] [ 32.984466][ T50] EXT4-fs (loop1): Total free blocks count 0 [ 33.003668][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.022284][ T50] EXT4-fs (loop1): Free/Dirty block details [ 33.039462][ T50] EXT4-fs (loop1): free_blocks=20480 [ 33.044872][ T50] EXT4-fs (loop1): dirty_blocks=16 [ 33.076740][ T50] EXT4-fs (loop1): Block reservation details [ 33.148072][ T50] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 33.224337][ T3309] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 33.236163][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.649267][ T3561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.754114][ T3561] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.854781][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.030522][ T3571] EXT4-fs: test_dummy_encryption option not supported [ 34.332835][ T3576] EXT4-fs (loop4): 1 orphan inode deleted [ 34.339762][ T3576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.353111][ T3576] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.369850][ T324] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:6: Failed to release dquot type 1 [ 34.389024][ T3580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.406295][ T3580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.602720][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.356259][ T3593] netlink: 'syz.2.30': attribute type 2 has an invalid length. [ 36.370011][ T3594] netlink: 'syz.0.29': attribute type 2 has an invalid length. [ 36.420784][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.440841][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 36.440866][ T28] audit: type=1400 audit(1775006979.038:262): avc: denied { ioctl } for pid=3597 comm="syz.3.32" path="socket:[5054]" dev="sockfs" ino=5054 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.658753][ T3598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.32'. [ 36.695065][ T3598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32'. [ 36.738445][ T28] audit: type=1400 audit(1775006979.328:263): avc: denied { create } for pid=3603 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 36.782273][ T3606] process 'syz.4.31' launched './file0' with NULL argv: empty string added [ 36.788686][ T3596] set_capacity_and_notify: 5 callbacks suppressed [ 36.788718][ T3596] loop1: detected capacity change from 0 to 512 [ 36.834459][ T28] audit: type=1400 audit(1775006979.358:264): avc: denied { write } for pid=3607 comm="syz.3.35" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.902634][ T3605] loop0: detected capacity change from 0 to 8192 [ 36.910360][ T3596] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.922176][ T28] audit: type=1400 audit(1775006979.378:265): avc: denied { execute } for pid=3603 comm="syz.4.31" name="file0" dev="tmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.946178][ T3616] netlink: 'syz.4.37': attribute type 1 has an invalid length. [ 36.947491][ T28] audit: type=1400 audit(1775006979.388:266): avc: denied { execute_no_trans } for pid=3603 comm="syz.4.31" path="/6/file0" dev="tmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.953880][ T3616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37'. [ 36.976969][ T28] audit: type=1400 audit(1775006979.398:267): avc: denied { bind } for pid=3603 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 37.013072][ T3616] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.016517][ T28] audit: type=1400 audit(1775006979.608:268): avc: denied { getopt } for pid=3611 comm="syz.4.37" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.054874][ T3616] loop4: detected capacity change from 0 to 512 [ 37.064543][ T3596] EXT4-fs (loop1): 1 truncate cleaned up [ 37.098544][ T3616] ------------[ cut here ]------------ [ 37.104202][ T3616] EA inode 11 i_nlink=2 [ 37.104271][ T3616] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.4.37/3616 [ 37.119155][ T3616] Modules linked in: [ 37.123067][ T3616] CPU: 1 UID: 0 PID: 3616 Comm: syz.4.37 Not tainted syzkaller #0 PREEMPT(full) [ 37.132306][ T3616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 37.142540][ T3616] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 37.149192][ T3616] Code: d4 35 99 ff 4c 8d 2d ad a1 5d 05 49 8d 7e 40 e8 54 cd b5 ff 49 8b 6e 40 4c 89 e7 e8 88 c8 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 2f c4 dd 03 66 66 66 66 66 66 2e [ 37.167962][ T28] audit: type=1400 audit(1775006979.648:269): avc: denied { ioctl } for pid=3611 comm="syz.4.37" path="socket:[5078]" dev="sockfs" ino=5078 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.168850][ T3616] RSP: 0018:ffffc900011f3778 EFLAGS: 00010246 [ 37.199493][ T3616] RAX: ffff888104979b88 RBX: ffff888107e481a8 RCX: ffffffff81c02b68 [ 37.201803][ T3596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.207490][ T3616] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dcd00 [ 37.207512][ T3616] RBP: 000000000000000b R08: 0001888107e4815b R09: 0000000000000000 [ 37.207527][ T3616] R10: ffffc900011f36a8 R11: 0001c900011f36a8 R12: ffff888107e48158 [ 37.207620][ T3616] R13: ffffffff871dcd00 R14: ffff888107e48110 R15: 0000000000000001 [ 37.207637][ T3616] FS: 00007fa8b49fe6c0(0000) GS:ffff8882ae9d8000(0000) knlGS:0000000000000000 [ 37.207656][ T3616] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.207723][ T3616] CR2: 0000200000009000 CR3: 0000000129ac6000 CR4: 00000000003506f0 [ 37.207745][ T3616] Call Trace: [ 37.207753][ T3616] [ 37.207765][ T3616] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 37.207823][ T3616] ? errseq_check+0x2c/0x50 [ 37.207967][ T3616] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 37.207993][ T3616] ? ext4_truncate+0x92b/0xb00 [ 37.208027][ T3616] ext4_evict_inode+0xac1/0xe40 [ 37.250925][ T28] audit: type=1400 audit(1775006979.838:270): avc: denied { create } for pid=3622 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 37.252429][ T3616] ? __pfx_ext4_evict_inode+0x10/0x10 [ 37.261928][ T28] audit: type=1400 audit(1775006979.838:271): avc: denied { accept } for pid=3622 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.267971][ T3616] evict+0x2af/0x510 [ 37.268010][ T3616] ? __dquot_initialize+0x146/0x7c0 [ 37.361566][ T3616] iput+0x41a/0x580 [ 37.365430][ T3616] ext4_process_orphan+0x1a9/0x1c0 [ 37.370615][ T3616] ext4_orphan_cleanup+0x6a8/0xa00 [ 37.375958][ T3616] ext4_fill_super+0x3414/0x37c0 [ 37.381021][ T3616] ? set_blocksize+0x14c/0x270 [ 37.385843][ T3616] ? setup_bdev_super+0x30e/0x370 [ 37.390882][ T3616] ? __pfx_ext4_fill_super+0x10/0x10 [ 37.396221][ T3616] get_tree_bdev_flags+0x291/0x300 [ 37.401343][ T3616] ? __pfx_ext4_fill_super+0x10/0x10 [ 37.406717][ T3616] get_tree_bdev+0x1f/0x30 [ 37.411198][ T3616] ext4_get_tree+0x1c/0x30 [ 37.415627][ T3616] vfs_get_tree+0x57/0x1d0 [ 37.420257][ T3616] do_new_mount+0x288/0x8d0 [ 37.424824][ T3616] path_mount+0x4d0/0xbc0 [ 37.429236][ T3616] __se_sys_mount+0x28c/0x2e0 [ 37.433944][ T3616] ? __se_sys_mkdirat+0xa2/0xf0 [ 37.438919][ T3616] ? kmem_cache_free+0xc8/0x380 [ 37.443875][ T3616] __x64_sys_mount+0x67/0x80 [ 37.448571][ T3616] x64_sys_call+0x2d61/0x3020 [ 37.453432][ T3616] do_syscall_64+0x12c/0x370 [ 37.458053][ T3616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.464015][ T3616] RIP: 0033:0x7fa8b5fcda8a [ 37.468527][ T3616] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.488433][ T3616] RSP: 002b:00007fa8b49fde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 37.496868][ T3616] RAX: ffffffffffffffda RBX: 00007fa8b49fdee0 RCX: 00007fa8b5fcda8a [ 37.504888][ T3616] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fa8b49fdea0 [ 37.512902][ T3616] RBP: 00002000000009c0 R08: 00007fa8b49fdee0 R09: 0000000000800718 [ 37.520924][ T3616] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 37.529063][ T3616] R13: 00007fa8b49fdea0 R14: 000000000000048d R15: 0000200000000200 [ 37.537140][ T3616] [ 37.540184][ T3616] ---[ end trace 0000000000000000 ]--- [ 37.545781][ T3616] EXT4-fs (loop4): 1 orphan inode deleted [ 37.551855][ T3616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.614711][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.634133][ T3627] loop3: detected capacity change from 0 to 1024 [ 37.640359][ T3629] netlink: 'syz.0.43': attribute type 29 has an invalid length. [ 37.647772][ T3627] loop3: detected capacity change from 0 to 1024 [ 37.656223][ T3627] EXT4-fs: test_dummy_encryption option not supported [ 37.666031][ T3629] netlink: 'syz.0.43': attribute type 29 has an invalid length. [ 37.723369][ T3630] loop2: detected capacity change from 0 to 512 [ 37.760064][ T3632] netlink: 500 bytes leftover after parsing attributes in process `syz.0.43'. [ 37.766929][ T3630] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.785277][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.891009][ T3644] loop3: detected capacity change from 0 to 512 [ 37.905441][ T3643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.41'. [ 37.914888][ T3630] EXT4-fs (loop2): 1 truncate cleaned up [ 37.947497][ T3644] EXT4-fs (loop3): 1 orphan inode deleted [ 37.954571][ T3644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.967527][ T3644] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.983430][ T40] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:2: Failed to release dquot type 1 [ 38.049761][ T3648] FAULT_INJECTION: forcing a failure. [ 38.049761][ T3648] name failslab, interval 1, probability 0, space 0, times 0 [ 38.084772][ T3630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.159954][ T3648] CPU: 0 UID: 0 PID: 3648 Comm: syz.4.44 Tainted: G W syzkaller #0 PREEMPT(full) [ 38.159989][ T3648] Tainted: [W]=WARN [ 38.160033][ T3648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 38.160045][ T3648] Call Trace: [ 38.160053][ T3648] [ 38.160062][ T3648] __dump_stack+0x1d/0x30 [ 38.160091][ T3648] dump_stack_lvl+0x95/0xd0 [ 38.160214][ T3648] dump_stack+0x15/0x1b [ 38.160289][ T3648] should_fail_ex+0x263/0x280 [ 38.160318][ T3648] should_failslab+0x8c/0xb0 [ 38.160371][ T3648] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 38.160399][ T3648] ? __alloc_skb+0x2d6/0x690 [ 38.160469][ T3648] __alloc_skb+0x2d6/0x690 [ 38.160494][ T3648] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 38.160573][ T3648] ? __alloc_skb+0x200/0x690 [ 38.160709][ T3648] audit_log_start+0x3aa/0x730 [ 38.160736][ T3648] audit_seccomp+0x47/0x100 [ 38.160818][ T3648] ? __seccomp_filter+0x8db/0x1350 [ 38.160863][ T3648] __seccomp_filter+0x8ec/0x1350 [ 38.160906][ T3648] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 38.160930][ T3648] ? irqentry_exit+0x91/0x520 [ 38.160951][ T3648] ? __fget_files+0x184/0x1c0 [ 38.160984][ T3648] __secure_computing+0x81/0x150 [ 38.161070][ T3648] do_syscall_64+0xd3/0x370 [ 38.161094][ T3648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.161115][ T3648] RIP: 0033:0x7fa8b5fcc819 [ 38.161157][ T3648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.161174][ T3648] RSP: 002b:00007fa8b49fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ea [ 38.161197][ T3648] RAX: ffffffffffffffda RBX: 00007fa8b6246090 RCX: 00007fa8b5fcc819 [ 38.161214][ T3648] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000020 [ 38.161229][ T3648] RBP: 00007fa8b49fe090 R08: 0000000000000000 R09: 0000000000000000 [ 38.161244][ T3648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.161258][ T3648] R13: 00007fa8b6246128 R14: 00007fa8b6246090 R15: 00007ffc9967a118 [ 38.161331][ T3648] [ 38.526649][ T3657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.48'. [ 38.546366][ T3657] loop0: detected capacity change from 0 to 1024 [ 38.574794][ T3661] loop4: detected capacity change from 0 to 512 [ 38.596511][ T3657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.614441][ T3665] netlink: 'syz.1.51': attribute type 29 has an invalid length. [ 38.631030][ T3661] EXT4-fs: Ignoring removed bh option [ 38.637581][ T3657] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 38.655734][ T3665] netlink: 'syz.1.51': attribute type 29 has an invalid length. [ 38.668503][ T3661] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 38.688200][ T3661] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.50: invalid block [ 38.740100][ T3661] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 38.740391][ T3661] EXT4-fs (loop4): 1 truncate cleaned up [ 38.740889][ T3661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.743662][ T3661] EXT4-fs (loop4): shut down requested (0) [ 38.756775][ T3661] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 38.756807][ T3661] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 38.768994][ T3671] FAULT_INJECTION: forcing a failure. [ 38.768994][ T3671] name failslab, interval 1, probability 0, space 0, times 0 [ 38.769063][ T3671] CPU: 0 UID: 0 PID: 3671 Comm: syz.1.52 Tainted: G W syzkaller #0 PREEMPT(full) [ 38.769091][ T3671] Tainted: [W]=WARN [ 38.769098][ T3671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 38.769152][ T3671] Call Trace: [ 38.769159][ T3671] [ 38.769166][ T3671] __dump_stack+0x1d/0x30 [ 38.769191][ T3671] dump_stack_lvl+0x95/0xd0 [ 38.769294][ T3671] dump_stack+0x15/0x1b [ 38.769314][ T3671] should_fail_ex+0x263/0x280 [ 38.769397][ T3671] should_failslab+0x8c/0xb0 [ 38.769496][ T3671] __kmalloc_noprof+0xb8/0x4e0 [ 38.769553][ T3671] ? kobject_get_path+0x92/0x1c0 [ 38.769587][ T3671] kobject_get_path+0x92/0x1c0 [ 38.769619][ T3671] kobject_uevent_env+0x1da/0x570 [ 38.769690][ T3671] kobject_uevent+0x1d/0x30 [ 38.769711][ T3671] device_del+0x70f/0x790 [ 38.769737][ T3671] ? mntput+0xa9/0xb0 [ 38.769835][ T3671] device_unregister+0x15/0x40 [ 38.769874][ T3671] bdi_unregister+0x314/0x3b0 [ 38.769895][ T3671] __del_gendisk+0x2d6/0x590 [ 38.769921][ T3671] del_gendisk+0xab/0xf0 [ 38.769970][ T3671] loop_remove+0x26/0x80 [ 38.769998][ T3671] loop_control_ioctl+0x3b3/0x3f0 [ 38.770032][ T3671] ? __pfx_loop_control_ioctl+0x10/0x10 [ 38.770091][ T3671] __se_sys_ioctl+0xce/0x140 [ 38.770112][ T3671] __x64_sys_ioctl+0x43/0x50 [ 38.770134][ T3671] x64_sys_call+0x1563/0x3020 [ 38.770181][ T3671] do_syscall_64+0x12c/0x370 [ 38.770205][ T3671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.770302][ T3671] RIP: 0033:0x7f86705ec819 [ 38.770321][ T3671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.770338][ T3671] RSP: 002b:00007f866f03f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 38.770379][ T3671] RAX: ffffffffffffffda RBX: 00007f8670865fa0 RCX: 00007f86705ec819 [ 38.770394][ T3671] RDX: 0000000000000001 RSI: 0000000000004c81 RDI: 0000000000000003 [ 38.770408][ T3671] RBP: 00007f866f03f090 R08: 0000000000000000 R09: 0000000000000000 [ 38.770423][ T3671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.770437][ T3671] R13: 00007f8670866038 R14: 00007f8670865fa0 R15: 00007ffc59718878 [ 38.770466][ T3671] [ 38.851262][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 38.857440][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 38.930471][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.516185][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.971091][ T3688] netlink: 'syz.2.57': attribute type 16 has an invalid length. [ 39.971112][ T3688] netlink: 'syz.2.57': attribute type 3 has an invalid length. [ 39.971125][ T3688] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.57'. [ 40.010620][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.209317][ T3696] bridge0: port 3(gretap0) entered blocking state [ 40.209348][ T3696] bridge0: port 3(gretap0) entered disabled state [ 40.209477][ T3696] gretap0: entered allmulticast mode [ 40.210038][ T3696] gretap0: entered promiscuous mode [ 40.210339][ T3696] bridge0: port 3(gretap0) entered blocking state [ 40.210365][ T3696] bridge0: port 3(gretap0) entered forwarding state [ 40.397382][ T3398] IPVS: starting estimator thread 0... [ 40.489720][ T3707] IPVS: using max 2304 ests per chain, 115200 per kthread [ 40.558012][ T3716] netlink: 'syz.3.55': attribute type 1 has an invalid length. [ 40.558032][ T3716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.55'. [ 40.564252][ T3716] loop3: detected capacity change from 0 to 512 [ 40.595556][ T3718] vlan2: entered promiscuous mode [ 40.595575][ T3718] bridge0: entered promiscuous mode [ 40.620258][ T3716] EXT4-fs (loop3): 1 orphan inode deleted [ 40.620640][ T3716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.642383][ T3717] EXT4-fs: test_dummy_encryption option not supported [ 41.060009][ T3721] EXT4-fs (loop2): 1 orphan inode deleted [ 41.061455][ T3721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.061891][ T3721] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.314908][ T50] EXT4-fs error (device loop2): ext4_release_dquot:7062: comm kworker/u8:3: Failed to release dquot type 1 [ 41.317180][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.454637][ T28] kauditd_printk_skb: 237 callbacks suppressed [ 41.454654][ T28] audit: type=1326 audit(1775006984.038:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f86705ec582 code=0x7ffc0000 [ 41.454682][ T28] audit: type=1326 audit(1775006984.048:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f86705ec617 code=0x7ffc0000 [ 41.454708][ T28] audit: type=1326 audit(1775006984.048:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f86705a9511 code=0x7ffc0000 [ 41.454793][ T28] audit: type=1326 audit(1775006984.048:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f86705ed609 code=0x7ffc0000 [ 41.454860][ T28] audit: type=1326 audit(1775006984.048:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f86705a957b code=0x7ffc0000 [ 41.454881][ T28] audit: type=1326 audit(1775006984.048:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86705ec819 code=0x7ffc0000 [ 41.454907][ T28] audit: type=1326 audit(1775006984.048:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86705ec819 code=0x7ffc0000 [ 41.455422][ T28] audit: type=1326 audit(1775006984.048:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f86705a8c6c code=0x7ffc0000 [ 41.455447][ T28] audit: type=1326 audit(1775006984.048:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f86705a8cce code=0x7ffc0000 [ 41.455544][ T28] audit: type=1326 audit(1775006984.048:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f86705ec4ab code=0x7ffc0000 [ 41.460244][ T3728] netlink: 60 bytes leftover after parsing attributes in process `syz.3.67'. [ 41.658726][ T3736] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.69: bg 0: block 5: invalid block bitmap [ 41.658755][ T3736] loop3: lost filesystem error report for type 5 error -117 [ 41.659010][ T3736] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 41.659051][ T3736] loop3: lost filesystem error report for type 5 error -117 [ 41.659711][ T3736] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.69: invalid indirect mapped block 3 (level 2) [ 41.659737][ T3736] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 41.659997][ T3736] EXT4-fs (loop3): 1 orphan inode deleted [ 41.660017][ T3736] EXT4-fs (loop3): 1 truncate cleaned up [ 41.660428][ T3736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.769311][ T3744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'. [ 41.772247][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.826578][ T3751] netlink: 2 bytes leftover after parsing attributes in process `syz.3.73'. [ 42.153427][ T3759] IPv6: sit1: Disabled Multicast RS [ 42.628433][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.649651][ T96] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 43.690392][ T96] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.690392][ T96] [ 43.732293][ T96] EXT4-fs (loop0): Total free blocks count 0 [ 43.750989][ T3775] set_capacity_and_notify: 5 callbacks suppressed [ 43.751053][ T3775] loop4: detected capacity change from 0 to 128 [ 43.769579][ T96] EXT4-fs (loop0): Free/Dirty block details [ 43.785789][ T96] EXT4-fs (loop0): free_blocks=20480 [ 43.814106][ T96] EXT4-fs (loop0): dirty_blocks=16 [ 43.904501][ T96] EXT4-fs (loop0): Block reservation details [ 43.927349][ T96] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 43.978232][ T3316] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 44.036304][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.176451][ T3792] loop4: detected capacity change from 0 to 1024 [ 44.245386][ T3792] loop4: detected capacity change from 0 to 1024 [ 44.261784][ T3792] EXT4-fs: test_dummy_encryption option not supported [ 44.277515][ T3803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.90'. [ 44.464646][ T3796] mmap: syz.2.83 (3796) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.520331][ T3809] loop4: detected capacity change from 0 to 512 [ 45.940969][ T3810] loop0: detected capacity change from 0 to 128 [ 46.699204][ T3810] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.89'. [ 46.708263][ T3810] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.89'. [ 46.719686][ T3810] vhci_hcd vhci_hcd.4: invalid port number 254 [ 46.726059][ T3810] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 46.762564][ T3809] EXT4-fs (loop4): 1 orphan inode deleted [ 46.768856][ T3809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.827318][ T12] __quota_error: 122 callbacks suppressed [ 46.827336][ T12] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 46.849450][ T3809] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.873080][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:0: Failed to release dquot type 1 [ 47.040234][ T28] audit: type=1400 audit(1775006989.638:637): avc: denied { create } for pid=3819 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 47.058780][ T3820] FAULT_INJECTION: forcing a failure. [ 47.058780][ T3820] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 47.061129][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.128550][ T3820] CPU: 0 UID: 0 PID: 3820 Comm: syz.2.92 Tainted: G W syzkaller #0 PREEMPT(full) [ 47.128637][ T3820] Tainted: [W]=WARN [ 47.128645][ T3820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 47.128658][ T3820] Call Trace: [ 47.128665][ T3820] [ 47.128673][ T3820] __dump_stack+0x1d/0x30 [ 47.128751][ T3820] dump_stack_lvl+0x95/0xd0 [ 47.128777][ T3820] dump_stack+0x15/0x1b [ 47.128801][ T3820] should_fail_ex+0x263/0x280 [ 47.128830][ T3820] should_fail+0xb/0x20 [ 47.128917][ T3820] should_fail_usercopy+0x1a/0x20 [ 47.128942][ T3820] _copy_from_user+0x1c/0xb0 [ 47.128972][ T3820] ___sys_sendmsg+0xc1/0x1e0 [ 47.129005][ T3820] ? path_openat+0x1b01/0x2050 [ 47.129129][ T3820] __sys_sendmmsg+0x185/0x320 [ 47.129162][ T3820] __x64_sys_sendmmsg+0x57/0x70 [ 47.129188][ T3820] x64_sys_call+0x27aa/0x3020 [ 47.129215][ T3820] do_syscall_64+0x12c/0x370 [ 47.129304][ T3820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.129344][ T3820] RIP: 0033:0x7efd6514c819 [ 47.129360][ T3820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.129427][ T3820] RSP: 002b:00007efd63b9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 47.129449][ T3820] RAX: ffffffffffffffda RBX: 00007efd653c5fa0 RCX: 00007efd6514c819 [ 47.129463][ T3820] RDX: 0000000000000001 RSI: 0000200000000cc0 RDI: 0000000000000004 [ 47.129476][ T3820] RBP: 00007efd63b9f090 R08: 0000000000000000 R09: 0000000000000000 [ 47.129490][ T3820] R10: 0000000000048094 R11: 0000000000000246 R12: 0000000000000001 [ 47.129551][ T3820] R13: 00007efd653c6038 R14: 00007efd653c5fa0 R15: 00007ffe9db77688 [ 47.129573][ T3820] [ 47.345282][ T28] audit: type=1400 audit(1775006989.918:638): avc: denied { accept } for pid=3825 comm="syz.4.93" laddr=172.20.20.170 lport=49817 faddr=224.0.0.2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 47.434049][ T28] audit: type=1400 audit(1775006989.998:639): avc: denied { create } for pid=3823 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.454458][ T3837] syz.1.94 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 47.487955][ T28] audit: type=1400 audit(1775006990.078:640): avc: denied { write } for pid=3823 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 47.550506][ T3843] capability: warning: `syz.2.99' uses 32-bit capabilities (legacy support in use) [ 47.561050][ T28] audit: type=1400 audit(1775006990.158:641): avc: denied { append } for pid=3841 comm="syz.2.99" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.595718][ T3843] program syz.2.99 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.768060][ T28] audit: type=1400 audit(1775006991.358:642): avc: denied { write } for pid=3842 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 49.782022][ T3859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.104'. [ 50.497860][ T3859] loop4: detected capacity change from 0 to 1024 [ 50.779515][ T3859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.486528][ T3859] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 52.773991][ T28] audit: type=1326 audit(1775006995.368:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0044cec819 code=0x7ffc0000 [ 53.069433][ T28] audit: type=1326 audit(1775006995.368:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0044cec819 code=0x7ffc0000 [ 53.100008][ T324] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 53.140464][ T324] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.140464][ T324] [ 53.172292][ T28] audit: type=1326 audit(1775006995.368:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0044cec819 code=0x7ffc0000 [ 53.195671][ T324] EXT4-fs (loop4): Total free blocks count 0 [ 53.216063][ T324] EXT4-fs (loop4): Free/Dirty block details [ 53.236344][ T324] EXT4-fs (loop4): free_blocks=20480 [ 53.251977][ T324] EXT4-fs (loop4): dirty_blocks=16 [ 53.277738][ T28] audit: type=1326 audit(1775006995.368:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0044cec819 code=0x7ffc0000 [ 53.301312][ T324] EXT4-fs (loop4): Block reservation details [ 53.314181][ T324] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 53.328576][ T3310] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 53.370828][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.380153][ T28] audit: type=1326 audit(1775006995.538:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0044cec819 code=0x7ffc0000 [ 53.427965][ T28] audit: type=1326 audit(1775006995.538:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0044cec819 code=0x7ffc0000 [ 53.459654][ T28] audit: type=1326 audit(1775006995.538:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0044cec582 code=0x7ffc0000 [ 53.505859][ T3887] loop4: detected capacity change from 0 to 256 [ 53.516539][ T28] audit: type=1326 audit(1775006995.538:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0044cec617 code=0x7ffc0000 [ 53.545563][ T28] audit: type=1326 audit(1775006995.538:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0044ca9511 code=0x7ffc0000 [ 53.569208][ T28] audit: type=1326 audit(1775006995.538:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f0044ced609 code=0x7ffc0000 [ 53.616528][ T3875] netlink: 'syz.2.108': attribute type 1 has an invalid length. [ 53.643149][ T3875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.666488][ T3875] bond1: (slave veth1_to_team): Enslaving as a backup interface with an up link [ 53.713866][ T3896] loop3: detected capacity change from 0 to 512 [ 53.767008][ T3896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.792437][ T3896] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.912228][ T3879] RDS: rds_bind could not find a transport for ::ffff:100.1.1.6, load rds_tcp or rds_rdma? [ 54.581736][ T3918] loop0: detected capacity change from 0 to 256 [ 56.083676][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.159672][ T3922] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.490361][ T3928] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 57.497786][ T3928] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 57.549006][ T3922] loop2: detected capacity change from 0 to 2048 [ 57.590037][ T3922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.639761][ T3922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.120'. [ 57.655836][ T3922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 57.676122][ T3925] loop3: detected capacity change from 0 to 512 [ 57.697381][ T3925] EXT4-fs: Ignoring removed nobh option [ 57.737813][ T3925] EXT4-fs (loop3): orphan cleanup on readonly fs [ 57.751374][ T3925] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.119: EA inode hash validation failed [ 57.765313][ T3925] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 57.795301][ T3925] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #15: comm syz.3.119: corrupted inode contents [ 57.814893][ T28] kauditd_printk_skb: 114 callbacks suppressed [ 57.814908][ T28] audit: type=1400 audit(1775007000.408:767): avc: denied { wake_alarm } for pid=3921 comm="syz.2.120" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.854826][ T3925] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.867932][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 57.872951][ T3925] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #15: comm syz.3.119: mark_inode_dirty error [ 57.877128][ C1] EXT4-fs (loop3): initial error at time 1775007000: ext4_do_update_inode:5602: inode 15 [ 57.877166][ C1] EXT4-fs (loop3): last error at time 1775007000: ext4_do_update_inode:5602: inode 15 [ 57.918100][ T3925] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.923348][ T3925] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #15: comm syz.3.119: corrupted inode contents [ 57.957267][ T3887] Set syz1 is full, maxelem 65536 reached [ 57.993779][ T28] audit: type=1400 audit(1775007000.588:768): avc: denied { ioctl } for pid=3938 comm="syz.1.123" path="socket:[6323]" dev="sockfs" ino=6323 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 58.048736][ T3925] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.051213][ T3925] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.119: mark_inode_dirty error [ 58.107281][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.125597][ T3925] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.128586][ T3925] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.119: mark inode dirty (error -117) [ 58.153057][ T3925] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.168668][ T3925] EXT4-fs warning (device loop3): ext4_evict_inode:285: xattr delete (err -117) [ 58.203894][ T3947] loop4: detected capacity change from 0 to 128 [ 58.260016][ T3925] EXT4-fs (loop3): 1 orphan inode deleted [ 58.279805][ T3925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 58.330451][ T3953] loop0: detected capacity change from 0 to 512 [ 58.337105][ T3953] EXT4-fs: Ignoring removed bh option [ 58.407133][ T3954] netlink: 'syz.2.126': attribute type 2 has an invalid length. [ 58.416815][ T3925] netlink: 96 bytes leftover after parsing attributes in process `syz.3.119'. [ 58.574602][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.600750][ T3953] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 58.609683][ T3953] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 1024: comm syz.0.128: invalid block [ 58.653753][ T3953] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 58.654644][ T3953] EXT4-fs (loop0): 1 truncate cleaned up [ 58.663865][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 58.663883][ C1] EXT4-fs (loop0): initial error at time 1775007001: ext4_get_branch:178: inode 13: block 1024 [ 58.663935][ C1] EXT4-fs (loop0): last error at time 1775007001: ext4_get_branch:178: inode 13: block 1024 [ 58.782527][ T3953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.834344][ T3960] futex_wake_op: syz.3.129 tries to shift op by 32; fix this program [ 58.947507][ T3967] random: crng reseeded on system resumption [ 58.970333][ T28] audit: type=1400 audit(1775007001.538:769): avc: denied { write } for pid=3959 comm="syz.3.129" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 59.245319][ T3970] loop2: detected capacity change from 0 to 512 [ 59.309429][ T3970] EXT4-fs: Ignoring removed bh option [ 59.361809][ T3970] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 59.414296][ T3970] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1024: comm syz.2.131: invalid block [ 59.484993][ T3970] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 59.486380][ T3970] EXT4-fs (loop2): 1 truncate cleaned up [ 59.495668][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 59.495689][ C1] EXT4-fs (loop2): initial error at time 1775007002: ext4_get_branch:178: inode 13: block 1024 [ 59.495780][ C1] EXT4-fs (loop2): last error at time 1775007002: ext4_get_branch:178: inode 13: block 1024 [ 59.502856][ T28] audit: type=1400 audit(1775007001.538:770): avc: denied { open } for pid=3959 comm="syz.3.129" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 59.589353][ T3970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.780436][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.813458][ T28] audit: type=1400 audit(1775007002.408:771): avc: denied { setopt } for pid=3981 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.851460][ T3984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=3984 comm=syz.3.135 [ 59.893244][ T3985] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.132'. [ 59.902423][ T3985] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.132'. [ 59.948018][ T3989] vhci_hcd vhci_hcd.4: invalid port number 254 [ 59.954248][ T3989] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 60.026440][ T28] audit: type=1400 audit(1775007002.568:772): avc: denied { create } for pid=3981 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 60.289829][ T3995] loop3: detected capacity change from 0 to 512 [ 60.308208][ T28] audit: type=1400 audit(1775007002.568:773): avc: denied { getopt } for pid=3981 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 60.356858][ T3995] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 60.365694][ T28] audit: type=1400 audit(1775007002.568:774): avc: denied { write } for pid=3981 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.386607][ T28] audit: type=1400 audit(1775007002.978:775): avc: denied { block_suspend } for pid=3996 comm="syz.0.138" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.420135][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.420220][ T3995] EXT4-fs (loop3): 1 truncate cleaned up [ 60.420620][ T3995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.491108][ T28] audit: type=1400 audit(1775007003.088:776): avc: denied { ioctl } for pid=3999 comm="syz.0.140" path="socket:[6408]" dev="sockfs" ino=6408 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 60.517239][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.272830][ T4008] loop0: detected capacity change from 0 to 128 [ 61.396490][ T4009] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.142'. [ 61.405635][ T4009] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.142'. [ 61.450686][ T4010] vhci_hcd vhci_hcd.4: invalid port number 254 [ 61.456984][ T4010] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 61.821182][ T4018] netlink: 'syz.1.143': attribute type 2 has an invalid length. [ 61.900075][ T4003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 61.935281][ T4003] loop2: detected capacity change from 0 to 2048 [ 61.963312][ T4003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.988703][ T4003] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 62.003538][ T4003] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 62.015944][ T4003] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.015944][ T4003] [ 62.025637][ T4003] EXT4-fs (loop2): Total free blocks count 0 [ 62.031833][ T4003] EXT4-fs (loop2): Free/Dirty block details [ 62.037965][ T4003] EXT4-fs (loop2): free_blocks=2415919504 [ 62.043869][ T4003] EXT4-fs (loop2): dirty_blocks=16 [ 62.049155][ T4003] EXT4-fs (loop2): Block reservation details [ 62.055241][ T4003] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 62.070944][ T4003] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 62.087938][ T4003] syz.2.139 (4003) used greatest stack depth: 9440 bytes left [ 62.254181][ T3315] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 62.442002][ T4028] loop3: detected capacity change from 0 to 128 [ 62.452417][ T4028] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.144'. [ 62.461502][ T4028] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.144'. [ 62.506907][ T4030] vhci_hcd vhci_hcd.4: invalid port number 254 [ 62.513167][ T4030] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 62.939275][ T4032] netlink: 'syz.1.148': attribute type 1 has an invalid length. [ 62.946954][ T4032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 63.147049][ T4034] loop3: detected capacity change from 0 to 512 [ 63.214680][ T4034] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.271122][ T4034] EXT4-fs (loop3): 1 truncate cleaned up [ 63.291355][ T4034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.331574][ T4047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.153'. [ 63.344465][ T4039] loop0: detected capacity change from 0 to 8192 [ 63.354930][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 63.354946][ T28] audit: type=1326 audit(1775007005.948:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4033 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0044cec819 code=0x7ffc0000 [ 63.386303][ T28] audit: type=1326 audit(1775007005.958:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4033 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0044cec819 code=0x7ffc0000 [ 63.409841][ T28] audit: type=1326 audit(1775007005.958:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4033 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0044cec819 code=0x7ffc0000 [ 63.439313][ T4047] loop4: detected capacity change from 0 to 1024 [ 63.470720][ T4039] ip6erspan0: entered promiscuous mode [ 63.503187][ T4047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.517409][ T28] audit: type=1326 audit(1775007005.958:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4033 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0044cec819 code=0x7ffc0000 [ 63.542021][ T28] audit: type=1326 audit(1775007005.958:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4033 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f0044cec819 code=0x7ffc0000 [ 63.566698][ T28] audit: type=1326 audit(1775007005.968:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4033 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0044cec819 code=0x7ffc0000 [ 63.590281][ T28] audit: type=1326 audit(1775007005.978:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4033 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0044cec819 code=0x7ffc0000 [ 63.636123][ T4047] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 63.650751][ T28] audit: type=1326 audit(1775007005.978:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4033 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0044cec819 code=0x7ffc0000 [ 63.728507][ T4068] loop2: detected capacity change from 0 to 128 [ 63.741958][ T4068] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.156'. [ 63.751167][ T4068] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.156'. [ 63.770097][ T4047] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 63.795840][ T4069] vhci_hcd vhci_hcd.4: invalid port number 254 [ 63.802161][ T4069] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 63.811030][ T28] audit: type=1326 audit(1775007006.048:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4033 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0044cec819 code=0x7ffc0000 [ 63.842129][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.064796][ T4071] netlink: 'syz.1.158': attribute type 2 has an invalid length. [ 64.771048][ T28] audit: type=1326 audit(1775007006.048:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4033 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0044cec582 code=0x7ffc0000 [ 64.938559][ T4075] FAULT_INJECTION: forcing a failure. [ 64.938559][ T4075] name failslab, interval 1, probability 0, space 0, times 0 [ 64.987277][ T4075] CPU: 0 UID: 0 PID: 4075 Comm: syz.3.159 Tainted: G W syzkaller #0 PREEMPT(full) [ 64.987310][ T4075] Tainted: [W]=WARN [ 64.987317][ T4075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 64.987331][ T4075] Call Trace: [ 64.987340][ T4075] [ 64.987348][ T4075] __dump_stack+0x1d/0x30 [ 64.987434][ T4075] dump_stack_lvl+0x95/0xd0 [ 64.987521][ T4075] dump_stack+0x15/0x1b [ 64.987542][ T4075] should_fail_ex+0x263/0x280 [ 64.987569][ T4075] should_failslab+0x8c/0xb0 [ 64.987650][ T4075] __kvmalloc_node_noprof+0x155/0x650 [ 64.987681][ T4075] ? xt_alloc_table_info+0x40/0x80 [ 64.987720][ T4075] xt_alloc_table_info+0x40/0x80 [ 64.987803][ T4075] do_ip6t_set_ctl+0x5e5/0x8f0 [ 64.987842][ T4075] nf_setsockopt+0x199/0x1b0 [ 64.987908][ T4075] ipv6_setsockopt+0x11a/0x130 [ 64.987939][ T4075] udpv6_setsockopt+0x99/0xb0 [ 64.987961][ T4075] sock_common_setsockopt+0x69/0x80 [ 64.988023][ T4075] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 64.988095][ T4075] __sys_setsockopt+0x184/0x200 [ 64.988131][ T4075] __x64_sys_setsockopt+0x64/0x80 [ 64.988236][ T4075] x64_sys_call+0x2327/0x3020 [ 64.988261][ T4075] do_syscall_64+0x12c/0x370 [ 64.988291][ T4075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.988375][ T4075] RIP: 0033:0x7f0044cec819 [ 64.988394][ T4075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.988440][ T4075] RSP: 002b:00007f0043747028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 64.988517][ T4075] RAX: ffffffffffffffda RBX: 00007f0044f65fa0 RCX: 00007f0044cec819 [ 64.988531][ T4075] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 64.988545][ T4075] RBP: 00007f0043747090 R08: 0000000000000540 R09: 0000000000000000 [ 64.988561][ T4075] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 64.988577][ T4075] R13: 00007f0044f66038 R14: 00007f0044f65fa0 R15: 00007ffd87a2ef28 [ 64.988597][ T4075] [ 65.210368][ T4079] loop2: detected capacity change from 0 to 128 [ 65.355025][ T4083] loop0: detected capacity change from 0 to 164 [ 65.453144][ T4083] rock: directory entry would overflow storage [ 65.461744][ T4083] rock: sig=0x66, size=4, remaining=3 [ 65.486352][ T4083] capability: warning: `syz.0.161' uses deprecated v2 capabilities in a way that may be insecure [ 65.511703][ T4083] rock: directory entry would overflow storage [ 65.520390][ T4083] rock: sig=0x66, size=4, remaining=3 [ 65.646005][ T4083] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 65.746824][ T4083] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 67.243041][ T4101] netlink: 'syz.2.168': attribute type 1 has an invalid length. [ 67.251287][ T4022] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 67.273227][ T4022] EXT4-fs (loop4): This should not happen!! Data will be lost [ 67.273227][ T4022] [ 67.278795][ T4101] bond2: entered promiscuous mode [ 67.283064][ T4022] EXT4-fs (loop4): Total free blocks count 0 [ 67.294186][ T4022] EXT4-fs (loop4): Free/Dirty block details [ 67.300382][ T4022] EXT4-fs (loop4): free_blocks=20480 [ 67.305754][ T4022] EXT4-fs (loop4): dirty_blocks=16 [ 67.311085][ T4022] EXT4-fs (loop4): Block reservation details [ 67.312923][ T4101] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.323847][ T4022] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 67.332223][ T3310] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 67.344157][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.354816][ T4112] netlink: 'syz.3.166': attribute type 1 has an invalid length. [ 67.362552][ T4112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 67.373434][ T4101] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.380875][ T4101] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 67.390993][ T4101] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 67.416457][ T4101] bond2: (slave vti0): making interface the new active one [ 67.431300][ T4101] vti0: entered promiscuous mode [ 67.438374][ T4101] bond2: (slave vti0): Enslaving as an active interface with an up link [ 67.452331][ T4112] loop3: detected capacity change from 0 to 512 [ 67.480084][ T4112] EXT4-fs (loop3): 1 orphan inode deleted [ 67.486384][ T4112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.581677][ T4125] loop0: detected capacity change from 0 to 128 [ 67.594964][ T4125] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.172'. [ 67.604260][ T4125] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.172'. [ 67.614055][ T4125] vhci_hcd vhci_hcd.4: invalid port number 254 [ 67.620378][ T4125] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 68.038397][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.081747][ T4131] loop3: detected capacity change from 0 to 512 [ 68.089219][ T4131] EXT4-fs: Ignoring removed bh option [ 68.108071][ T4131] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 68.123817][ T4131] EXT4-fs (loop3): 1 truncate cleaned up [ 68.131061][ T4131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.144351][ T4138] netlink: 277 bytes leftover after parsing attributes in process `syz.4.177'. [ 68.147443][ T4131] EXT4-fs (loop3): shut down requested (0) [ 68.182860][ T4141] loop4: detected capacity change from 0 to 512 [ 68.190067][ T4141] ext4: Unknown parameter 'euid<00000000000000000000' [ 68.200489][ T4141] 9p: Bad value for 'rfdno' [ 68.255999][ T4147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=4147 comm=syz.0.181 [ 68.331432][ T4150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.180'. [ 68.345584][ T4150] loop4: detected capacity change from 0 to 1024 [ 68.369565][ T4150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.536926][ T4150] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 68.990212][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.003533][ T4169] netlink: 'syz.2.186': attribute type 1 has an invalid length. [ 69.011487][ T4169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'. [ 69.041783][ T4169] loop2: detected capacity change from 0 to 512 [ 69.206125][ T4169] EXT4-fs (loop2): 1 orphan inode deleted [ 69.213124][ T4169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.230020][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 69.230080][ T28] audit: type=1400 audit(1775007011.658:851): avc: denied { create } for pid=4164 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.383362][ T28] audit: type=1400 audit(1775007011.658:852): avc: denied { write } for pid=4164 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.818762][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.990831][ T50] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 70.027551][ T50] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.027551][ T50] [ 70.067009][ T50] EXT4-fs (loop4): Total free blocks count 0 [ 70.092085][ T50] EXT4-fs (loop4): Free/Dirty block details [ 70.114135][ T50] EXT4-fs (loop4): free_blocks=20480 [ 70.136334][ T50] EXT4-fs (loop4): dirty_blocks=16 [ 70.158071][ T50] EXT4-fs (loop4): Block reservation details [ 70.179619][ T50] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 70.202308][ T3310] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 70.267389][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.339732][ T4185] netlink: 'syz.1.192': attribute type 2 has an invalid length. [ 71.419043][ T28] audit: type=1400 audit(1775007014.018:853): avc: denied { getopt } for pid=4186 comm="syz.3.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.686840][ T4195] loop3: detected capacity change from 0 to 512 [ 71.696284][ T28] audit: type=1400 audit(1775007014.288:854): avc: denied { map } for pid=4197 comm="syz.4.191" path="socket:[6067]" dev="sockfs" ino=6067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.733001][ T4206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.198'. [ 71.742189][ T4195] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.753527][ T4206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.198'. [ 71.762995][ T4206] netlink: 76 bytes leftover after parsing attributes in process `syz.2.198'. [ 71.800779][ T28] audit: type=1400 audit(1775007014.318:855): avc: denied { read } for pid=4197 comm="syz.4.191" path="socket:[6067]" dev="sockfs" ino=6067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.827567][ T28] audit: type=1400 audit(1775007014.318:856): avc: denied { load_policy } for pid=4197 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 71.844115][ T4211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 71.860800][ T4195] EXT4-fs (loop3): 1 truncate cleaned up [ 71.875213][ T4195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.890191][ T4215] netlink: 16 bytes leftover after parsing attributes in process `syz.4.201'. [ 71.909005][ T28] audit: type=1326 audit(1775007014.498:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86705ec819 code=0x7ffc0000 [ 71.947212][ T4215] loop4: detected capacity change from 0 to 1024 [ 71.985929][ T28] audit: type=1326 audit(1775007014.538:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86705ec819 code=0x7ffc0000 [ 72.012153][ T28] audit: type=1326 audit(1775007014.538:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86705ec819 code=0x7ffc0000 [ 72.035763][ T28] audit: type=1326 audit(1775007014.538:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f86705ec819 code=0x7ffc0000 [ 72.080588][ T4215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.095518][ T4215] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 72.164549][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.417726][ T4237] netlink: 'syz.3.205': attribute type 2 has an invalid length. [ 72.465138][ T4239] loop0: detected capacity change from 0 to 736 [ 72.846891][ T4171] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 72.847370][ T4242] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 72.870063][ T4171] EXT4-fs (loop4): This should not happen!! Data will be lost [ 72.870063][ T4171] [ 72.874040][ T4245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'. [ 72.883431][ T4171] EXT4-fs (loop4): Total free blocks count 0 [ 72.897216][ T4171] EXT4-fs (loop4): Free/Dirty block details [ 72.906885][ T4171] EXT4-fs (loop4): free_blocks=20480 [ 72.910363][ T4245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.210'. [ 72.912442][ T4171] EXT4-fs (loop4): dirty_blocks=16 [ 72.926635][ T4171] EXT4-fs (loop4): Block reservation details [ 72.932966][ T4171] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 72.939685][ T3310] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 72.954112][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.999048][ T4252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 73.196766][ T4265] __nla_validate_parse: 1 callbacks suppressed [ 73.196782][ T4265] netlink: 604 bytes leftover after parsing attributes in process `syz.3.219'. [ 73.268915][ T4256] loop0: detected capacity change from 0 to 512 [ 73.276912][ T4274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.223'. [ 73.310237][ T4256] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.343727][ T4256] EXT4-fs (loop0): 1 truncate cleaned up [ 73.375221][ T4256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.458160][ T4281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.224'. [ 73.468752][ T4281] netlink: 76 bytes leftover after parsing attributes in process `syz.4.224'. [ 73.537271][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.587125][ T4286] netlink: 'syz.4.225': attribute type 1 has an invalid length. [ 73.594937][ T4286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'. [ 73.610477][ T4286] loop4: detected capacity change from 0 to 512 [ 73.638473][ T4286] EXT4-fs (loop4): 1 orphan inode deleted [ 73.644725][ T4286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.756472][ T4289] netlink: 'syz.0.226': attribute type 2 has an invalid length. [ 74.215172][ T4306] netlink: 604 bytes leftover after parsing attributes in process `syz.3.233'. [ 74.442226][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.449875][ T4314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 74.489954][ T4314] netlink: 76 bytes leftover after parsing attributes in process `syz.3.236'. [ 74.502503][ T4316] loop2: detected capacity change from 0 to 128 [ 74.515136][ T4316] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.235'. [ 74.524408][ T4316] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.235'. [ 74.558844][ T4316] vhci_hcd vhci_hcd.4: invalid port number 254 [ 74.565277][ T4316] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 74.736816][ T4321] FAULT_INJECTION: forcing a failure. [ 74.736816][ T4321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.753656][ T4319] loop4: detected capacity change from 0 to 1024 [ 74.810902][ T4319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.829457][ T4321] CPU: 1 UID: 0 PID: 4321 Comm: syz.0.239 Tainted: G W syzkaller #0 PREEMPT(full) [ 74.829495][ T4321] Tainted: [W]=WARN [ 74.829501][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 74.829512][ T4321] Call Trace: [ 74.829520][ T4321] [ 74.829528][ T4321] __dump_stack+0x1d/0x30 [ 74.829597][ T4321] dump_stack_lvl+0x95/0xd0 [ 74.829624][ T4321] dump_stack+0x15/0x1b [ 74.829652][ T4321] should_fail_ex+0x263/0x280 [ 74.829753][ T4321] should_fail+0xb/0x20 [ 74.829779][ T4321] should_fail_usercopy+0x1a/0x20 [ 74.829827][ T4321] _copy_from_user+0x1c/0xb0 [ 74.829860][ T4321] ___sys_sendmsg+0xc1/0x1e0 [ 74.829892][ T4321] __x64_sys_sendmsg+0xd4/0x160 [ 74.829970][ T4321] x64_sys_call+0x194c/0x3020 [ 74.830055][ T4321] do_syscall_64+0x12c/0x370 [ 74.830080][ T4321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.830100][ T4321] RIP: 0033:0x7f2e130dc819 [ 74.830115][ T4321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.830153][ T4321] RSP: 002b:00007f2e11b2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.830177][ T4321] RAX: ffffffffffffffda RBX: 00007f2e13355fa0 RCX: 00007f2e130dc819 [ 74.830247][ T4321] RDX: 0000000004008840 RSI: 0000200000000340 RDI: 0000000000000004 [ 74.830263][ T4321] RBP: 00007f2e11b2f090 R08: 0000000000000000 R09: 0000000000000000 [ 74.830278][ T4321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.830291][ T4321] R13: 00007f2e13356038 R14: 00007f2e13355fa0 R15: 00007ffc870745e8 [ 74.830310][ T4321] [ 75.008590][ T4319] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 75.204772][ T4336] FAULT_INJECTION: forcing a failure. [ 75.204772][ T4336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.218469][ T4336] CPU: 1 UID: 0 PID: 4336 Comm: syz.2.243 Tainted: G W syzkaller #0 PREEMPT(full) [ 75.218568][ T4336] Tainted: [W]=WARN [ 75.218575][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 75.218586][ T4336] Call Trace: [ 75.218592][ T4336] [ 75.218600][ T4336] __dump_stack+0x1d/0x30 [ 75.218703][ T4336] dump_stack_lvl+0x95/0xd0 [ 75.218731][ T4336] dump_stack+0x15/0x1b [ 75.218755][ T4336] should_fail_ex+0x263/0x280 [ 75.218832][ T4336] should_fail+0xb/0x20 [ 75.218947][ T4336] should_fail_usercopy+0x1a/0x20 [ 75.218977][ T4336] _copy_from_user+0x1c/0xb0 [ 75.219029][ T4336] kstrtouint_from_user+0x69/0xf0 [ 75.219060][ T4336] proc_fail_nth_write+0x50/0x160 [ 75.219122][ T4336] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 75.219187][ T4336] vfs_write+0x269/0x9f0 [ 75.219209][ T4336] ? __rcu_read_unlock+0x4e/0x70 [ 75.219233][ T4336] ? __fget_files+0x184/0x1c0 [ 75.219260][ T4336] ? mutex_lock+0x57/0x90 [ 75.219371][ T4336] ksys_write+0xdc/0x1a0 [ 75.219393][ T4336] __x64_sys_write+0x40/0x50 [ 75.219414][ T4336] x64_sys_call+0x27e1/0x3020 [ 75.219443][ T4336] do_syscall_64+0x12c/0x370 [ 75.219496][ T4336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.219520][ T4336] RIP: 0033:0x7efd6510d04e [ 75.219581][ T4336] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 75.219599][ T4336] RSP: 002b:00007efd63b9efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.219620][ T4336] RAX: ffffffffffffffda RBX: 00007efd63b9f6c0 RCX: 00007efd6510d04e [ 75.219650][ T4336] RDX: 0000000000000001 RSI: 00007efd63b9f0a0 RDI: 0000000000000004 [ 75.219664][ T4336] RBP: 00007efd63b9f090 R08: 0000000000000000 R09: 0000000000000000 [ 75.219677][ T4336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.219745][ T4336] R13: 00007efd653c6038 R14: 00007efd653c5fa0 R15: 00007ffe9db77688 [ 75.219765][ T4336] [ 75.468029][ T4343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.477469][ T4343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.491400][ T4343] loop2: detected capacity change from 0 to 512 [ 75.500452][ T4343] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.516496][ T4343] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.247: bg 0: block 393: padding at end of block bitmap is not set [ 75.532467][ T4343] loop2: lost filesystem error report for type 5 error -117 [ 75.532802][ T4343] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 75.540162][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 75.540186][ C1] EXT4-fs (loop2): initial error at time 1775007018: ext4_validate_block_bitmap:441 [ 75.540224][ C1] EXT4-fs (loop2): last error at time 1775007018: ext4_validate_block_bitmap:441 [ 75.580462][ T4343] loop2: lost filesystem error report for type 5 error -117 [ 75.581026][ T4343] EXT4-fs (loop2): 2 truncates cleaned up [ 75.594852][ T4343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.698355][ T28] kauditd_printk_skb: 133 callbacks suppressed [ 75.698375][ T28] audit: type=1400 audit(1775007018.278:994): avc: denied { create } for pid=4342 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 75.749078][ T28] audit: type=1400 audit(1775007018.278:995): avc: denied { write } for pid=4342 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 75.830568][ T4358] netlink: 'syz.1.249': attribute type 1 has an invalid length. [ 75.867583][ T4359] netlink: 'syz.0.248': attribute type 2 has an invalid length. [ 76.024588][ T40] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 76.040683][ T40] EXT4-fs (loop4): This should not happen!! Data will be lost [ 76.040683][ T40] [ 76.070539][ T40] EXT4-fs (loop4): Total free blocks count 0 [ 76.091439][ T40] EXT4-fs (loop4): Free/Dirty block details [ 76.112748][ T40] EXT4-fs (loop4): free_blocks=20480 [ 76.131964][ T40] EXT4-fs (loop4): dirty_blocks=16 [ 76.150507][ T40] EXT4-fs (loop4): Block reservation details [ 76.172770][ T40] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 76.194588][ T3310] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 76.217330][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.276864][ T28] audit: type=1400 audit(1775007018.278:996): avc: denied { mount } for pid=4342 comm="syz.2.247" name="/" dev="configfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 76.335227][ T28] audit: type=1400 audit(1775007018.928:997): avc: denied { mount } for pid=4363 comm="syz.4.253" name="/" dev="hugetlbfs" ino=7290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 76.430927][ T4364] loop4: detected capacity change from 0 to 1024 [ 76.463984][ T4364] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 76.473596][ T4364] System zones: 0-1, 3-36 [ 76.483985][ T4364] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.253: bad orphan inode 134217728 [ 76.496108][ T4364] loop4: lost filesystem error report for type 5 error -117 [ 76.519350][ T4364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.590233][ T28] audit: type=1400 audit(1775007019.158:998): avc: denied { connect } for pid=4363 comm="syz.4.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.756550][ T4372] loop0: detected capacity change from 0 to 128 [ 76.766706][ T28] audit: type=1400 audit(1775007019.288:999): avc: denied { read open } for pid=4363 comm="syz.4.253" path="/40/bus/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.617953][ T28] audit: type=1400 audit(1775007019.298:1000): avc: denied { ioctl } for pid=4363 comm="syz.4.253" path="/40/bus/bus" dev="loop4" ino=18 ioctlcmd=0x6618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.791354][ T28] audit: type=1400 audit(1775007019.388:1001): avc: denied { write } for pid=4363 comm="syz.4.253" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.647807][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.667851][ T4372] __nla_validate_parse: 7 callbacks suppressed [ 78.667870][ T4372] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.254'. [ 78.683490][ T4372] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.254'. [ 78.694812][ T4372] vhci_hcd vhci_hcd.4: invalid port number 254 [ 78.701077][ T4372] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 78.741935][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.757848][ T28] audit: type=1400 audit(1775007021.348:1002): avc: denied { write } for pid=4383 comm="syz.2.256" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 78.782506][ T4381] loop3: detected capacity change from 0 to 512 [ 78.783906][ T4384] loop2: detected capacity change from 0 to 128 [ 78.795486][ T4381] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 78.919448][ T4388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 78.919785][ T4381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.938973][ T4388] netlink: 76 bytes leftover after parsing attributes in process `syz.1.261'. [ 78.950285][ T4381] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.120794][ T4397] netlink: 'syz.2.256': attribute type 13 has an invalid length. [ 79.558900][ T4408] loop4: detected capacity change from 0 to 1024 [ 79.565615][ T4407] loop0: detected capacity change from 0 to 4096 [ 79.595761][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.615949][ T4407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.729661][ T28] audit: type=1400 audit(1775007022.328:1003): avc: denied { getopt } for pid=4405 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.788137][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.817108][ T4415] loop4: detected capacity change from 0 to 512 [ 79.902904][ T4415] EXT4-fs (loop4): 1 orphan inode deleted [ 79.909250][ T4415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.922022][ T4415] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.331296][ T4425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.272'. [ 80.424239][ T4426] netlink: 76 bytes leftover after parsing attributes in process `syz.1.272'. [ 80.709759][ T40] __quota_error: 86 callbacks suppressed [ 80.709779][ T40] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 80.745684][ T28] audit: type=1326 audit(1775007023.338:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4412 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0044cec819 code=0x7ffc0000 [ 80.804140][ T40] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:2: Failed to release dquot type 1 [ 81.425640][ T4439] loop3: detected capacity change from 0 to 128 [ 81.434624][ T4439] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.275'. [ 81.443824][ T4439] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.275'. [ 81.489322][ T4441] vhci_hcd vhci_hcd.4: invalid port number 254 [ 81.495576][ T4441] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 81.515088][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.866932][ T28] audit: type=1400 audit(1775007024.458:1091): avc: denied { name_bind } for pid=4445 comm="syz.3.278" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 81.913357][ T4450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 81.922649][ T4450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.279'. [ 81.936028][ T4171] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.955261][ T4171] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.968162][ T4171] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.987324][ T4171] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.144527][ T28] audit: type=1400 audit(1775007024.738:1092): avc: denied { mounton } for pid=4445 comm="syz.3.278" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 82.208947][ T4455] xfrm1: entered allmulticast mode [ 82.389890][ T28] audit: type=1400 audit(1775007024.888:1093): avc: denied { write } for pid=4445 comm="syz.3.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.294961][ T4483] loop0: detected capacity change from 0 to 1024 [ 83.352073][ T4483] loop0: detected capacity change from 0 to 1024 [ 83.400575][ T4483] EXT4-fs: test_dummy_encryption option not supported [ 83.552452][ T28] audit: type=1400 audit(1775007026.148:1094): avc: denied { mounton } for pid=4487 comm="syz.1.287" path="/proc/219/task" dev="proc" ino=7449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 83.818424][ T4491] loop0: detected capacity change from 0 to 512 [ 83.969124][ T4491] EXT4-fs (loop0): 1 orphan inode deleted [ 83.975805][ T4491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.988769][ T4491] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.005914][ T50] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 84.310226][ T50] EXT4-fs error (device loop0): ext4_release_dquot:7062: comm kworker/u8:3: Failed to release dquot type 1 [ 84.335891][ T28] audit: type=1400 audit(1775007026.148:1095): avc: denied { associate } for pid=4487 comm="syz.1.287" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.405638][ T4501] loop2: detected capacity change from 0 to 512 [ 84.413776][ T4502] loop4: detected capacity change from 0 to 128 [ 84.422851][ T4502] __nla_validate_parse: 4 callbacks suppressed [ 84.422865][ T4502] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.288'. [ 84.438145][ T4502] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.288'. [ 84.447533][ T4502] vhci_hcd vhci_hcd.4: invalid port number 254 [ 84.453766][ T4502] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 84.506002][ T4501] EXT4-fs: Ignoring removed bh option [ 84.561156][ T4501] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 84.598276][ T4501] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1024: comm syz.2.290: invalid block [ 84.658663][ T4501] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 84.658948][ T4501] EXT4-fs (loop2): 1 truncate cleaned up [ 84.668240][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 84.668261][ C0] EXT4-fs (loop2): initial error at time 1775007027: ext4_get_branch:178: inode 13: block 1024 [ 84.668309][ C0] EXT4-fs (loop2): last error at time 1775007027: ext4_get_branch:178: inode 13: block 1024 [ 84.860552][ T4501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.910542][ T4501] EXT4-fs (loop2): shut down requested (0) [ 85.054424][ T4515] FAULT_INJECTION: forcing a failure. [ 85.054424][ T4515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.084651][ T4515] CPU: 0 UID: 0 PID: 4515 Comm: syz.1.294 Tainted: G W syzkaller #0 PREEMPT(full) [ 85.084766][ T4515] Tainted: [W]=WARN [ 85.084773][ T4515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 85.084786][ T4515] Call Trace: [ 85.084794][ T4515] [ 85.084805][ T4515] __dump_stack+0x1d/0x30 [ 85.084878][ T4515] dump_stack_lvl+0x95/0xd0 [ 85.084901][ T4515] dump_stack+0x15/0x1b [ 85.084924][ T4515] should_fail_ex+0x263/0x280 [ 85.084956][ T4515] should_fail+0xb/0x20 [ 85.085042][ T4515] should_fail_usercopy+0x1a/0x20 [ 85.085099][ T4515] _copy_from_user+0x1c/0xb0 [ 85.085129][ T4515] ___sys_sendmsg+0xc1/0x1e0 [ 85.085165][ T4515] __x64_sys_sendmsg+0xd4/0x160 [ 85.085192][ T4515] x64_sys_call+0x194c/0x3020 [ 85.085276][ T4515] do_syscall_64+0x12c/0x370 [ 85.085307][ T4515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.085337][ T4515] RIP: 0033:0x7f86705ec819 [ 85.085356][ T4515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.085376][ T4515] RSP: 002b:00007f866f03f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.085400][ T4515] RAX: ffffffffffffffda RBX: 00007f8670865fa0 RCX: 00007f86705ec819 [ 85.085414][ T4515] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 85.085428][ T4515] RBP: 00007f866f03f090 R08: 0000000000000000 R09: 0000000000000000 [ 85.085507][ T4515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.085530][ T4515] R13: 00007f8670866038 R14: 00007f8670865fa0 R15: 00007ffc59718878 [ 85.085551][ T4515] [ 85.377066][ T4518] netlink: 'syz.1.295': attribute type 11 has an invalid length. [ 85.420353][ T4520] netlink: 20 bytes leftover after parsing attributes in process `syz.1.297'. [ 85.425252][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.448190][ T4522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 85.480123][ T4522] netlink: 76 bytes leftover after parsing attributes in process `syz.0.296'. [ 85.548690][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.559975][ T28] audit: type=1400 audit(1775007028.138:1096): avc: denied { bind } for pid=4523 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 85.607519][ T28] audit: type=1400 audit(1775007028.158:1097): avc: denied { create } for pid=4525 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.630258][ T4524] serio: Serial port ttyS3 [ 85.681392][ T4531] loop2: detected capacity change from 0 to 128 [ 85.725763][ T28] audit: type=1400 audit(1775007028.158:1098): avc: denied { bind } for pid=4525 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.747417][ T28] audit: type=1400 audit(1775007028.158:1099): avc: denied { connect } for pid=4525 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.823204][ T28] audit: type=1400 audit(1775007028.418:1100): avc: denied { watch } for pid=4527 comm="syz.2.300" path="/54/bus/file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 86.043666][ T28] audit: type=1400 audit(1775007028.448:1101): avc: denied { setopt } for pid=4529 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.152073][ T28] audit: type=1400 audit(1775007028.508:1102): avc: denied { read } for pid=4529 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.227770][ T28] audit: type=1400 audit(1775007028.578:1103): avc: denied { write } for pid=4537 comm="syz.3.303" name="netlink" dev="proc" ino=4026532874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 86.814191][ T4550] loop2: detected capacity change from 0 to 1024 [ 86.888678][ T4550] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.040762][ T28] audit: type=1400 audit(1775007029.628:1104): avc: denied { name_bind } for pid=4551 comm="syz.3.309" src=24097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 87.549291][ T4550] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 87.565352][ T4550] EXT4-fs (loop2): orphan cleanup on readonly fs [ 87.620190][ T28] audit: type=1326 audit(1775007030.188:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4543 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b5fcc819 code=0x7ffc0000 [ 87.686633][ T4559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'. [ 87.700988][ T4552] syz.3.309 (4552) used greatest stack depth: 9344 bytes left [ 87.708739][ T4550] EXT4-fs error (device loop2): __ext4_get_inode_loc:4797: comm syz.2.308: Invalid inode table block 0 in block_group 0 [ 87.734137][ T4559] netlink: 76 bytes leftover after parsing attributes in process `syz.0.310'. [ 87.747111][ T4550] loop2: lost filesystem error report for type 5 error -117 [ 87.747242][ T4550] EXT4-fs (loop2): Remounting filesystem read-only [ 87.754671][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 87.754691][ C1] EXT4-fs (loop2): initial error at time 1775007030: __ext4_get_inode_loc:4797 [ 87.754716][ C1] EXT4-fs (loop2): last error at time 1775007030: __ext4_get_inode_loc:4797 [ 87.807067][ T28] audit: type=1326 audit(1775007030.188:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4543 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa8b5fcc582 code=0x7ffc0000 [ 87.878086][ T28] audit: type=1326 audit(1775007030.198:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4543 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa8b5fcc617 code=0x7ffc0000 [ 87.906440][ T4550] EXT4-fs (loop2): 1 truncate cleaned up [ 88.192739][ T4574] loop0: detected capacity change from 0 to 512 [ 88.227537][ T4574] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.254553][ T4574] EXT4-fs (loop0): 1 truncate cleaned up [ 88.270351][ T4574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.479783][ T4550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.493024][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.523522][ T4550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.308'. [ 88.538193][ T4578] FAULT_INJECTION: forcing a failure. [ 88.538193][ T4578] name failslab, interval 1, probability 0, space 0, times 0 [ 88.581319][ T4578] CPU: 1 UID: 0 PID: 4578 Comm: syz.0.317 Tainted: G W syzkaller #0 PREEMPT(full) [ 88.581351][ T4578] Tainted: [W]=WARN [ 88.581359][ T4578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.581373][ T4578] Call Trace: [ 88.581381][ T4578] [ 88.581435][ T4578] __dump_stack+0x1d/0x30 [ 88.581465][ T4578] dump_stack_lvl+0x95/0xd0 [ 88.581490][ T4578] dump_stack+0x15/0x1b [ 88.581515][ T4578] should_fail_ex+0x263/0x280 [ 88.581574][ T4578] should_failslab+0x8c/0xb0 [ 88.581596][ T4578] kmem_cache_alloc_noprof+0x66/0x400 [ 88.581620][ T4578] ? alloc_empty_file+0x76/0x200 [ 88.581727][ T4578] alloc_empty_file+0x76/0x200 [ 88.581751][ T4578] path_openat+0x65/0x2050 [ 88.581779][ T4578] ? perf_swevent_event+0x494/0x4d0 [ 88.581881][ T4578] ? _parse_integer_limit+0x170/0x190 [ 88.581905][ T4578] ? perf_bp_event+0x1b4/0x1f0 [ 88.581942][ T4578] do_file_open+0x16c/0x290 [ 88.581984][ T4578] do_sys_openat2+0x94/0x130 [ 88.582066][ T4578] __x64_sys_openat+0xf2/0x120 [ 88.582179][ T4578] x64_sys_call+0x1e39/0x3020 [ 88.582209][ T4578] do_syscall_64+0x12c/0x370 [ 88.582315][ T4578] ? arch_exit_to_user_mode_prepare+0xab/0xc0 [ 88.582354][ T4578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.582379][ T4578] RIP: 0033:0x7f2e1309d04e [ 88.582397][ T4578] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.582475][ T4578] RSP: 002b:00007f2e11b2eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 88.582499][ T4578] RAX: ffffffffffffffda RBX: 00007f2e11b2f6c0 RCX: 00007f2e1309d04e [ 88.582515][ T4578] RDX: 0000000000000002 RSI: 00007f2e11b2ef90 RDI: ffffffffffffff9c [ 88.582531][ T4578] RBP: 00007f2e11b2f090 R08: 0000000000000000 R09: 0000000000000000 [ 88.582546][ T4578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.582617][ T4578] R13: 00007f2e13356038 R14: 00007f2e13355fa0 R15: 00007ffc870745e8 [ 88.582635][ T4578] [ 88.820878][ T4582] loop4: detected capacity change from 0 to 1024 [ 88.827797][ T4582] EXT4-fs: Ignoring removed bh option [ 88.887822][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.903689][ T4582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.955170][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.966443][ T4588] loop0: detected capacity change from 0 to 2048 [ 89.080269][ T4600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 89.189723][ T4606] FAULT_INJECTION: forcing a failure. [ 89.189723][ T4606] name failslab, interval 1, probability 0, space 0, times 0 [ 89.212543][ T4608] syzkaller1: entered promiscuous mode [ 89.221264][ T4608] syzkaller1: entered allmulticast mode [ 89.241304][ T4607] 9pnet_fd: p9_fd_create_unix (4607): problem connecting socket: ./file0: -2 [ 89.250513][ T4606] CPU: 1 UID: 0 PID: 4606 Comm: syz.0.328 Tainted: G W syzkaller #0 PREEMPT(full) [ 89.250621][ T4606] Tainted: [W]=WARN [ 89.250627][ T4606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.250638][ T4606] Call Trace: [ 89.250645][ T4606] [ 89.250653][ T4606] __dump_stack+0x1d/0x30 [ 89.250683][ T4606] dump_stack_lvl+0x95/0xd0 [ 89.250751][ T4606] dump_stack+0x15/0x1b [ 89.250815][ T4606] should_fail_ex+0x263/0x280 [ 89.250847][ T4606] should_failslab+0x8c/0xb0 [ 89.250894][ T4606] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 89.250922][ T4606] ? __alloc_skb+0x2d6/0x690 [ 89.250956][ T4606] __alloc_skb+0x2d6/0x690 [ 89.250984][ T4606] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 89.251062][ T4606] ? __alloc_skb+0x200/0x690 [ 89.251101][ T4606] audit_log_start+0x3aa/0x730 [ 89.251124][ T4606] ? kstrtouint_from_user+0xa8/0xf0 [ 89.251186][ T4606] audit_seccomp+0x47/0x100 [ 89.251221][ T4606] ? __seccomp_filter+0x8db/0x1350 [ 89.251249][ T4606] __seccomp_filter+0x8ec/0x1350 [ 89.251277][ T4606] ? __rcu_read_unlock+0x4e/0x70 [ 89.251363][ T4606] ? __fget_files+0x184/0x1c0 [ 89.251386][ T4606] ? mutex_lock+0x57/0x90 [ 89.251485][ T4606] ? mutex_unlock+0x4e/0x90 [ 89.251505][ T4606] __secure_computing+0x81/0x150 [ 89.251529][ T4606] do_syscall_64+0xd3/0x370 [ 89.251562][ T4606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.251645][ T4606] RIP: 0033:0x7f2e130dc819 [ 89.251663][ T4606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.251684][ T4606] RSP: 002b:00007f2e11b2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000088 [ 89.251709][ T4606] RAX: ffffffffffffffda RBX: 00007f2e13355fa0 RCX: 00007f2e130dc819 [ 89.251724][ T4606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000800005 [ 89.251749][ T4606] RBP: 00007f2e11b2f090 R08: 0000000000000000 R09: 0000000000000000 [ 89.251761][ T4606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.251772][ T4606] R13: 00007f2e13356038 R14: 00007f2e13355fa0 R15: 00007ffc870745e8 [ 89.251790][ T4606] [ 89.535917][ T4614] loop0: detected capacity change from 0 to 1024 [ 89.577752][ T4614] loop0: detected capacity change from 0 to 1024 [ 89.597818][ T4614] EXT4-fs: test_dummy_encryption option not supported [ 89.659560][ T4617] netlink: 'syz.2.333': attribute type 15 has an invalid length. [ 89.764251][ T4622] loop2: detected capacity change from 0 to 1024 [ 89.809546][ T4622] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 89.830166][ T4625] loop0: detected capacity change from 0 to 512 [ 89.883044][ T4622] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 89.892295][ T4625] EXT4-fs (loop0): 1 orphan inode deleted [ 89.899063][ T4625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.911870][ T50] EXT4-fs error (device loop0): ext4_release_dquot:7062: comm kworker/u8:3: Failed to release dquot type 1 [ 89.924881][ T4625] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.944376][ T4622] EXT4-fs (loop2): orphan cleanup on readonly fs [ 89.980716][ T4622] EXT4-fs error (device loop2): __ext4_get_inode_loc:4797: comm syz.2.334: Invalid inode table block 0 in block_group 0 [ 90.035317][ T4622] loop2: lost filesystem error report for type 5 error -117 [ 90.035851][ T4622] EXT4-fs (loop2): Remounting filesystem read-only [ 90.043207][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 90.043228][ C0] EXT4-fs (loop2): initial error at time 1775007032: __ext4_get_inode_loc:4797 [ 90.043258][ C0] EXT4-fs (loop2): last error at time 1775007032: __ext4_get_inode_loc:4797 [ 90.091669][ T4632] loop4: detected capacity change from 0 to 512 [ 90.098912][ T4622] EXT4-fs (loop2): 1 truncate cleaned up [ 90.105943][ T4632] EXT4-fs (loop4): bad s_want_extra_isize: 1312 [ 90.114697][ T4622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.142441][ T4622] netlink: 20 bytes leftover after parsing attributes in process `syz.2.334'. [ 90.285294][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.360386][ T4640] netlink: 'syz.1.341': attribute type 2 has an invalid length. [ 91.368493][ T28] kauditd_printk_skb: 266 callbacks suppressed [ 91.368506][ T28] audit: type=1400 audit(1775007033.958:1364): avc: denied { allowed } for pid=4637 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 91.425894][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.617554][ T28] audit: type=1400 audit(1775007033.998:1365): avc: denied { create } for pid=4641 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 91.637655][ T28] audit: type=1400 audit(1775007033.998:1366): avc: denied { write } for pid=4641 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 91.712570][ T4646] : renamed from bond_slave_0 (while UP) [ 91.843118][ T4657] loop4: detected capacity change from 0 to 1024 [ 91.893960][ T28] audit: type=1400 audit(1775007034.488:1367): avc: denied { unlink } for pid=3309 comm="syz-executor" name="bus" dev="tmpfs" ino=475 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 91.978402][ T4650] loop0: detected capacity change from 0 to 512 [ 92.014087][ T4657] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 92.032354][ T4650] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.044454][ T4657] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 92.052996][ T4657] EXT4-fs (loop4): orphan cleanup on readonly fs [ 92.068649][ T4657] EXT4-fs error (device loop4): __ext4_get_inode_loc:4797: comm syz.4.348: Invalid inode table block 0 in block_group 0 [ 92.070486][ T4650] EXT4-fs (loop0): 1 truncate cleaned up [ 92.088022][ T4657] loop4: lost filesystem error report for type 5 error -117 [ 92.097917][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 92.111706][ C0] EXT4-fs (loop4): initial error at time 1775007034: __ext4_get_inode_loc:4797 [ 92.114810][ T4650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.120705][ C0] EXT4-fs (loop4): last error at time 1775007034: __ext4_get_inode_loc:4797 [ 92.172178][ T4666] xfrm1: entered allmulticast mode [ 92.225446][ T4657] EXT4-fs (loop4): Remounting filesystem read-only [ 92.346528][ T4657] Quota error (device loop4): write_blk: dquota write failed [ 92.436226][ T4657] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 92.526559][ T4657] EXT4-fs (loop4): 1 truncate cleaned up [ 92.615974][ T28] audit: type=1326 audit(1775007035.208:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86705ec819 code=0x7ffc0000 [ 92.737636][ T4669] loop3: detected capacity change from 0 to 1024 [ 92.828725][ T28] audit: type=1326 audit(1775007035.238:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86705ec819 code=0x7ffc0000 [ 92.865053][ T4669] EXT4-fs: test_dummy_encryption option not supported [ 92.940005][ T28] audit: type=1326 audit(1775007035.238:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86705ec819 code=0x7ffc0000 [ 92.963703][ T28] audit: type=1326 audit(1775007035.238:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86705ec819 code=0x7ffc0000 [ 93.104216][ T4657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.827022][ T4672] loop3: detected capacity change from 0 to 512 [ 93.913282][ T4657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.348'. [ 94.236052][ T4672] EXT4-fs (loop3): 1 orphan inode deleted [ 94.254537][ T4672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.938793][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.061312][ T4672] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.160829][ T96] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:5: Failed to release dquot type 1 [ 96.191248][ T4682] loop4: detected capacity change from 0 to 1024 [ 96.953091][ T3405] IPVS: starting estimator thread 0... [ 97.249073][ T4685] IPVS: using max 2496 ests per chain, 124800 per kthread [ 97.262156][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.996246][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.404833][ T4692] loop4: detected capacity change from 0 to 512 [ 99.594604][ T4697] netlink: 'syz.1.357': attribute type 2 has an invalid length. [ 99.653065][ T4692] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4. [ 99.864559][ T28] kauditd_printk_skb: 122 callbacks suppressed [ 99.864575][ T28] audit: type=1400 audit(1775007042.458:1493): avc: denied { setopt } for pid=4705 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.067668][ T4700] loop3: detected capacity change from 0 to 128 [ 100.164654][ T4708] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.358'. [ 100.209516][ T4708] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.358'. [ 100.247766][ T4710] vhci_hcd vhci_hcd.4: invalid port number 254 [ 100.279275][ T4710] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 100.673866][ T4716] loop0: detected capacity change from 0 to 1024 [ 100.898265][ T4716] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 100.998367][ T4716] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 101.062545][ T4716] EXT4-fs (loop0): orphan cleanup on readonly fs [ 101.098366][ T4716] EXT4-fs error (device loop0): __ext4_get_inode_loc:4797: comm syz.0.363: Invalid inode table block 0 in block_group 0 [ 101.595310][ T4716] loop0: lost filesystem error report for type 5 error -117 [ 101.598110][ T4716] EXT4-fs (loop0): Remounting filesystem read-only [ 101.612113][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 101.612143][ C1] EXT4-fs (loop0): initial error at time 1775007044: __ext4_get_inode_loc:4797 [ 101.612167][ C1] EXT4-fs (loop0): last error at time 1775007044: __ext4_get_inode_loc:4797 [ 102.329388][ T4716] Quota error (device loop0): write_blk: dquota write failed [ 102.336836][ T4716] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 103.384577][ T4716] EXT4-fs (loop0): 1 truncate cleaned up [ 103.399666][ T4716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.000472][ T4716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.363'. [ 104.032681][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.313303][ T4736] loop2: detected capacity change from 0 to 1024 [ 104.360166][ T4736] ext3: Bad value for 'stripe' [ 104.477356][ T4739] loop4: detected capacity change from 0 to 128 [ 104.486498][ T4739] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.368'. [ 104.495615][ T4739] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.368'. [ 104.512874][ T4739] vhci_hcd vhci_hcd.4: invalid port number 254 [ 104.519105][ T4739] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 104.648141][ T4744] xfrm1: entered allmulticast mode [ 104.727115][ T4746] loop3: detected capacity change from 0 to 512 [ 104.802091][ T4746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.866048][ T4746] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.129845][ T4757] loop2: detected capacity change from 0 to 512 [ 105.137038][ T4757] EXT4-fs: test_dummy_encryption option not supported [ 105.146928][ T4757] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 105.530729][ T4759] loop4: detected capacity change from 0 to 1024 [ 105.578017][ T4759] loop4: detected capacity change from 0 to 1024 [ 105.603642][ T4759] EXT4-fs: test_dummy_encryption option not supported [ 106.335738][ T4764] loop4: detected capacity change from 0 to 512 [ 106.382444][ T4764] EXT4-fs (loop4): 1 orphan inode deleted [ 106.389040][ T4764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.405637][ T30] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 106.417676][ T4764] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.587282][ T4769] loop0: detected capacity change from 0 to 1024 [ 106.594203][ T30] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:1: Failed to release dquot type 1 [ 106.634110][ T4769] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.649813][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.689108][ T4769] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 106.717501][ T4769] EXT4-fs (loop0): orphan cleanup on readonly fs [ 106.738128][ T4769] EXT4-fs error (device loop0): __ext4_get_inode_loc:4797: comm syz.0.375: Invalid inode table block 0 in block_group 0 [ 106.767951][ T4769] loop0: lost filesystem error report for type 5 error -117 [ 106.770983][ T4769] EXT4-fs (loop0): Remounting filesystem read-only [ 106.778402][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 106.778426][ C0] EXT4-fs (loop0): initial error at time 1775007049: __ext4_get_inode_loc:4797 [ 106.778451][ C0] EXT4-fs (loop0): last error at time 1775007049: __ext4_get_inode_loc:4797 [ 106.877935][ T4769] Quota error (device loop0): write_blk: dquota write failed [ 106.905603][ T4769] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 106.935905][ T4769] EXT4-fs (loop0): 1 truncate cleaned up [ 106.956428][ T4769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.999391][ T4769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.375'. [ 107.050605][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.262039][ T28] audit: type=1326 audit(1775007049.858:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.1.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86705ec819 code=0x7ffc0000 [ 107.337312][ T28] audit: type=1326 audit(1775007049.888:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.1.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86705ec819 code=0x7ffc0000 [ 107.405913][ T28] audit: type=1326 audit(1775007049.888:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.1.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86705ec819 code=0x7ffc0000 [ 107.452659][ T28] audit: type=1326 audit(1775007049.858:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.1.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86705ec819 code=0x7ffc0000 [ 107.782062][ T28] audit: type=1326 audit(1775007049.888:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.1.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86705ec819 code=0x7ffc0000 [ 108.450358][ T4784] loop3: detected capacity change from 0 to 1024 [ 108.919600][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.934800][ T28] audit: type=1326 audit(1775007049.888:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.1.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f86705ec819 code=0x7ffc0000 [ 109.260108][ T28] audit: type=1326 audit(1775007049.888:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.1.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86705ec819 code=0x7ffc0000 [ 109.502543][ T4790] loop4: detected capacity change from 0 to 512 [ 109.519525][ T4791] loop3: detected capacity change from 0 to 512 [ 109.560822][ T4790] EXT4-fs: Ignoring removed bh option [ 109.598890][ T4791] EXT4-fs (loop3): 1 orphan inode deleted [ 109.605058][ T4791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.617803][ T4791] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.630054][ T4171] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:9: Failed to release dquot type 1 [ 109.663333][ T4790] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 109.707087][ T4790] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.380: invalid block [ 109.759492][ T4790] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 109.759827][ T4790] EXT4-fs (loop4): 1 truncate cleaned up [ 109.769209][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 109.769228][ C0] EXT4-fs (loop4): initial error at time 1775007052: ext4_get_branch:178: inode 13: block 1024 [ 109.769283][ C0] EXT4-fs (loop4): last error at time 1775007052: ext4_get_branch:178: inode 13: block 1024 [ 109.877740][ T4800] loop0: detected capacity change from 0 to 512 [ 109.923156][ T4800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.962193][ T4800] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.973548][ T4790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.035293][ T4790] EXT4-fs (loop4): shut down requested (0) [ 110.241414][ T4806] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.384'. [ 110.250718][ T4806] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.384'. [ 110.260125][ T4806] vhci_hcd vhci_hcd.4: invalid port number 254 [ 110.266317][ T4806] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 110.478068][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.597142][ T4813] netlink: 'syz.4.385': attribute type 1 has an invalid length. [ 110.604855][ T4813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.385'. [ 110.619140][ T4813] loop4: detected capacity change from 0 to 512 [ 110.640199][ T4813] EXT4-fs (loop4): 1 orphan inode deleted [ 110.646740][ T4813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.743513][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.421704][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.475813][ T4823] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.388'. [ 111.485092][ T4823] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.388'. [ 111.494894][ T4823] vhci_hcd vhci_hcd.4: invalid port number 254 [ 111.501100][ T4823] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 111.703949][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 111.703968][ T28] audit: type=1326 audit(1775007054.298:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4824 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b5fcc819 code=0x7ffc0000 [ 111.774489][ T28] audit: type=1326 audit(1775007054.338:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4824 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b5fcc819 code=0x7ffc0000 [ 111.822669][ T28] audit: type=1326 audit(1775007054.338:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4824 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b5fcc819 code=0x7ffc0000 [ 111.871437][ T28] audit: type=1326 audit(1775007054.338:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4824 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b5fcc819 code=0x7ffc0000 [ 111.919927][ T28] audit: type=1326 audit(1775007054.338:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4824 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa8b5fcc819 code=0x7ffc0000 [ 111.970697][ T28] audit: type=1326 audit(1775007054.348:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4824 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b5fcc819 code=0x7ffc0000 [ 111.997552][ T4830] loop0: detected capacity change from 0 to 512 [ 112.024628][ T28] audit: type=1326 audit(1775007054.358:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4824 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b5fcc819 code=0x7ffc0000 [ 112.053298][ T4830] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.083786][ T28] audit: type=1326 audit(1775007054.358:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4824 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b5fcc819 code=0x7ffc0000 [ 112.111665][ T28] audit: type=1326 audit(1775007054.348:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4824 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b5fcc819 code=0x7ffc0000 [ 112.135759][ T28] audit: type=1326 audit(1775007054.358:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4824 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8b5fcc819 code=0x7ffc0000 [ 112.165096][ T4830] EXT4-fs (loop0): 1 truncate cleaned up [ 112.186064][ T4830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.442401][ T4841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.396'. [ 112.517805][ T4845] netlink: 'syz.1.395': attribute type 2 has an invalid length. [ 112.613091][ T4848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.396'. [ 112.692246][ T4841] netlink: 76 bytes leftover after parsing attributes in process `syz.4.396'. [ 112.746201][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.039551][ T4852] loop0: detected capacity change from 0 to 512 [ 113.049899][ T4852] EXT4-fs: Ignoring removed bh option [ 113.062967][ T4852] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 113.071315][ T4852] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 1024: comm syz.0.397: invalid block [ 113.083326][ T4852] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 113.084040][ T4852] EXT4-fs (loop0): 1 truncate cleaned up [ 113.093196][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 113.093220][ C1] EXT4-fs (loop0): initial error at time 1775007055: ext4_get_branch:178: inode 13: block 1024 [ 113.093270][ C1] EXT4-fs (loop0): last error at time 1775007055: ext4_get_branch:178: inode 13: block 1024 [ 113.093356][ T4854] loop4: detected capacity change from 0 to 128 [ 113.099882][ T4852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.191154][ T4854] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.398'. [ 113.200318][ T4854] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.398'. [ 113.214147][ T4856] loop2: detected capacity change from 0 to 128 [ 113.220976][ T4854] vhci_hcd vhci_hcd.4: invalid port number 254 [ 113.227400][ T4854] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 113.243892][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.266888][ T4852] EXT4-fs (loop0): shut down requested (0) [ 113.276007][ T3314] ================================================================== [ 113.284126][ T3314] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 113.291873][ T3314] [ 113.294209][ T3314] read-write to 0xffff888237c27760 of 8 bytes by task 4856 on cpu 0: [ 113.302288][ T3314] find_get_block_common+0x459/0x8a0 [ 113.307771][ T3314] bdev_getblk+0x4d/0x3f0 [ 113.312137][ T3314] __bread_gfp+0x51/0x240 [ 113.316498][ T3314] fat_ent_bread+0xc9/0x1a0 [ 113.321024][ T3314] fat_ent_read+0x3b3/0x5c0 [ 113.325535][ T3314] fat_get_cluster+0x4de/0x820 [ 113.330307][ T3314] fat_truncate_blocks+0x26f/0x5a0 [ 113.335439][ T3314] fat_write_end+0xba/0x160 [ 113.339955][ T3314] generic_perform_write+0x311/0x490 [ 113.345256][ T3314] __generic_file_write_iter+0x9e/0x120 [ 113.350821][ T3314] generic_file_write_iter+0x8d/0x310 [ 113.356203][ T3314] vfs_write+0x5a6/0x9f0 [ 113.360456][ T3314] ksys_write+0xdc/0x1a0 [ 113.364791][ T3314] __x64_sys_write+0x40/0x50 [ 113.369382][ T3314] x64_sys_call+0x27e1/0x3020 [ 113.374069][ T3314] do_syscall_64+0x12c/0x370 [ 113.378683][ T3314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.384580][ T3314] [ 113.386901][ T3314] read to 0xffff888237c27760 of 8 bytes by task 3314 on cpu 1: [ 113.394441][ T3314] has_bh_in_lru+0x35/0x1f0 [ 113.398951][ T3314] __lru_add_drain_all+0x287/0x450 [ 113.404074][ T3314] lru_add_drain_all+0x10/0x20 [ 113.408845][ T3314] invalidate_bdev+0x47/0x70 [ 113.413440][ T3314] ext4_put_super+0x610/0x7b0 [ 113.418122][ T3314] generic_shutdown_super+0xee/0x220 [ 113.423444][ T3314] kill_block_super+0x2a/0x70 [ 113.428140][ T3314] ext4_kill_sb+0x42/0x80 [ 113.432495][ T3314] deactivate_locked_super+0x75/0x1c0 [ 113.437894][ T3314] deactivate_super+0x97/0xa0 [ 113.442590][ T3314] cleanup_mnt+0x2bb/0x330 [ 113.447013][ T3314] __cleanup_mnt+0x19/0x20 [ 113.451485][ T3314] task_work_run+0x130/0x1a0 [ 113.456082][ T3314] exit_to_user_mode_loop+0x1f4/0x6f0 [ 113.461470][ T3314] do_syscall_64+0x249/0x370 [ 113.466154][ T3314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.472059][ T3314] [ 113.474386][ T3314] value changed: 0x0000000000000000 -> 0xffff88811ada3478 [ 113.481596][ T3314] [ 113.483919][ T3314] Reported by Kernel Concurrency Sanitizer on: [ 113.490069][ T3314] CPU: 1 UID: 0 PID: 3314 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 113.501184][ T3314] Tainted: [W]=WARN [ 113.504982][ T3314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.515041][ T3314] ================================================================== [ 113.628138][ T4866] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 113.635911][ T4866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'. [ 113.651334][ T4866] loop3: detected capacity change from 0 to 512 [ 113.672102][ T4866] EXT4-fs (loop3): 1 orphan inode deleted [ 113.678195][ T4866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.766231][ T4171] kworker/u8:9: attempt to access beyond end of device [ 113.766231][ T4171] loop2: rw=1, sector=145, nr_sectors = 16 limit=128 [ 113.780713][ T4171] kworker/u8:9: attempt to access beyond end of device [ 113.780713][ T4171] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 113.794410][ T4171] kworker/u8:9: attempt to access beyond end of device [ 113.794410][ T4171] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 113.808067][ T4171] kworker/u8:9: attempt to access beyond end of device [ 113.808067][ T4171] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 113.821511][ T4171] kworker/u8:9: attempt to access beyond end of device [ 113.821511][ T4171] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 113.835092][ T4171] kworker/u8:9: attempt to access beyond end of device [ 113.835092][ T4171] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 113.848461][ T4171] kworker/u8:9: attempt to access beyond end of device [ 113.848461][ T4171] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 113.861919][ T4171] kworker/u8:9: attempt to access beyond end of device [ 113.861919][ T4171] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 113.875310][ T4171] kworker/u8:9: attempt to access beyond end of device [ 113.875310][ T4171] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 113.888699][ T4171] kworker/u8:9: attempt to access beyond end of device [ 113.888699][ T4171] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 113.949665][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.401058][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.