last executing test programs: 5.679312444s ago: executing program 3 (id=653): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000005c0)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000600)={0xa, 0xe22}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9}, 0x12004, 0xff, 0x0, 0x9, 0x800000, 0x9, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000740)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000940)={'bridge_slave_0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000cc0)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="000000000000000034001a800600000002000044aaa50c802400018008000100010000000800020000000000080003000000000008000400f92eec117b3e9b5132e3c2e55be6dc470de2ce867a3c7462995d81edaaa73e8b84f4c472157ed745e37386d9e0ed7bc1d6d814a7e11135c99a55fbccf4df8561b0fc7679bd81aabda1a9a94bb1e4a5a82d37a746007cc6fcec034fcd68581fe6d1ac1b5292b2ecadefc8d02d86eefbd4d3581decff2b293de80b1a5f7f37dac207156ba84f38d9318d17b23262a6433fbdf3452dc38865c2a9", @ANYRESHEX=0x0], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000000100)={0xffff, 0xbf0f, 0x2}) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000a80)=0x9, 0x4) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000000ac0), 0x4) bind$inet6(r2, &(0x7f0000000b00)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000b40)=[{&(0x7f0000000b80)="580000001400add436323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000fffffffffffffff9ffe7ee00000000000000000200000000", 0x58}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000c80)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 4.196502205s ago: executing program 0 (id=655): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0xff90, &(0x7f0000000d40)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r0, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005e000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000dc0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.14256022s ago: executing program 3 (id=657): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x10c100, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000080)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)={r3, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000200)={r3, 0x2}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000340)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000003c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) 3.953543479s ago: executing program 0 (id=658): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) read(r0, &(0x7f0000000b40)=""/169, 0xa9) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x112013, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, 0x0, 0x17f) mount(0x0, &(0x7f0000000ac0)='./debug\x00', &(0x7f0000000b00)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) readv(r2, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000c40)='.\x00', 0x40000, 0x2) fcntl$notify(r3, 0x402, 0x8000000e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x40000000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000cc0)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000034) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000d00)={0x1, &(0x7f0000000d40)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 3.856136429s ago: executing program 1 (id=661): perf_event_open(&(0x7f0000000dc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x11, 0x2, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001f00), 0x4) sendmsg$kcm(r0, &(0x7f0000001f40)={&(0x7f0000001f80)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000002000)=[{&(0x7f0000002040)}, {&(0x7f0000002140)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933", 0xcf}, {0x0}, {0x0}], 0x4}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x6d}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x4880}, 0x2404c810) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0xff, 0x7, 0xb, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8, 0x81, 0x101}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0x19) ioctl$OCFS2_IOC_UNRESVSP64(r1, 0x4030582b, &(0x7f0000000b40)={0x2, 0x1, 0x3, 0x4, 0x401, 0x1000}) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000240)="cb", 0x1}, {&(0x7f0000000280)="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", 0x13d}, {&(0x7f00000003c0)="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", 0x6c3}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x6, &(0x7f0000000ac0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r3, @ANYRESDEC=r3, @ANYRESOCT, @ANYRES32=r4], &(0x7f00000027c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000002800)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 3.825078973s ago: executing program 1 (id=663): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc3, 0x4, @perf_bp={0x0, 0x6}, 0x200, 0x0, 0xfffffffd, 0x6, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mknod(&(0x7f00000012c0)='./proc/thread-self/fail-nth\x00', 0x8000, 0x2) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000014c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040054) openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff7ffc}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="14"], &(0x7f00000002c0), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000300)=ANY=[], 0x200a00) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x27, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4810, 0xd, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0x0, 0xb007}, 0x4) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000001100)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001140)={r6, 0x18000000000002a0, 0xfe, 0x11, &(0x7f00000011c0)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f00000012c0), &(0x7f0000001300)}, 0x2a) sendmsg$nl_xfrm(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe88fffa000000000000000000000001aca80c0000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a00100001"], 0xc4}}, 0x0) socket$kcm(0x10, 0x2, 0x4) r7 = io_uring_setup(0x8, &(0x7f0000000040)={0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f00000000c0)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) 2.021591015s ago: executing program 4 (id=666): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000080), 0x0, 0x473, &(0x7f0000000580)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) clock_nanosleep(0x9, 0x0, &(0x7f0000000440)={0x0, 0x3938700}, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x1018e58, &(0x7f00000003c0)={[{@nodioread_nolock}, {@noblock_validity}, {@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@nodiscard}, {@debug}]}, 0x4, 0x61f, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) symlink(&(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r2, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x15}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x200040d1) 2.019837125s ago: executing program 0 (id=667): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000005c0)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000600)={0xa, 0xe22}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9}, 0x12004, 0xff, 0x0, 0x9, 0x800000, 0x9, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000740)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000940)={'bridge_slave_0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000cc0)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="000000000000000034001a800600000002000044aaa50c802400018008000100010000000800020000000000080003000000000008000400f92eec117b3e9b5132e3c2e55be6dc470de2ce867a3c7462995d81edaaa73e8b84f4c472157ed745e37386d9e0ed7bc1d6d814a7e11135c99a55fbccf4df8561b0fc7679bd81aabda1a9a94bb1e4a5a82d37a746007cc6fcec034fcd68581fe6d1ac1b5292b2ecadefc8d02d86eefbd4d3581decff2b293de80b1a5f7f37dac207156ba84f38d9318d17b23262a6433fbdf3452dc38865c2a9", @ANYRESHEX=0x0], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000000100)={0xffff, 0xbf0f, 0x2}) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000a80)=0x9, 0x4) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000000ac0), 0x4) bind$inet6(r2, &(0x7f0000000b00)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000b40)=[{&(0x7f0000000b80)="580000001400add436323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000fffffffffffffff9ffe7ee00000000000000000200000000", 0x58}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000c80)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 1.927506545s ago: executing program 3 (id=668): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000240), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r1, 0x1f, 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x20e8, &(0x7f0000000200)={0x0, 0x1682, 0x800, 0x8, 0xb2}, 0x0, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000340)={0x28, 0x0, 0x2710, @local}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000380)=0x33, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x90) listen(r5, 0x809) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000540)={0x28, 0x0, 0x2710}, 0x10) r8 = accept4(r5, 0x0, 0x0, 0x0) sendto(r8, &(0x7f0000000580), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r7, &(0x7f00000005c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=@base={0xa, 0x1, 0x200, 0x7f}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x18}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x6}, @IFLA_IPTUN_PMTUDISC={0x24, 0xa, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 1.911511506s ago: executing program 2 (id=669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0x7ff, 0x6, 0x9, 0x2}, 0x8) sendto$inet6(r2, &(0x7f0000000080)="9f", 0x34000, 0x44004, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfa, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01fffff0000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004"], 0x38}}, 0x0) 1.864004901s ago: executing program 0 (id=670): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x26020480) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc3, 0x4, @perf_bp={0x0, 0x6}, 0x1020, 0x0, 0xfffffffd, 0x6, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./mnt\x00', 0x840, &(0x7f0000000200), 0x1, 0x242, &(0x7f0000000540)="$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") ioctl$FITRIM(0xffffffffffffffff, 0x40e8662e, &(0x7f00000007c0)={0xc3e4, 0xd000000, 0x7}) bind$netlink(r1, &(0x7f0000000800)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000840), 0x4) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x0, &(0x7f0000000900), 0x1, 0x490, &(0x7f0000000f40)="$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") r2 = open(&(0x7f0000001400)='.\x00', 0x0, 0x0) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001500)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x40) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000202, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000001540)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001600)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001640), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010006000000000000000100000001803bebff000001410000001c0017000000090000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) perf_event_open(&(0x7f0000001780)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20061, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x10000, 0x100, 0x6}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000ffff25bdc14dfcdbdf2500e30000840866e2dafdff", @ANYRES32=0x0, @ANYBLOB="75c00200aa7c03002c00128009000100626f6e64000000001c000280050015000100000005000100040000000500160002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) mkdir(&(0x7f0000001900)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace/events/mac80211/enable\x00', &(0x7f0000001980)='tracefs\x00', 0x800000, 0x0) r6 = openat(0xffffff9c, &(0x7f00000019c0)='./trace/events/mac80211/enable\x00', 0x40000, 0x1) readv(r6, &(0x7f0000001a00)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1) socket$nl_route(0x10, 0x3, 0x0) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000002a40), &(0x7f0000002a80)=0x4) 1.852793352s ago: executing program 4 (id=671): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2001402, &(0x7f0000000480)={[{}, {@dax_always}]}, 0x82, 0x499, &(0x7f00000019c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x28ed80, 0x8) close(0x3) mlockall(0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}, 0x1, 0x0, 0x0, 0xca1de99cf558760b}, 0x20004000) r2 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file1\x00', 0x101042, 0x15) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x804013, &(0x7f0000000640), 0x0, 0x636, &(0x7f00000012c0)="$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") r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r0, r2}, 0xc) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000022", @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf25050000000800090002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 1.836240054s ago: executing program 1 (id=672): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f0000000240), 0x1, 0x50a, &(0x7f00000006c0)="$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") ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000c00)={0x7, 0x4, 0x5, 0x80}) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x24008014) sched_setscheduler(0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=@newtaction={0x14, 0x30, 0x51b}, 0x14}, 0x1, 0x0, 0x0, 0x2040}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x4b72, &(0x7f0000000680)={0x5, 0x1ff, 0x10001, 0x20, 0x9, "16ee0500000000000000c000"}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) (fail_nth: 5) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getpeername$netlink(r2, &(0x7f00000000c0), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write$P9_RCLUNK(r4, &(0x7f0000000080)={0x7, 0x79, 0x4}, 0x7) 1.161190293s ago: executing program 2 (id=673): perf_event_open(&(0x7f0000000dc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x11, 0x2, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001f00), 0x4) sendmsg$kcm(r0, &(0x7f0000001f40)={&(0x7f0000001f80)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000002000)=[{&(0x7f0000002040)="62042720920101000001bf2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b43", 0x6d}, {&(0x7f0000002140)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933", 0xcf}, {0x0}, {0x0}], 0x4}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x6d}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x4880}, 0x2404c810) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0xff, 0x7, 0xb, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8, 0x81, 0x101}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0x19) ioctl$OCFS2_IOC_UNRESVSP64(r1, 0x4030582b, &(0x7f0000000b40)={0x2, 0x1, 0x3, 0x4, 0x401, 0x1000}) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000240)="cb", 0x1}, {&(0x7f0000000280)="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", 0x13d}, {&(0x7f00000003c0)="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", 0x6c3}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x6, &(0x7f0000000ac0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r3, @ANYRESDEC=r3, @ANYRESOCT, @ANYRES32=r4], &(0x7f00000027c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000002800)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 1.156801253s ago: executing program 0 (id=674): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x40400) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100802054000"], 0x1c}}, 0x4800) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000980)) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x8000) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x88000) r2 = fspick(0xffffffffffffffff, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x70) r4 = socket(0x2b, 0x5, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r4) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="01800000", @ANYRES16=0x0, @ANYBLOB="0e032dbd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x481}, 0x8000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r8) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000380), r8) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x2c, r9, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x44) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000009c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050069c344a086177e0dfcb564a029e5aa3629bba22b7be9671b60897e530114d6be3953f422322047f14d9c181b826bf2ff3af1a2ba05c20db0b11b02b3a84036682d40a9d0493f03c029f88b4b10f175612ac4611aefa64eebbd2ae66c584fef4aaf028c36918bbdde8ab5a5d9ed3d7c03ec13eccc0b6600d6c51f8f5b8964d79f5a8ad5c8a99117d69a9fc8c76d3743157b73d34282a86e21ec72914d810c627face58a9c618d68088da08d666d80c944ee59fb74e94db2c3a36532bc304bb29933fd4071e0a319032d24c0fdad2d620c93"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x78, r10, 0x5, 0x100, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @broadcast, @from_mac=@broadcast}, 0x0, @random=0xc, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x4}, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x1}}, @void}}], @chandef_params, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x16}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0x78}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x59}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x803c0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000080)={0x6, 0x0, {0x0, 0x2, 0xb, 0x2, 0xb}}) 1.080005101s ago: executing program 1 (id=675): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x45) pipe(&(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x8140) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x8922, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='numa_maps\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1, 0x200000, 0x9) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000001ac0)}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001b40)="748c", 0x2}], 0x1}}], 0x2, 0x4044805) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x11, 0x4, &(0x7f0000001c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000}, [@jmp={0x5, 0x1, 0x6, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r2) pivot_root(&(0x7f0000001c80)='.\x00', &(0x7f0000001cc0)='.\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x1, 0x4, &(0x7f0000001e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000001e80)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000001ec0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0x88, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_create1(0x80000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001f40)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x8, 0x9}, 0x90) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000002000)="76657468303a30000000000000000000020000000a") sendmsg$nl_xfrm(r3, 0x0, 0x2014) 1.057840713s ago: executing program 3 (id=676): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x14c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x2000000000000216, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xacf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) setns(0xc9, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 939.661295ms ago: executing program 2 (id=677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x24000840) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x2000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0xffffffffdfffffff, 0xa) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x4001}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'netpci0\x00', {0x2, 0x1000, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x1, 0x100, 0x4000000}, 0x10) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001e008d2affff0000fddbdf250a000000", @ANYRES32=0x0, @ANYBLOB="00000080"], 0x30}}, 0x20000800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff9318d97434ea86dd600a8435001406fffe8000000000000000000000000000bbfe800000000000000000000000002f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c20000907803ff"], 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/3, 0x3}], 0x1, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bind(0xffffffffffffffff, &(0x7f0000000140)=@in={0x2, 0x3210, @rand_addr=0xac140201}, 0x80) listen(0xffffffffffffffff, 0x5) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500060008"], 0x4a) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000003380), 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000003500)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x5, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 874.738982ms ago: executing program 0 (id=678): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) read(r0, &(0x7f0000000b40)=""/169, 0xa9) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x112013, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./debug\x00', 0x17f) mount(0x0, 0x0, &(0x7f0000000b00)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) readv(r2, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000c40)='.\x00', 0x40000, 0x2) fcntl$notify(r3, 0x402, 0x8000000e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x40000000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000cc0)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000034) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000d00)={0x1, &(0x7f0000000d40)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 427.729837ms ago: executing program 4 (id=679): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x9, 0x710dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x13}, 0x4040, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000000002b400000000000000001800"/32], &(0x7f00000008c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) pwritev2(r2, 0x0, 0x0, 0xe7b, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e0028000280240005006e14c202ccb29c00b320a10700000600000000000000000000001a125d4a997d", 0x60) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000100)={0x1, &(0x7f0000000900)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mount(0x0, 0x0, &(0x7f0000000980)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000a00)='./tracefs/instances/foo\x00', 0x200) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x25, 0x8, @void}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 397.19131ms ago: executing program 1 (id=680): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000005c0)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000600)={0xa, 0xe22}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9}, 0x12004, 0xff, 0x0, 0x9, 0x800000, 0x9, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000740)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000940)={'bridge_slave_0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000cc0)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="000000000000000034001a800600000002000044aaa50c802400018008000100010000000800020000000000080003000000000008000400f92eec117b3e9b5132e3c2e55be6dc470de2ce867a3c7462995d81edaaa73e8b84f4c472157ed745e37386d9e0ed7bc1d6d814a7e11135c99a55fbccf4df8561b0fc7679bd81aabda1a9a94bb1e4a5a82d37a746007cc6fcec034fcd68581fe6d1ac1b5292b2ecadefc8d02d86eefbd4d3581decff2b293de80b1a5f7f37dac207156ba84f38d9318d17b23262a6433fbdf3452dc38865c2a9", @ANYRESHEX=0x0], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000000100)={0xffff, 0xbf0f, 0x2}) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000a80)=0x9, 0x4) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000000ac0), 0x4) bind$inet6(r2, &(0x7f0000000b00)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000b40)=[{&(0x7f0000000b80)="580000001400add436323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000fffffffffffffff9ffe7ee00000000000000000200000000", 0x58}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000c80)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 395.25016ms ago: executing program 2 (id=681): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffffd}, 0x94) r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x83) fchdir(r2) chdir(&(0x7f0000000040)='./sys\x00') mknod(&(0x7f0000000200)='./file0\x00', 0x8001420, 0x4) open(&(0x7f0000000340)='./file0\x00', 0x80140, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x1fa) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000240), 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$key(r3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file2\x00', 0xc4042, 0x1ff) sendfile(r7, r6, 0x0, 0xfffa83) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 373.775413ms ago: executing program 4 (id=682): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x3, 0x0, {0x1e}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_STATS_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000200100000c000280070002006c6f00"], 0x40}}, 0x4000) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4001094) close(0xffffffffffffffff) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 332.404566ms ago: executing program 1 (id=683): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc3, 0x4, @perf_bp={0x0, 0x6}, 0x200, 0x0, 0xfffffffd, 0x6, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mknod(0x0, 0x8000, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14"], 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x200a00) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000001100)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001140)={r3, 0x18000000000002a0, 0xfe, 0x11, &(0x7f00000011c0)="b9ff03316844268cb89e14f0080047e0ffff00124000638477fbac14fe16e0fd030a07080403fe80000080ff6558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f00000012c0), &(0x7f0000001300)}, 0x2a) sendmsg$nl_xfrm(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe88fffa000000000000000000000001aca80c0000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a00100001"], 0xc4}}, 0x0) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f00000000c0)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) 230.527447ms ago: executing program 2 (id=684): setresuid(0x0, 0xee00, 0x0) r0 = socket$inet6(0xa, 0x2, 0x10001) fsetxattr$security_ima(r0, &(0x7f0000000100), 0x0, 0x0, 0x2) 227.348147ms ago: executing program 2 (id=685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x24000840) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x2000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r1, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0xffffffffdfffffff, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x4001}) socket$inet(0x2, 0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x1, 0x100, 0x4000000}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff9318d97434ea86dd600a8435001406fffe8000000000000000000000000000bbfe800000000000000000000000002f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c20000907803ff"], 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/3, 0x3}], 0x1, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r5, &(0x7f0000000140)=@in={0x2, 0x3210, @rand_addr=0xac140201}, 0x80) listen(r5, 0x5) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500060008"], 0x4a) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000003380), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 147.653615ms ago: executing program 3 (id=686): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x45) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) mount(0x0, &(0x7f00000005c0)='./proc\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000900de9fe5a10000ffffffffffffffff080000000000000000000000000600001000000000000000000a000000000000000000000080400003000000000000080000000000000000000100000000000044000500fc020000000000000000000000000000000004d36c00000002000000ff0100"/159], 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0xa00, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="a0000000210001005c000000fefffffffe8000000000000000000000000000aa00000000000000000000000000000001fffe0000000200000a00e0805c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020900000000000050001100fc020000000000000010000000000000ff010000001f00000000000000000001ac141426000000000000000000000000fe8000000000000000000000000000bb6c011b00000000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0) 96.51625ms ago: executing program 3 (id=687): perf_event_open(&(0x7f0000000dc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x11, 0x2, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001f00), 0x4) sendmsg$kcm(r0, &(0x7f0000001f40)={&(0x7f0000001f80)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000002000)=[{&(0x7f0000002040)="62042720920101000001bf2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b43", 0x6d}, {&(0x7f0000002140)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933", 0xcf}, {0x0}, {0x0}], 0x4}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x6d}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x4880}, 0x2404c810) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0xff, 0x7, 0xb, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8, 0x81, 0x101}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0x19) ioctl$OCFS2_IOC_UNRESVSP64(r1, 0x4030582b, &(0x7f0000000b40)={0x2, 0x1, 0x3, 0x4, 0x401, 0x1000}) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000240)="cb", 0x1}, {&(0x7f0000000280)="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", 0x13d}, {&(0x7f00000003c0)="2f71d662b24d62265d93f5b18ead37606ac24a1f6d47179c6509c08520ae213ea20a949a39fc5697a91f594322450b7cfc5cff28efb1e4dac3a19b7dfc69fc8956ae90db93d50c48ca464bbed77ecf1e6505f6590bbd9b52c1f9dce85fc4ecfe03604f9e25022d466582c5448d9e3339a3efce3e46e7537b19dca40b6158d49446fef849b7ad4abbceb4a0c71fb5c3dc0ff39604de8f6d11c88639b5c9b855b84d54257edef6f41d7a089000a29b3fa7b4e72407aeed1cc9694c321419e668a41dd1294d02f5c39c318a474fa0dfe4041ef6e0e15f5a5fc8e399817004beb86cef6108c7929197585d269c3b5f28a2574c233e30b415f53978ef1b3ba5809a8a67dd45d9d13488d7504d7e8534943d76ce03cef816b9f6b08d7b908fafc2f955ad9f9c38ed29178bd21f039ac1380043f5fb67693959c91a58369aee1216e7c30dc0eae6e4d1620bc41f2c458ae39cc48a89b8890a5bfc32f4ac80fcd51a3fee07a02c014a88468f177611d7da6bec584b5e9126e61798734848ab0087485fd713d6c5b3c26973448df3ef72049f4e8a92d31cd39cd2262acf74adca3c3f2ccc4fb227fe798e1c4e218706e3cfd6c7bdca1a047a280d3ba39baecedcefbc722feab7164ed13f3f2e3abafc1a0aa91e20430d86527de5c841c50519d6a2fd8a4315366f380b788c7309806081e2c1e1ade0c48fbae324cbe84dd1884a3449cccbb3120d714e844b9cdc203eae619c59c614ae1396f017565b917dcd2bd191825fdcd63ed81f4625727c52d9a41998ba4c4d311d056fc99e809806b5856bb9cd0785819d18d1d9988268a0d42d943f5a8e138ab6183dc0669445940077cdb06ecc3560ec6bd76c815ac5e95d0fa90d7baab051c09a496224ac99d7fc3286fbaa8f62dff9cb233cae4193a18bcd4593c45c3413ffb565a64436e52971ebdc0129a53923aeb0a8a91af1701b3285490c5d91d2460c32bc15e1de47fe6f66a7bcd5ca1d19b8297d5654a02661f35b7a23f5161eb9f65d3624bb580bdec65e73df3e651f3b563effc8a097f666cc388c65da9936ac3b4ec7798a55f942352a3a377a2e0105426db0d84245f1ded22be673f080b2d719bb5e6a4db4e90e355894ca4076973efb168cb4b487e6d9cc6d0ab596a055bdb79e337f0f090cfec3de63d105aaae55f8b0960621fca7354215ad0e11192bc3b2522dc713107183db7aad2fc9c26b5964874dc697b6e1c31a340b0b263dcf04590224cd1d0fd655790dd1a262284a4c89adc360edf6cb9c71bd6b863fa08ac9493225ec5706782d909ee32d56d21c1ff9e386c7b10956126efbce78c5b42ff2adb90ba5db0f9df117089f89fb6432fe4757ba03a5f85459d549d194142029af409e4116ca9ce9d1617aa4d9fb08ece46db8c7aa68494bfa50cafec269d1383b0ff31126f2700ca4310977b832294b5eabb4dde4c7acdd0025050101f4444805806b7bec7bddf4bfbac2e758a3db38c926eafb9e98876fe5294001b3eb83841e9179fc55f67a8dffaf6f6b94f8acd7c5f5c316c0f218896c80a6a0447ee56e3d10dbd462ef6ece3080765e79d9c42c383500d67964f031b0323d1606f5de707fef549fa3222833aeefecc68d6a03130edd79494a409a62affa93a58ceeaf596752f97662e186fd8122dd77388ec42128e21b0cbd6ebfa74c5a25dd3ebb6a5dd23737a4ed5bf79e56893cac3d44fb141b5d84268d00a0f9fb00c0151b33abb6f29990b9dfaf3ecf518b5b457c237700227b63dbef585d3e759fa70e6935301beb99d25e0be14e72bde62dcc2867a3f4e7ebb79c2b17628b3e297a16d549046f589167cabec20eaa4c66cdc2d6cb125e002ffdc1cf8ca23ee81b34e5dc6fc2952e265d0fb6f6a46635439c1f3f190abfdb5c90419cecece15a373bd4462d2f591214bd3ca015ec5bbf97bade1a7380ebb0abc0b416a7e04ca05b66ea4efa8b9c45f4946a232d4dff6609c608577d8d1d6b957b08532b0802001cf9a15d2ec0c1cbac10f858534c98268d5d64ab369d055217e8ff985e88bb3f96cfeb8852b988d37a10e31fcee04382c70854a70027c3c15a84fe3ca33dbbb88b9447d27a13ff6e1e8252439cd6f67208d26378437ef83fa05df1a7d67bdb400ef6e2841cae414a54a05032f6d08acf1383d4643b524f15cf209a10143760e1b9b5a591dc9696a1a1f75d783bb454a247c90311397b03b7af4c6a6fb617677f963862d7f7f4c29f9f70138b6c7573a063bf0ee1e55ba702e6ee0778ff429eb700415f89105246cecf6eb6330df9901263aff3076f798d05c7f1a1044cf2ec81c598bcd35fbb856b1c27ad30f39ca0076242bf8e2a3255c230ef3202ab9d3228a60a7af3db01abaee491d0fecdb907b16f888e9a090585b68fc2d0eb71dcb918cc2ea1e390a5da152eec4aef062db93bb5f449c44d7ef2bdd3", 0x6c3}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x6, &(0x7f0000000ac0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r3, @ANYRESDEC=r3, @ANYRESOCT, @ANYRES32=r4], &(0x7f00000027c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000002800)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 82.421062ms ago: executing program 4 (id=688): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x40400) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100802054000"], 0x1c}}, 0x4800) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000980)) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x8000) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x88000) r2 = fspick(0xffffffffffffffff, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x70) r4 = socket(0x2b, 0x5, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r4) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="01800000", @ANYRES16=0x0, @ANYBLOB="0e032dbd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x481}, 0x8000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r8) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000380), r8) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x2c, r9, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x44) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000009c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050069c344a086177e0dfcb564a029e5aa3629bba22b7be9671b60897e530114d6be3953f422322047f14d9c181b826bf2ff3af1a2ba05c20db0b11b02b3a84036682d40a9d0493f03c029f88b4b10f175612ac4611aefa64eebbd2ae66c584fef4aaf028c36918bbdde8ab5a5d9ed3d7c03ec13eccc0b6600d6c51f8f5b8964d79f5a8ad5c8a99117d69a9fc8c76d3743157b73d34282a86e21ec72914d810c627face58a9c618d68088da08d666d80c944ee59fb74e94db2c3a36532bc304bb29933fd4071e0a319032d24c0fdad2d620c93"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x78, r10, 0x5, 0x100, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @broadcast, @from_mac=@broadcast}, 0x0, @random=0xc, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x4}, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x1}}, @void}}], @chandef_params, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x16}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0x78}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x59}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x803c0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000080)={0x6, 0x0, {0x0, 0x2, 0xb, 0x2, 0xb}}) 0s ago: executing program 4 (id=689): openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@usrquota}, {@grpquota}, {@noload}, {@test_dummy_encryption}, {@lazytime}]}, 0xfe, 0x47c, &(0x7f0000000740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x4, 0x36, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x5, &(0x7f0000000440)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x100a}}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x80, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x4004) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000c40)) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, &(0x7f0000000c80)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfffc}}, 0x14}, 0x1, 0x0, 0x0, 0x20048005}, 0x40000) mount$cgroup2(0x0, &(0x7f0000001080)='./cgroup\x00', &(0x7f00000010c0), 0x40, &(0x7f0000001100)=ANY=[]) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 2395][ T3519] journal_path: Lookup failure for './file1' [ 34.622705][ T3519] EXT4-fs: error: could not find journal device path [ 34.671530][ T3510] vlan2: entered allmulticast mode [ 34.671563][ T3510] veth1_to_batadv: entered allmulticast mode [ 34.678319][ T3510] vlan2: entered promiscuous mode [ 34.678465][ T3510] veth1_to_batadv: entered promiscuous mode [ 34.810054][ T3531] xt_CT: No such helper "syz1" [ 34.953768][ T3510] syz.2.3 (3510) used greatest stack depth: 10056 bytes left [ 34.954113][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 34.954124][ T30] audit: type=1400 audit(1794410914.503:175): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.972648][ T30] audit: type=1400 audit(1794410914.523:176): avc: denied { create } for pid=3534 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.974311][ T30] audit: type=1400 audit(1794410914.523:177): avc: denied { bind } for pid=3534 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.974711][ T30] audit: type=1400 audit(1794410914.523:178): avc: denied { connect } for pid=3534 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.997267][ T30] audit: type=1400 audit(1794410914.543:179): avc: denied { tracepoint } for pid=3534 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.015712][ T3530] bridge0: port 3(vlan2) entered blocking state [ 35.015744][ T3530] bridge0: port 3(vlan2) entered disabled state [ 35.015801][ T3530] vlan2: entered allmulticast mode [ 35.015816][ T3530] veth1_to_batadv: entered allmulticast mode [ 35.021041][ T3530] vlan2: entered promiscuous mode [ 35.021060][ T3530] veth1_to_batadv: entered promiscuous mode [ 35.048801][ T30] audit: type=1400 audit(1794410914.603:180): avc: denied { map_create } for pid=3534 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 35.049845][ T30] audit: type=1400 audit(1794410914.603:181): avc: denied { mmap_zero } for pid=3534 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 35.050884][ T30] audit: type=1400 audit(1794410914.603:182): avc: denied { map_read map_write } for pid=3534 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 35.058046][ T30] audit: type=1400 audit(1794410914.613:183): avc: denied { create } for pid=3534 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.183503][ T30] audit: type=1400 audit(1794410914.733:184): avc: denied { create } for pid=3537 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.313078][ T3545] loop4: detected capacity change from 0 to 512 [ 35.321966][ T3545] ======================================================= [ 35.321966][ T3545] WARNING: The mand mount option has been deprecated and [ 35.321966][ T3545] and is ignored by this kernel. Remove the mand [ 35.321966][ T3545] option from the mount to silence this warning. [ 35.321966][ T3545] ======================================================= [ 35.322101][ T3545] EXT4-fs: test_dummy_encryption option not supported [ 36.445387][ T3524] Bluetooth: hci0: command 0x1003 tx timeout [ 36.445699][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 36.952407][ T3555] loop2: detected capacity change from 0 to 512 [ 36.960642][ T3555] EXT4-fs: test_dummy_encryption option not supported [ 37.027369][ T3551] No source specified [ 37.801560][ T3571] No source specified [ 38.190132][ T3578] netlink: 'syz.1.18': attribute type 16 has an invalid length. [ 38.190228][ T3578] netlink: 'syz.1.18': attribute type 17 has an invalid length. [ 38.190251][ T3578] netlink: 'syz.1.18': attribute type 27 has an invalid length. [ 38.259990][ T3577] loop2: detected capacity change from 0 to 512 [ 38.480909][ T3588] loop1: detected capacity change from 0 to 512 [ 38.573156][ T3588] EXT4-fs: test_dummy_encryption option not supported [ 38.837333][ T3585] loop2: detected capacity change from 0 to 1024 [ 39.458170][ T3585] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 39.458200][ T3585] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 39.458240][ T3585] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 39.458807][ T3585] EXT4-fs error (device loop2): ext4_get_journal_inode:5971: inode #5: comm syz.2.17: casefold flag without casefold feature [ 39.458849][ T3585] loop2: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 39.458926][ T3585] EXT4-fs (loop2): no journal found [ 39.523489][ T3597] loop1: detected capacity change from 0 to 1024 [ 39.536568][ T3597] EXT4-fs: Ignoring removed bh option [ 39.558601][ T3597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.588521][ T3599] netlink: 'syz.3.25': attribute type 16 has an invalid length. [ 39.588540][ T3599] netlink: 'syz.3.25': attribute type 17 has an invalid length. [ 39.588553][ T3599] netlink: 'syz.3.25': attribute type 27 has an invalid length. [ 39.716738][ T3597] netlink: 136 bytes leftover after parsing attributes in process `syz.1.24'. [ 40.723455][ T3613] netlink: 'syz.3.28': attribute type 16 has an invalid length. [ 40.723475][ T3613] netlink: 'syz.3.28': attribute type 17 has an invalid length. [ 40.723488][ T3613] netlink: 'syz.3.28': attribute type 27 has an invalid length. [ 40.729522][ T3294] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 40.730004][ T3294] EXT4-fs error (device loop1): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /6/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 40.730241][ T3294] EXT4-fs (loop1): Remounting filesystem read-only [ 40.745456][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 40.745471][ T30] audit: type=1400 audit(1794410920.283:212): avc: denied { write } for pid=3294 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.745568][ T30] audit: type=1400 audit(1794410920.283:213): avc: denied { remove_name } for pid=3294 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.745669][ T30] audit: type=1400 audit(1794410920.283:214): avc: denied { rmdir } for pid=3294 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.745693][ T30] audit: type=1400 audit(1794410920.283:215): avc: denied { write } for pid=3294 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.745745][ T30] audit: type=1400 audit(1794410920.283:216): avc: denied { unlink } for pid=3294 comm="syz-executor" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.745775][ T30] audit: type=1400 audit(1794410920.283:217): avc: denied { write } for pid=3294 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.745827][ T30] audit: type=1400 audit(1794410920.283:218): avc: denied { write } for pid=3294 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.745859][ T30] audit: type=1400 audit(1794410920.283:219): avc: denied { write } for pid=3294 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.745881][ T30] audit: type=1400 audit(1794410920.283:220): avc: denied { write } for pid=3294 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.745929][ T30] audit: type=1400 audit(1794410920.283:221): avc: denied { write } for pid=3294 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.388082][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.547563][ T3624] loop0: detected capacity change from 0 to 1024 [ 42.559795][ T3624] EXT4-fs: Ignoring removed bh option [ 42.568476][ T3624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.641630][ T3624] netlink: 136 bytes leftover after parsing attributes in process `syz.0.32'. [ 42.821662][ T3299] EXT4-fs error (device loop0): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /5/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 42.822049][ T3299] EXT4-fs (loop0): Remounting filesystem read-only [ 42.977153][ T3642] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 42.977191][ T3642] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 42.978100][ T3642] vhci_hcd vhci_hcd.0: Device attached [ 43.005232][ T3639] loop1: detected capacity change from 0 to 512 [ 43.009598][ T3639] journal_path: Lookup failure for './file1' [ 43.009727][ T3639] EXT4-fs: error: could not find journal device path [ 43.122749][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.192285][ T3642] loop3: detected capacity change from 0 to 512 [ 43.225430][ T10] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 43.250920][ T3642] EXT4-fs (loop3): unable to read superblock [ 43.312284][ T3648] xt_CT: No such helper "syz1" [ 43.332414][ T3647] bridge0: port 3(vlan2) entered blocking state [ 43.332520][ T3647] bridge0: port 3(vlan2) entered disabled state [ 43.332652][ T3647] vlan2: entered allmulticast mode [ 43.332668][ T3647] veth1_to_batadv: entered allmulticast mode [ 43.333171][ T3647] vlan2: entered promiscuous mode [ 43.333187][ T3647] veth1_to_batadv: entered promiscuous mode [ 43.405121][ T3356] rxe_eth0 speed is unknown, defaulting to 1000 [ 43.434599][ T3643] vhci_hcd: connection reset by peer [ 43.435196][ T3430] vhci_hcd vhci_hcd.3: stop threads [ 43.435213][ T3430] vhci_hcd vhci_hcd.3: release socket [ 43.435239][ T3430] vhci_hcd vhci_hcd.3: disconnect device [ 43.498109][ T3658] No source specified [ 44.599763][ T3687] loop0: detected capacity change from 0 to 1024 [ 44.627609][ T3687] EXT4-fs: Ignoring removed bh option [ 44.678688][ T3687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.710436][ T3692] FAULT_INJECTION: forcing a failure. [ 44.710436][ T3692] name failslab, interval 1, probability 0, space 0, times 1 [ 44.710642][ T3692] CPU: 1 UID: 0 PID: 3692 Comm: syz.1.47 Not tainted syzkaller #0 PREEMPT(lazy) [ 44.710674][ T3692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 44.710692][ T3692] Call Trace: [ 44.710747][ T3692] [ 44.710755][ T3692] __dump_stack+0x1d/0x30 [ 44.710785][ T3692] dump_stack_lvl+0x95/0xd0 [ 44.710811][ T3692] dump_stack+0x15/0x1b [ 44.710835][ T3692] should_fail_ex+0x259/0x270 [ 44.710953][ T3692] should_failslab+0x8c/0xb0 [ 44.710991][ T3692] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 44.711029][ T3692] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 44.711082][ T3692] ? __d_alloc+0x34/0x320 [ 44.711111][ T3692] ? __d_alloc+0x34/0x320 [ 44.711142][ T3692] __d_alloc+0x34/0x320 [ 44.711215][ T3692] ? d_alloc_pseudo+0x13/0x80 [ 44.711248][ T3692] d_alloc_pseudo+0x1e/0x80 [ 44.711353][ T3692] alloc_path_pseudo+0xa4/0x140 [ 44.711437][ T3692] alloc_file_pseudo+0x55/0x120 [ 44.711468][ T3692] __shmem_file_setup+0x226/0x260 [ 44.711502][ T3692] shmem_kernel_file_setup+0x3e/0x50 [ 44.711588][ T3692] newseg+0x2b4/0x670 [ 44.711621][ T3692] ipcget+0x2dc/0x480 [ 44.711655][ T3692] ? __x64_sys_shmget+0x3a/0xe0 [ 44.711702][ T3692] __x64_sys_shmget+0xb8/0xe0 [ 44.711736][ T3692] x64_sys_call+0x2001/0x2550 [ 44.711766][ T3692] do_syscall_64+0x116/0x380 [ 44.711790][ T3692] ? clear_bhb_loop+0x70/0xc0 [ 44.711816][ T3692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.711862][ T3692] RIP: 0033:0x7fda5bca8f19 [ 44.711880][ T3692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.711934][ T3692] RSP: 002b:00007fda5a6f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 44.711963][ T3692] RAX: ffffffffffffffda RBX: 00007fda5bf25fa0 RCX: 00007fda5bca8f19 [ 44.711980][ T3692] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 0000000000000000 [ 44.711994][ T3692] RBP: 00007fda5bd37f6d R08: 0000000000000000 R09: 0000000000000000 [ 44.712074][ T3692] R10: 0000200000001000 R11: 0000000000000246 R12: 0000000000000000 [ 44.712089][ T3692] R13: 00007fda5bf26038 R14: 00007fda5bf25fa0 R15: 00007fff9dbfc1b8 [ 44.712109][ T3692] [ 44.787494][ T3687] netlink: 136 bytes leftover after parsing attributes in process `syz.0.46'. [ 44.839703][ T3695] netlink: 'syz.1.47': attribute type 16 has an invalid length. [ 44.865462][ T3687] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 45.968635][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.989494][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 45.989510][ T30] audit: type=1400 audit(1794410925.543:256): avc: denied { write } for pid=3299 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.989818][ T3299] EXT4-fs error (device loop0): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /8/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 45.990094][ T3299] EXT4-fs (loop0): Remounting filesystem read-only [ 45.990405][ T30] audit: type=1400 audit(1794410925.543:257): avc: denied { write } for pid=3299 comm="syz-executor" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.990541][ T30] audit: type=1400 audit(1794410925.543:258): avc: denied { write } for pid=3299 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.990759][ T30] audit: type=1400 audit(1794410925.543:259): avc: denied { write } for pid=3299 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.991412][ T30] audit: type=1400 audit(1794410925.543:260): avc: denied { write } for pid=3299 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.992832][ T30] audit: type=1400 audit(1794410925.553:261): avc: denied { write } for pid=3299 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.994162][ T30] audit: type=1400 audit(1794410925.553:262): avc: denied { write } for pid=3299 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.007393][ T30] audit: type=1400 audit(1794410925.573:263): avc: denied { write } for pid=3299 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.030147][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.040693][ T3709] loop4: detected capacity change from 0 to 512 [ 46.048355][ T3709] EXT4-fs: test_dummy_encryption option not supported [ 46.312381][ T3717] loop1: detected capacity change from 0 to 512 [ 46.322387][ T3714] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 46.322428][ T3714] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 46.322559][ T3714] vhci_hcd vhci_hcd.0: Device attached [ 46.323974][ T3717] EXT4-fs: test_dummy_encryption option not supported [ 46.449808][ T3714] loop2: detected capacity change from 0 to 512 [ 46.463696][ T3714] EXT4-fs (loop2): unable to read superblock [ 46.555469][ T3387] usb 5-1: new high-speed USB device number 2 using vhci_hcd [ 46.620013][ T3721] vhci_hcd: connection reset by peer [ 46.620299][ T33] vhci_hcd vhci_hcd.2: stop threads [ 46.620375][ T33] vhci_hcd vhci_hcd.2: release socket [ 46.620407][ T33] vhci_hcd vhci_hcd.2: disconnect device [ 47.704475][ T3735] loop3: detected capacity change from 0 to 512 [ 47.717379][ T3735] journal_path: Lookup failure for './file1' [ 47.717467][ T3735] EXT4-fs: error: could not find journal device path [ 47.815427][ T3743] netlink: 'syz.0.61': attribute type 16 has an invalid length. [ 47.878194][ T3735] bridge0: port 3(vlan2) entered blocking state [ 47.879238][ T3735] bridge0: port 3(vlan2) entered disabled state [ 47.881064][ T3735] vlan2: entered allmulticast mode [ 47.881238][ T3735] veth1_to_batadv: entered allmulticast mode [ 48.000156][ T3735] vlan2: entered promiscuous mode [ 48.000202][ T3735] veth1_to_batadv: entered promiscuous mode [ 49.002317][ T3744] xt_CT: No such helper "syz1" [ 49.027568][ T10] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 52.334876][ T44] Bluetooth: hci0: sending frame failed (-49) [ 52.334977][ T3524] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 52.365147][ T3387] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 52.435336][ T30] audit: type=1400 audit(1794410931.973:264): avc: denied { mount } for pid=3789 comm="syz.3.75" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 52.435416][ T30] audit: type=1400 audit(1794410931.973:265): avc: denied { search } for pid=3789 comm="syz.3.75" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 52.458697][ T30] audit: type=1400 audit(1794410931.973:266): avc: denied { search } for pid=3789 comm="syz.3.75" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 52.458752][ T30] audit: type=1400 audit(1794410931.973:267): avc: denied { write search } for pid=3789 comm="syz.3.75" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 52.458772][ T30] audit: type=1400 audit(1794410931.973:268): avc: denied { add_name } for pid=3789 comm="syz.3.75" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 52.458802][ T30] audit: type=1400 audit(1794410931.973:269): avc: denied { create } for pid=3789 comm="syz.3.75" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 52.472114][ T30] audit: type=1400 audit(1794410932.023:270): avc: denied { write } for pid=3789 comm="syz.3.75" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 52.472911][ T30] audit: type=1400 audit(1794410932.023:271): avc: denied { remove_name } for pid=3789 comm="syz.3.75" name="foo" dev="tracefs" ino=6371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 52.472967][ T30] audit: type=1400 audit(1794410932.023:272): avc: denied { rmdir } for pid=3789 comm="syz.3.75" name="foo" dev="tracefs" ino=6371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 52.727565][ T3793] netlink: 'syz.2.73': attribute type 16 has an invalid length. [ 52.727583][ T3793] netlink: 'syz.2.73': attribute type 17 has an invalid length. [ 52.727790][ T3793] netlink: 'syz.2.73': attribute type 27 has an invalid length. [ 52.829132][ T3798] FAULT_INJECTION: forcing a failure. [ 52.829132][ T3798] name failslab, interval 1, probability 0, space 0, times 0 [ 52.829310][ T3798] CPU: 0 UID: 0 PID: 3798 Comm: syz.4.76 Not tainted syzkaller #0 PREEMPT(lazy) [ 52.829337][ T3798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 52.829357][ T3798] Call Trace: [ 52.829367][ T3798] [ 52.829374][ T3798] __dump_stack+0x1d/0x30 [ 52.829401][ T3798] dump_stack_lvl+0x95/0xd0 [ 52.829426][ T3798] dump_stack+0x15/0x1b [ 52.829450][ T3798] should_fail_ex+0x259/0x270 [ 52.829539][ T3798] should_failslab+0x8c/0xb0 [ 52.829569][ T3798] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 52.829599][ T3798] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 52.829679][ T3798] ? __d_alloc+0x34/0x320 [ 52.829709][ T3798] ? __d_alloc+0x34/0x320 [ 52.829809][ T3798] __d_alloc+0x34/0x320 [ 52.829838][ T3798] ? d_alloc_pseudo+0x13/0x80 [ 52.829871][ T3798] d_alloc_pseudo+0x1e/0x80 [ 52.829903][ T3798] alloc_path_pseudo+0xa4/0x140 [ 52.829955][ T3798] alloc_file_pseudo+0x55/0x120 [ 52.829985][ T3798] __shmem_file_setup+0x226/0x260 [ 52.830082][ T3798] shmem_kernel_file_setup+0x3e/0x50 [ 52.830151][ T3798] newseg+0x2b4/0x670 [ 52.830254][ T3798] ipcget+0x2dc/0x480 [ 52.830285][ T3798] ? __se_sys_futex+0x2f6/0x370 [ 52.830307][ T3798] ? xfd_validate_state+0x45/0xf0 [ 52.830335][ T3798] __x64_sys_shmget+0xb8/0xe0 [ 52.830432][ T3798] x64_sys_call+0x2001/0x2550 [ 52.830460][ T3798] do_syscall_64+0x116/0x380 [ 52.830484][ T3798] ? clear_bhb_loop+0x70/0xc0 [ 52.830509][ T3798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.830574][ T3798] RIP: 0033:0x7f2021f88f19 [ 52.830592][ T3798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.830612][ T3798] RSP: 002b:00007f20209cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 52.830694][ T3798] RAX: ffffffffffffffda RBX: 00007f2022205fa0 RCX: 00007f2021f88f19 [ 52.830779][ T3798] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 0000000000000000 [ 52.830794][ T3798] RBP: 00007f2022017f6d R08: 0000000000000000 R09: 0000000000000000 [ 52.830808][ T3798] R10: 0000200000001000 R11: 0000000000000246 R12: 0000000000000000 [ 52.830820][ T3798] R13: 00007f2022206038 R14: 00007f2022205fa0 R15: 00007ffd838ed9c8 [ 52.830893][ T3798] [ 52.917875][ T3799] netlink: 'syz.4.76': attribute type 16 has an invalid length. [ 52.957327][ T3796] loop1: detected capacity change from 0 to 512 [ 52.965013][ T3796] journal_path: Lookup failure for './file1' [ 52.965074][ T3796] EXT4-fs: error: could not find journal device path [ 53.156919][ T30] audit: type=1400 audit(1794410932.713:273): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 53.275079][ T3796] xt_CT: No such helper "syz1" [ 53.320873][ T3813] loop4: detected capacity change from 0 to 512 [ 53.333434][ T3813] journal_path: Lookup failure for './file1' [ 53.333609][ T3813] EXT4-fs: error: could not find journal device path [ 53.350875][ T3810] bridge0: port 3(vlan2) entered blocking state [ 53.350953][ T3810] bridge0: port 3(vlan2) entered disabled state [ 53.351239][ T3810] vlan2: entered allmulticast mode [ 53.351269][ T3810] veth1_to_batadv: entered allmulticast mode [ 53.352253][ T3810] vlan2: entered promiscuous mode [ 53.352332][ T3810] veth1_to_batadv: entered promiscuous mode [ 53.607291][ T3810] xt_CT: No such helper "syz1" [ 54.522797][ T3826] loop4: detected capacity change from 0 to 1024 [ 54.524161][ T3826] EXT4-fs: Ignoring removed bh option [ 54.672328][ T3826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.703710][ T3833] FAULT_INJECTION: forcing a failure. [ 54.703710][ T3833] name failslab, interval 1, probability 0, space 0, times 0 [ 54.703766][ T3833] CPU: 0 UID: 0 PID: 3833 Comm: syz.0.86 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.703792][ T3833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 54.703805][ T3833] Call Trace: [ 54.703812][ T3833] [ 54.703820][ T3833] __dump_stack+0x1d/0x30 [ 54.703849][ T3833] dump_stack_lvl+0x95/0xd0 [ 54.703906][ T3833] dump_stack+0x15/0x1b [ 54.703930][ T3833] should_fail_ex+0x259/0x270 [ 54.703993][ T3833] should_failslab+0x8c/0xb0 [ 54.704023][ T3833] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 54.704107][ T3833] ? __d_alloc+0x34/0x320 [ 54.704137][ T3833] ? __d_alloc+0x34/0x320 [ 54.704243][ T3833] __d_alloc+0x34/0x320 [ 54.704322][ T3833] ? d_alloc_pseudo+0x13/0x80 [ 54.704395][ T3833] d_alloc_pseudo+0x1e/0x80 [ 54.704426][ T3833] alloc_path_pseudo+0xa4/0x140 [ 54.704457][ T3833] alloc_file_pseudo+0x55/0x120 [ 54.704550][ T3833] __shmem_file_setup+0x226/0x260 [ 54.704576][ T3833] shmem_kernel_file_setup+0x3e/0x50 [ 54.704602][ T3833] newseg+0x2b4/0x670 [ 54.704632][ T3833] ipcget+0x2dc/0x480 [ 54.704676][ T3833] ? tick_program_event+0x79/0xc0 [ 54.704706][ T3833] ? _raw_spin_unlock+0x9/0x30 [ 54.704729][ T3833] ? __hrtimer_rearm_deferred+0x571/0x650 [ 54.704766][ T3833] __x64_sys_shmget+0xb8/0xe0 [ 54.704808][ T3833] x64_sys_call+0x2001/0x2550 [ 54.704838][ T3833] do_syscall_64+0x116/0x380 [ 54.704861][ T3833] ? clear_bhb_loop+0x70/0xc0 [ 54.704882][ T3833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.704908][ T3833] RIP: 0033:0x7fe107878f19 [ 54.704924][ T3833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.704944][ T3833] RSP: 002b:00007fe1062bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 54.704967][ T3833] RAX: ffffffffffffffda RBX: 00007fe107af5fa0 RCX: 00007fe107878f19 [ 54.704989][ T3833] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 0000000000000000 [ 54.705041][ T3833] RBP: 00007fe107907f6d R08: 0000000000000000 R09: 0000000000000000 [ 54.705053][ T3833] R10: 0000200000001000 R11: 0000000000000246 R12: 0000000000000000 [ 54.705084][ T3833] R13: 00007fe107af6038 R14: 00007fe107af5fa0 R15: 00007ffd10f8ba38 [ 54.705104][ T3833] [ 54.788465][ T3826] netlink: 136 bytes leftover after parsing attributes in process `syz.4.83'. [ 55.012003][ T3843] netlink: 'syz.0.86': attribute type 16 has an invalid length. [ 55.350072][ T3295] EXT4-fs error (device loop4): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /14/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 55.355384][ T3295] EXT4-fs (loop4): Remounting filesystem read-only [ 55.397022][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.405234][ T3849] FAULT_INJECTION: forcing a failure. [ 55.405234][ T3849] name failslab, interval 1, probability 0, space 0, times 0 [ 55.406093][ T3849] CPU: 1 UID: 0 PID: 3849 Comm: syz.0.89 Not tainted syzkaller #0 PREEMPT(lazy) [ 55.406141][ T3849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 55.406194][ T3849] Call Trace: [ 55.406201][ T3849] [ 55.406209][ T3849] __dump_stack+0x1d/0x30 [ 55.406237][ T3849] dump_stack_lvl+0x95/0xd0 [ 55.406258][ T3849] dump_stack+0x15/0x1b [ 55.406282][ T3849] should_fail_ex+0x259/0x270 [ 55.406387][ T3849] should_failslab+0x8c/0xb0 [ 55.406424][ T3849] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 55.406500][ T3849] ? __d_alloc+0x34/0x320 [ 55.406589][ T3849] ? __d_alloc+0x34/0x320 [ 55.406616][ T3849] __d_alloc+0x34/0x320 [ 55.406646][ T3849] ? d_alloc_pseudo+0x13/0x80 [ 55.406679][ T3849] d_alloc_pseudo+0x1e/0x80 [ 55.406874][ T3849] alloc_path_pseudo+0xa4/0x140 [ 55.406902][ T3849] alloc_file_pseudo+0x55/0x120 [ 55.406932][ T3849] __shmem_file_setup+0x226/0x260 [ 55.406987][ T3849] shmem_kernel_file_setup+0x3e/0x50 [ 55.407016][ T3849] newseg+0x2b4/0x670 [ 55.407122][ T3849] ipcget+0x2dc/0x480 [ 55.407153][ T3849] ? __se_sys_futex+0x2f6/0x370 [ 55.407282][ T3849] ? xfd_validate_state+0x45/0xf0 [ 55.407309][ T3849] __x64_sys_shmget+0xb8/0xe0 [ 55.407337][ T3849] x64_sys_call+0x2001/0x2550 [ 55.407390][ T3849] do_syscall_64+0x116/0x380 [ 55.407409][ T3849] ? clear_bhb_loop+0x70/0xc0 [ 55.407432][ T3849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.407456][ T3849] RIP: 0033:0x7fe107878f19 [ 55.407471][ T3849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.407556][ T3849] RSP: 002b:00007fe1062bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 55.407643][ T3849] RAX: ffffffffffffffda RBX: 00007fe107af5fa0 RCX: 00007fe107878f19 [ 55.407659][ T3849] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 0000000000000000 [ 55.407676][ T3849] RBP: 00007fe107907f6d R08: 0000000000000000 R09: 0000000000000000 [ 55.407688][ T3849] R10: 0000200000001000 R11: 0000000000000246 R12: 0000000000000000 [ 55.407701][ T3849] R13: 00007fe107af6038 R14: 00007fe107af5fa0 R15: 00007ffd10f8ba38 [ 55.407795][ T3849] [ 56.301653][ T3849] netlink: 'syz.0.89': attribute type 16 has an invalid length. [ 57.043749][ T3870] netlink: 'syz.3.92': attribute type 16 has an invalid length. [ 57.043765][ T3870] netlink: 'syz.3.92': attribute type 17 has an invalid length. [ 57.043777][ T3870] netlink: 'syz.3.92': attribute type 27 has an invalid length. [ 57.088201][ T3869] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 58.677065][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 58.677097][ T30] audit: type=1400 audit(1794410938.233:288): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 60.066128][ T3892] No source specified [ 60.224106][ T3904] FAULT_INJECTION: forcing a failure. [ 60.224106][ T3904] name failslab, interval 1, probability 0, space 0, times 0 [ 60.224162][ T3904] CPU: 0 UID: 0 PID: 3904 Comm: syz.3.105 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.224185][ T3904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 60.224197][ T3904] Call Trace: [ 60.224204][ T3904] [ 60.224212][ T3904] __dump_stack+0x1d/0x30 [ 60.224289][ T3904] dump_stack_lvl+0x95/0xd0 [ 60.224312][ T3904] dump_stack+0x15/0x1b [ 60.224335][ T3904] should_fail_ex+0x259/0x270 [ 60.224368][ T3904] should_failslab+0x8c/0xb0 [ 60.224439][ T3904] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 60.224518][ T3904] ? __d_alloc+0x34/0x320 [ 60.224547][ T3904] ? __d_alloc+0x34/0x320 [ 60.224619][ T3904] ? ktime_get_coarse_real_ts64_mg+0x187/0x1a0 [ 60.224650][ T3904] __d_alloc+0x34/0x320 [ 60.224679][ T3904] ? d_alloc_pseudo+0x13/0x80 [ 60.224712][ T3904] d_alloc_pseudo+0x1e/0x80 [ 60.224794][ T3904] alloc_path_pseudo+0xa4/0x140 [ 60.224825][ T3904] alloc_file_pseudo+0x55/0x120 [ 60.224855][ T3904] __shmem_file_setup+0x226/0x260 [ 60.224932][ T3904] shmem_kernel_file_setup+0x3e/0x50 [ 60.224964][ T3904] newseg+0x2b4/0x670 [ 60.225005][ T3904] ipcget+0x2dc/0x480 [ 60.225060][ T3904] ? __x64_sys_shmget+0x6f/0xe0 [ 60.225090][ T3904] __x64_sys_shmget+0xb8/0xe0 [ 60.225160][ T3904] x64_sys_call+0x2001/0x2550 [ 60.225248][ T3904] do_syscall_64+0x116/0x380 [ 60.225271][ T3904] ? clear_bhb_loop+0x70/0xc0 [ 60.225358][ T3904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.225383][ T3904] RIP: 0033:0x7fee1e198f19 [ 60.225407][ T3904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.225427][ T3904] RSP: 002b:00007fee1cbe7028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 60.225449][ T3904] RAX: ffffffffffffffda RBX: 00007fee1e415fa0 RCX: 00007fee1e198f19 [ 60.225503][ T3904] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 0000000000000000 [ 60.225517][ T3904] RBP: 00007fee1e227f6d R08: 0000000000000000 R09: 0000000000000000 [ 60.225532][ T3904] R10: 0000200000001000 R11: 0000000000000246 R12: 0000000000000000 [ 60.225546][ T3904] R13: 00007fee1e416038 R14: 00007fee1e415fa0 R15: 00007ffc3b992438 [ 60.225568][ T3904] [ 60.426822][ T3909] netlink: 'syz.3.105': attribute type 16 has an invalid length. [ 60.646146][ T30] audit: type=1400 audit(1794410940.203:289): avc: denied { name_bind } for pid=3910 comm="syz.0.107" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.646221][ T30] audit: type=1400 audit(1794410940.203:290): avc: denied { node_bind } for pid=3910 comm="syz.0.107" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 60.885385][ T30] audit: type=1400 audit(1794410940.413:291): avc: denied { bind } for pid=3910 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.885507][ T30] audit: type=1400 audit(1794410940.413:292): avc: denied { name_bind } for pid=3910 comm="syz.0.107" src=12816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 60.885527][ T30] audit: type=1400 audit(1794410940.433:293): avc: denied { node_bind } for pid=3910 comm="syz.0.107" saddr=172.20.2.1 src=12816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 61.152009][ T3923] loop1: detected capacity change from 0 to 512 [ 61.152361][ T3923] EXT4-fs: test_dummy_encryption option not supported [ 61.316991][ T3928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 61.324181][ T30] audit: type=1400 audit(1794410940.873:294): avc: denied { ioctl } for pid=3924 comm="syz.2.111" path="socket:[6683]" dev="sockfs" ino=6683 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.326230][ T3925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 61.363285][ T3921] loop3: detected capacity change from 0 to 512 [ 61.468984][ T30] audit: type=1400 audit(1794410941.023:295): avc: denied { recv } for pid=3920 comm="syz.3.109" saddr=10.128.0.163 src=30036 daddr=10.128.1.6 dest=48078 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 61.546302][ T3932] loop2: detected capacity change from 0 to 512 [ 61.546588][ T3932] EXT4-fs: test_dummy_encryption option not supported [ 61.587037][ T3935] loop4: detected capacity change from 0 to 512 [ 61.598935][ T3935] EXT4-fs: test_dummy_encryption option not supported [ 61.737136][ T3921] loop3: detected capacity change from 0 to 1024 [ 61.751325][ T3921] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 61.751424][ T3921] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 61.751664][ T3921] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 61.755724][ T3921] EXT4-fs error (device loop3): ext4_get_journal_inode:5971: inode #5: comm syz.3.109: casefold flag without casefold feature [ 61.755836][ T3921] loop3: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 61.756596][ T3921] EXT4-fs (loop3): no journal found [ 61.929672][ T30] audit: type=1400 audit(1794410941.443:296): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 61.929727][ T30] audit: type=1400 audit(1794410941.443:297): avc: denied { sendto } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 62.319147][ T3941] loop0: detected capacity change from 0 to 1024 [ 62.336674][ T3941] EXT4-fs: Ignoring removed bh option [ 62.385705][ T3941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.459093][ T3941] netlink: 136 bytes leftover after parsing attributes in process `syz.0.116'. [ 62.772724][ T3941] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 63.095012][ T3962] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 63.095055][ T3962] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 63.133036][ T3962] vhci_hcd vhci_hcd.0: Device attached [ 63.245149][ T3299] EXT4-fs error (device loop0): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /23/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 63.246737][ T3299] EXT4-fs (loop0): Remounting filesystem read-only [ 63.288643][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.357054][ T3407] usb 5-1: new high-speed USB device number 3 using vhci_hcd [ 63.560861][ T3962] loop2: detected capacity change from 0 to 512 [ 63.588223][ T3962] EXT4-fs (loop2): unable to read superblock [ 63.701793][ T3972] loop1: detected capacity change from 0 to 512 [ 63.702228][ T3972] EXT4-fs: test_dummy_encryption option not supported [ 63.832982][ T3963] vhci_hcd: connection reset by peer [ 63.834654][ T42] vhci_hcd vhci_hcd.2: stop threads [ 63.834674][ T42] vhci_hcd vhci_hcd.2: release socket [ 63.834698][ T42] vhci_hcd vhci_hcd.2: disconnect device [ 63.885350][ T3430] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.031892][ T3979] loop3: detected capacity change from 0 to 512 [ 64.042944][ T3979] EXT4-fs: test_dummy_encryption option not supported [ 64.103055][ T3977] loop4: detected capacity change from 0 to 512 [ 64.294198][ T3977] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 64.294357][ T3977] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 64.294626][ T3977] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 64.299405][ T3977] EXT4-fs error (device loop4): ext4_get_journal_inode:5971: inode #5: comm syz.4.126: casefold flag without casefold feature [ 64.299505][ T3977] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 64.299847][ T3977] EXT4-fs (loop4): no journal found [ 64.383553][ T3984] EXT4-fs: test_dummy_encryption option not supported [ 64.426527][ T3987] EXT4-fs: test_dummy_encryption option not supported [ 64.751223][ T3990] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 64.751470][ T3990] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 64.751780][ T3990] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 64.755190][ T3990] EXT4-fs error (device loop4): ext4_get_journal_inode:5971: inode #5: comm syz.4.132: casefold flag without casefold feature [ 64.755219][ T3990] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 64.756091][ T3990] EXT4-fs (loop4): no journal found [ 65.150295][ T3997] No source specified [ 65.183440][ T3999] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 65.183465][ T3999] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 65.183593][ T3999] vhci_hcd vhci_hcd.0: Device attached [ 65.280868][ T3999] EXT4-fs (loop1): unable to read superblock [ 65.445713][ T3387] usb 3-1: new high-speed USB device number 2 using vhci_hcd [ 65.521028][ T4000] vhci_hcd: connection reset by peer [ 65.521271][ T33] vhci_hcd vhci_hcd.1: stop threads [ 65.521289][ T33] vhci_hcd vhci_hcd.1: release socket [ 65.521316][ T33] vhci_hcd vhci_hcd.1: disconnect device [ 65.885354][ T3524] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.920625][ T4017] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 65.920650][ T4017] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 65.920732][ T4017] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 65.922984][ T4017] EXT4-fs error (device loop3): ext4_get_journal_inode:5971: inode #5: comm syz.3.140: casefold flag without casefold feature [ 65.923008][ T4017] loop3: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 65.924667][ T4017] EXT4-fs (loop3): no journal found [ 66.234698][ T4030] FAULT_INJECTION: forcing a failure. [ 66.234698][ T4030] name failslab, interval 1, probability 0, space 0, times 0 [ 66.234753][ T4030] CPU: 1 UID: 0 PID: 4030 Comm: syz.3.145 Not tainted syzkaller #0 PREEMPT(lazy) [ 66.234854][ T4030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 66.234866][ T4030] Call Trace: [ 66.234873][ T4030] [ 66.234881][ T4030] __dump_stack+0x1d/0x30 [ 66.234935][ T4030] dump_stack_lvl+0x95/0xd0 [ 66.234961][ T4030] dump_stack+0x15/0x1b [ 66.235056][ T4030] should_fail_ex+0x259/0x270 [ 66.235088][ T4030] ? security_inode_alloc+0x37/0x100 [ 66.235182][ T4030] should_failslab+0x8c/0xb0 [ 66.235212][ T4030] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 66.235320][ T4030] ? security_inode_alloc+0x37/0x100 [ 66.235348][ T4030] security_inode_alloc+0x37/0x100 [ 66.235448][ T4030] inode_init_always_gfp+0x49b/0x4e0 [ 66.235478][ T4030] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 66.235517][ T4030] alloc_inode+0x58/0x170 [ 66.235584][ T4030] new_inode+0x1d/0xe0 [ 66.235607][ T4030] shmem_get_inode+0x250/0x7b0 [ 66.235645][ T4030] __shmem_file_setup+0x1a0/0x260 [ 66.235724][ T4030] shmem_kernel_file_setup+0x3e/0x50 [ 66.235749][ T4030] newseg+0x2b4/0x670 [ 66.235775][ T4030] ipcget+0x2dc/0x480 [ 66.235805][ T4030] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 66.235874][ T4030] __x64_sys_shmget+0xb8/0xe0 [ 66.235904][ T4030] x64_sys_call+0x2001/0x2550 [ 66.235933][ T4030] do_syscall_64+0x116/0x380 [ 66.235955][ T4030] ? clear_bhb_loop+0x70/0xc0 [ 66.236011][ T4030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.236036][ T4030] RIP: 0033:0x7fee1e198f19 [ 66.236054][ T4030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.236074][ T4030] RSP: 002b:00007fee1cbe7028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 66.236169][ T4030] RAX: ffffffffffffffda RBX: 00007fee1e415fa0 RCX: 00007fee1e198f19 [ 66.236185][ T4030] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 0000000000000000 [ 66.236198][ T4030] RBP: 00007fee1e227f6d R08: 0000000000000000 R09: 0000000000000000 [ 66.236209][ T4030] R10: 0000200000001000 R11: 0000000000000246 R12: 0000000000000000 [ 66.236225][ T4030] R13: 00007fee1e416038 R14: 00007fee1e415fa0 R15: 00007ffc3b992438 [ 66.236242][ T4030] [ 66.615784][ T4032] netlink: 'syz.3.145': attribute type 16 has an invalid length. [ 66.783958][ T4035] set_capacity_and_notify: 8 callbacks suppressed [ 66.783976][ T4035] loop4: detected capacity change from 0 to 512 [ 66.789089][ T4035] EXT4-fs: test_dummy_encryption option not supported [ 66.845586][ T4037] loop2: detected capacity change from 0 to 512 [ 66.845965][ T4037] EXT4-fs: test_dummy_encryption option not supported [ 66.897702][ T42] Bluetooth: hci0: Frame reassembly failed (-84) [ 67.050426][ T4044] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 67.050525][ T4044] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 67.050716][ T4044] vhci_hcd vhci_hcd.0: Device attached [ 67.080635][ T4044] loop1: detected capacity change from 0 to 512 [ 67.089403][ T4044] EXT4-fs (loop1): unable to read superblock [ 67.125778][ T4045] vhci_hcd: connection closed [ 67.125921][ T42] vhci_hcd vhci_hcd.1: stop threads [ 67.126020][ T42] vhci_hcd vhci_hcd.1: release socket [ 67.126042][ T42] vhci_hcd vhci_hcd.1: disconnect device [ 67.409307][ T4050] loop2: detected capacity change from 0 to 512 [ 67.437129][ T4050] loop2: detected capacity change from 0 to 1024 [ 67.444388][ T4050] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 67.444493][ T4050] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 67.444563][ T4050] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 67.470550][ T4050] EXT4-fs error (device loop2): ext4_get_journal_inode:5971: inode #5: comm syz.2.152: casefold flag without casefold feature [ 67.470645][ T4050] loop2: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 67.470776][ T4050] EXT4-fs (loop2): no journal found [ 68.435356][ T3407] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 68.925970][ T3523] Bluetooth: hci0: command 0x1003 tx timeout [ 68.927284][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 69.058830][ T4073] FAULT_INJECTION: forcing a failure. [ 69.058830][ T4073] name failslab, interval 1, probability 0, space 0, times 0 [ 69.058966][ T4073] CPU: 1 UID: 0 PID: 4073 Comm: syz.1.159 Not tainted syzkaller #0 PREEMPT(lazy) [ 69.058994][ T4073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 69.059005][ T4073] Call Trace: [ 69.059013][ T4073] [ 69.059021][ T4073] __dump_stack+0x1d/0x30 [ 69.059045][ T4073] dump_stack_lvl+0x95/0xd0 [ 69.059122][ T4073] dump_stack+0x15/0x1b [ 69.059145][ T4073] should_fail_ex+0x259/0x270 [ 69.059185][ T4073] should_failslab+0x8c/0xb0 [ 69.059288][ T4073] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 69.059352][ T4073] ? __d_alloc+0x34/0x320 [ 69.059383][ T4073] ? __d_alloc+0x34/0x320 [ 69.059416][ T4073] __d_alloc+0x34/0x320 [ 69.059446][ T4073] ? d_alloc_pseudo+0x13/0x80 [ 69.059536][ T4073] d_alloc_pseudo+0x1e/0x80 [ 69.059561][ T4073] alloc_path_pseudo+0xa4/0x140 [ 69.059584][ T4073] alloc_file_pseudo+0x55/0x120 [ 69.059613][ T4073] __shmem_file_setup+0x226/0x260 [ 69.059668][ T4073] shmem_kernel_file_setup+0x3e/0x50 [ 69.059701][ T4073] newseg+0x2b4/0x670 [ 69.059797][ T4073] ipcget+0x2dc/0x480 [ 69.059829][ T4073] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 69.059941][ T4073] __x64_sys_shmget+0xb8/0xe0 [ 69.059975][ T4073] x64_sys_call+0x2001/0x2550 [ 69.059998][ T4073] do_syscall_64+0x116/0x380 [ 69.060019][ T4073] ? clear_bhb_loop+0x70/0xc0 [ 69.060052][ T4073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.060154][ T4073] RIP: 0033:0x7fda5bca8f19 [ 69.060171][ T4073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.060236][ T4073] RSP: 002b:00007fda5a6f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 69.060254][ T4073] RAX: ffffffffffffffda RBX: 00007fda5bf25fa0 RCX: 00007fda5bca8f19 [ 69.060277][ T4073] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 0000000000000000 [ 69.060291][ T4073] RBP: 00007fda5bd37f6d R08: 0000000000000000 R09: 0000000000000000 [ 69.060344][ T4073] R10: 0000200000001000 R11: 0000000000000246 R12: 0000000000000000 [ 69.060359][ T4073] R13: 00007fda5bf26038 R14: 00007fda5bf25fa0 R15: 00007fff9dbfc1b8 [ 69.060380][ T4073] [ 69.143274][ T4074] netlink: 'syz.1.159': attribute type 16 has an invalid length. [ 69.727210][ T3524] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 70.353085][ T4084] loop4: detected capacity change from 0 to 512 [ 70.353507][ T4084] EXT4-fs: test_dummy_encryption option not supported [ 70.463522][ T4088] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 70.463628][ T4088] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 70.463911][ T4088] vhci_hcd vhci_hcd.0: Device attached [ 70.521666][ T4092] netlink: 'syz.2.163': attribute type 16 has an invalid length. [ 70.521744][ T4092] netlink: 'syz.2.163': attribute type 17 has an invalid length. [ 70.521873][ T4092] netlink: 'syz.2.163': attribute type 27 has an invalid length. [ 70.616973][ T3387] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 70.637038][ T4088] loop0: detected capacity change from 0 to 512 [ 70.645229][ T4088] EXT4-fs (loop0): unable to read superblock [ 70.695959][ T29] usb 1-1: new high-speed USB device number 2 using vhci_hcd [ 71.012187][ T4094] loop4: detected capacity change from 0 to 512 [ 71.023622][ T4094] journal_path: Lookup failure for './file1' [ 71.023655][ T4094] EXT4-fs: error: could not find journal device path [ 71.057691][ T4094] xt_CT: No such helper "syz1" [ 72.596670][ T4089] vhci_hcd: connection reset by peer [ 72.597012][ T3430] vhci_hcd vhci_hcd.0: stop threads [ 72.597030][ T3430] vhci_hcd vhci_hcd.0: release socket [ 72.597051][ T3430] vhci_hcd vhci_hcd.0: disconnect device [ 72.599533][ T4105] loop4: detected capacity change from 0 to 512 [ 72.599914][ T4105] EXT4-fs: test_dummy_encryption option not supported [ 72.752611][ T4110] netlink: 'syz.2.165': attribute type 16 has an invalid length. [ 72.752682][ T4110] netlink: 'syz.2.165': attribute type 17 has an invalid length. [ 72.752692][ T4110] netlink: 'syz.2.165': attribute type 27 has an invalid length. [ 72.868726][ T4114] loop2: detected capacity change from 0 to 512 [ 72.871563][ T4114] EXT4-fs: test_dummy_encryption option not supported [ 73.069537][ T4116] netlink: 'syz.3.172': attribute type 16 has an invalid length. [ 73.069611][ T4116] netlink: 'syz.3.172': attribute type 17 has an invalid length. [ 73.069705][ T4116] netlink: 'syz.3.172': attribute type 27 has an invalid length. [ 73.131476][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 73.131492][ T30] audit: type=1400 audit(1794410952.683:307): avc: denied { write } for pid=4120 comm="syz.3.174" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 73.132986][ T30] audit: type=1400 audit(1794410952.683:308): avc: denied { perfmon } for pid=4122 comm="syz.0.175" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.184977][ T30] audit: type=1400 audit(1794410952.723:309): avc: denied { write } for pid=4120 comm="syz.3.174" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 73.297079][ T4123] loop0: detected capacity change from 0 to 512 [ 73.421937][ T4127] loop4: detected capacity change from 0 to 512 [ 73.451922][ T4127] journal_path: Lookup failure for './file1' [ 73.452031][ T4127] EXT4-fs: error: could not find journal device path [ 73.511347][ T30] audit: type=1400 audit(1794410953.053:310): avc: denied { bpf } for pid=4128 comm="syz.2.177" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.562024][ T4129] No source specified [ 73.698020][ T30] audit: type=1400 audit(1794410953.243:311): avc: denied { module_request } for pid=4126 comm="syz.4.176" kmod="nfct-helper-syz1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 73.710441][ T4127] xt_CT: No such helper "syz1" [ 75.151823][ T4140] loop1: detected capacity change from 0 to 512 [ 75.191655][ T4123] loop0: detected capacity change from 0 to 1024 [ 75.195424][ T4123] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 75.195467][ T4123] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 75.195564][ T4123] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 75.202015][ T4123] EXT4-fs error (device loop0): ext4_get_journal_inode:5971: inode #5: comm syz.0.175: casefold flag without casefold feature [ 75.202040][ T4123] loop0: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 75.205349][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 75.205376][ C1] EXT4-fs (loop0): initial error at time 1794410954: ext4_get_journal_inode:5971: inode 5 [ 75.205477][ C1] EXT4-fs (loop0): last error at time 1794410954: ext4_get_journal_inode:5971: inode 5 [ 75.206037][ T4123] EXT4-fs (loop0): no journal found [ 76.391376][ T4140] loop1: detected capacity change from 0 to 1024 [ 76.426614][ T29] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 76.530007][ T30] audit: type=1400 audit(1794410956.083:312): avc: denied { write } for pid=4159 comm="syz.0.186" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 76.554392][ T30] audit: type=1400 audit(1794410956.103:313): avc: denied { write } for pid=4159 comm="syz.0.186" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 76.586413][ T4140] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 76.586645][ T4140] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 76.586984][ T4140] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 76.596579][ T4140] EXT4-fs error (device loop1): ext4_get_journal_inode:5971: inode #5: comm syz.1.180: casefold flag without casefold feature [ 76.596680][ T4140] loop1: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 76.597872][ T4140] EXT4-fs (loop1): no journal found [ 76.631403][ T4161] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 76.631429][ T4161] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 76.631604][ T4161] vhci_hcd vhci_hcd.0: Device attached [ 76.832520][ T4161] loop4: detected capacity change from 0 to 512 [ 76.847910][ T4161] EXT4-fs (loop4): unable to read superblock [ 76.918686][ T4166] vhci_hcd: connection closed [ 76.918948][ T33] vhci_hcd vhci_hcd.4: stop threads [ 76.918996][ T33] vhci_hcd vhci_hcd.4: release socket [ 76.919018][ T33] vhci_hcd vhci_hcd.4: disconnect device [ 76.926595][ T30] audit: type=1400 audit(1794410956.473:314): avc: denied { write } for pid=4174 comm="syz.1.190" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 76.945784][ T3387] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 76.945815][ T3387] usb 9-1: enqueue for inactive port 0 [ 76.945832][ T3387] usb 9-1: enqueue for inactive port 0 [ 76.945849][ T3387] usb 9-1: enqueue for inactive port 0 [ 77.015425][ T3387] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 77.165198][ T30] audit: type=1400 audit(1794410956.713:315): avc: denied { write } for pid=4174 comm="syz.1.190" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 77.917572][ T30] audit: type=1400 audit(1794410957.473:316): avc: denied { write } for pid=4186 comm="syz.4.193" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 79.216995][ T4193] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 79.217021][ T4193] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 79.217106][ T4193] vhci_hcd vhci_hcd.0: Device attached [ 80.280609][ T240] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.335337][ T10] usb 3-1: new high-speed USB device number 3 using vhci_hcd [ 80.362012][ T4193] loop1: detected capacity change from 0 to 512 [ 80.408781][ T4193] EXT4-fs (loop1): unable to read superblock [ 80.492934][ T4194] vhci_hcd: connection reset by peer [ 80.493133][ T240] vhci_hcd vhci_hcd.1: stop threads [ 80.493149][ T240] vhci_hcd vhci_hcd.1: release socket [ 80.493171][ T240] vhci_hcd vhci_hcd.1: disconnect device [ 80.565202][ T4214] FAULT_INJECTION: forcing a failure. [ 80.565202][ T4214] name failslab, interval 1, probability 0, space 0, times 0 [ 80.565291][ T4214] CPU: 0 UID: 0 PID: 4214 Comm: syz.4.201 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.565374][ T4214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 80.565394][ T4214] Call Trace: [ 80.565400][ T4214] [ 80.565407][ T4214] __dump_stack+0x1d/0x30 [ 80.565436][ T4214] dump_stack_lvl+0x95/0xd0 [ 80.565466][ T4214] dump_stack+0x15/0x1b [ 80.565490][ T4214] should_fail_ex+0x259/0x270 [ 80.565569][ T4214] ? security_file_alloc+0x32/0xf0 [ 80.565685][ T4214] should_failslab+0x8c/0xb0 [ 80.565731][ T4214] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 80.565763][ T4214] ? security_file_alloc+0x32/0xf0 [ 80.565851][ T4214] security_file_alloc+0x32/0xf0 [ 80.565886][ T4214] init_file+0x5b/0x1b0 [ 80.565973][ T4214] alloc_empty_file+0x85/0x1e0 [ 80.566000][ T4214] alloc_file_pseudo+0x92/0x120 [ 80.566025][ T4214] __shmem_file_setup+0x226/0x260 [ 80.566053][ T4214] shmem_kernel_file_setup+0x3e/0x50 [ 80.566084][ T4214] newseg+0x2b4/0x670 [ 80.566193][ T4214] ipcget+0x2dc/0x480 [ 80.566226][ T4214] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 80.566271][ T4214] __x64_sys_shmget+0xb8/0xe0 [ 80.566296][ T4214] x64_sys_call+0x2001/0x2550 [ 80.566376][ T4214] do_syscall_64+0x116/0x380 [ 80.566400][ T4214] ? clear_bhb_loop+0x70/0xc0 [ 80.566426][ T4214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.566449][ T4214] RIP: 0033:0x7f2021f88f19 [ 80.566473][ T4214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.566541][ T4214] RSP: 002b:00007f20209cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 80.566561][ T4214] RAX: ffffffffffffffda RBX: 00007f2022205fa0 RCX: 00007f2021f88f19 [ 80.566577][ T4214] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 0000000000000000 [ 80.566591][ T4214] RBP: 00007f2022017f6d R08: 0000000000000000 R09: 0000000000000000 [ 80.566657][ T4214] R10: 0000200000001000 R11: 0000000000000246 R12: 0000000000000000 [ 80.566671][ T4214] R13: 00007f2022206038 R14: 00007f2022205fa0 R15: 00007ffd838ed9c8 [ 80.566687][ T4214] [ 80.662278][ T4216] netlink: 'syz.4.201': attribute type 16 has an invalid length. [ 80.757622][ T4211] loop2: detected capacity change from 0 to 1024 [ 80.763393][ T4211] EXT4-fs: Ignoring removed bh option [ 80.790580][ T4211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.802238][ T4211] netlink: 136 bytes leftover after parsing attributes in process `syz.2.200'. [ 80.817520][ T30] audit: type=1400 audit(1794410960.373:317): avc: denied { write } for pid=4209 comm="syz.2.200" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.851827][ T4211] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 81.023069][ T4222] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 81.023095][ T4222] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 81.024411][ T4222] vhci_hcd vhci_hcd.0: Device attached [ 81.153024][ T4222] loop1: detected capacity change from 0 to 512 [ 81.169551][ T4222] EXT4-fs (loop1): unable to read superblock [ 82.285362][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 82.285457][ T3524] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 82.330845][ T4223] vhci_hcd: connection closed [ 82.331204][ T33] vhci_hcd vhci_hcd.1: stop threads [ 82.331292][ T33] vhci_hcd vhci_hcd.1: release socket [ 82.331314][ T33] vhci_hcd vhci_hcd.1: disconnect device [ 82.371719][ T3302] EXT4-fs error (device loop2): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /38/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 82.372526][ T3302] EXT4-fs (loop2): Remounting filesystem read-only [ 82.422338][ T30] audit: type=1400 audit(1794410961.923:318): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.422368][ T30] audit: type=1400 audit(1794410961.923:319): avc: denied { write } for pid=3302 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.422451][ T30] audit: type=1400 audit(1794410961.923:320): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.422471][ T30] audit: type=1400 audit(1794410961.923:321): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.422545][ T30] audit: type=1400 audit(1794410961.923:322): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.422570][ T30] audit: type=1400 audit(1794410961.923:323): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.422594][ T30] audit: type=1400 audit(1794410961.963:324): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.547201][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.589645][ T30] audit: type=1400 audit(1794410962.083:325): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.971193][ T4239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.205'. [ 83.155666][ T4242] netlink: 'syz.1.207': attribute type 16 has an invalid length. [ 83.155685][ T4242] netlink: 'syz.1.207': attribute type 17 has an invalid length. [ 83.155733][ T4242] netlink: 'syz.1.207': attribute type 27 has an invalid length. [ 84.480695][ T4245] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 84.480722][ T4245] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 84.481381][ T4245] vhci_hcd vhci_hcd.0: Device attached [ 84.554202][ T4250] loop1: detected capacity change from 0 to 512 [ 84.559823][ T4250] EXT4-fs (loop1): unable to read superblock [ 84.635060][ T4258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.212'. [ 84.700717][ T4246] vhci_hcd: connection closed [ 84.702436][ T4254] loop0: detected capacity change from 0 to 512 [ 84.703492][ T33] vhci_hcd vhci_hcd.1: stop threads [ 84.703511][ T33] vhci_hcd vhci_hcd.1: release socket [ 84.703601][ T33] vhci_hcd vhci_hcd.1: disconnect device [ 84.958997][ T4254] loop0: detected capacity change from 0 to 1024 [ 84.972748][ T4254] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 84.972978][ T4254] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 84.973267][ T4254] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 85.023982][ T4254] EXT4-fs error (device loop0): ext4_get_journal_inode:5971: inode #5: comm syz.0.211: casefold flag without casefold feature [ 85.024100][ T4254] loop0: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 85.025303][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 85.025324][ C0] EXT4-fs (loop0): initial error at time 1794410964: ext4_get_journal_inode:5971: inode 5 [ 85.025352][ C0] EXT4-fs (loop0): last error at time 1794410964: ext4_get_journal_inode:5971: inode 5 [ 85.029785][ T4269] Zero length message leads to an empty skb [ 85.050143][ T30] audit: type=1400 audit(1794410964.603:326): avc: denied { write } for pid=4268 comm="syz.2.215" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 85.056151][ T4254] EXT4-fs (loop0): no journal found [ 85.243528][ T4277] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 85.243628][ T4277] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 85.244564][ T4277] vhci_hcd vhci_hcd.0: Device attached [ 85.462840][ T4277] loop1: detected capacity change from 0 to 512 [ 85.497729][ T4277] EXT4-fs (loop1): unable to read superblock [ 85.499561][ T4281] loop2: detected capacity change from 0 to 512 [ 86.233306][ T4281] loop2: detected capacity change from 0 to 1024 [ 86.244968][ T4281] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 86.245097][ T4281] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 86.344863][ T4281] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 86.358692][ T4281] EXT4-fs error (device loop2): ext4_get_journal_inode:5971: inode #5: comm syz.2.219: casefold flag without casefold feature [ 86.358762][ T4281] loop2: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 86.359066][ T4281] EXT4-fs (loop2): no journal found [ 86.489681][ T4298] loop2: detected capacity change from 0 to 512 [ 88.117086][ T4307] loop3: detected capacity change from 0 to 512 [ 88.147190][ T4307] journal_path: Lookup failure for './file1' [ 88.147352][ T4307] EXT4-fs: error: could not find journal device path [ 88.313922][ T4298] loop2: detected capacity change from 0 to 1024 [ 88.333652][ T4298] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 88.333712][ T4298] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 88.333973][ T4298] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 88.349515][ T4298] EXT4-fs error (device loop2): ext4_get_journal_inode:5971: inode #5: comm syz.2.224: casefold flag without casefold feature [ 88.349586][ T4298] loop2: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 88.350416][ T4298] EXT4-fs (loop2): no journal found [ 88.367509][ T4278] vhci_hcd: connection reset by peer [ 88.382318][ T33] vhci_hcd vhci_hcd.1: stop threads [ 88.382336][ T33] vhci_hcd vhci_hcd.1: release socket [ 88.382361][ T33] vhci_hcd vhci_hcd.1: disconnect device [ 88.389395][ T4310] xt_CT: No such helper "syz1" [ 88.445748][ T10] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 88.548537][ T4322] loop3: detected capacity change from 0 to 512 [ 88.552331][ T4322] EXT4-fs: test_dummy_encryption option not supported [ 88.572937][ T4320] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 88.572988][ T4320] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 88.573058][ T4320] vhci_hcd vhci_hcd.0: Device attached [ 88.637194][ T4318] loop0: detected capacity change from 0 to 512 [ 88.640248][ T4318] journal_path: Lookup failure for './file1' [ 88.640366][ T4318] EXT4-fs: error: could not find journal device path [ 88.805352][ T3387] usb 9-1: new high-speed USB device number 3 using vhci_hcd [ 88.822095][ T4330] xt_CT: No such helper "syz1" [ 88.833386][ T4320] loop4: detected capacity change from 0 to 512 [ 88.846829][ T4320] EXT4-fs (loop4): unable to read superblock [ 88.882310][ T4328] loop2: detected capacity change from 0 to 512 [ 88.908223][ T4328] journal_path: Lookup failure for './file1' [ 88.908272][ T4328] EXT4-fs: error: could not find journal device path [ 88.931884][ T4323] vhci_hcd: connection reset by peer [ 88.933418][ T42] vhci_hcd vhci_hcd.4: stop threads [ 88.933437][ T42] vhci_hcd vhci_hcd.4: release socket [ 88.933460][ T42] vhci_hcd vhci_hcd.4: disconnect device [ 88.995454][ T4328] xt_CT: No such helper "syz1" [ 89.150411][ T4339] No source specified [ 93.955917][ T3387] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 94.417399][ T4366] loop1: detected capacity change from 0 to 512 [ 94.424754][ T4366] journal_path: Lookup failure for './file1' [ 94.424873][ T4366] EXT4-fs: error: could not find journal device path [ 94.475585][ T4371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'. [ 94.475805][ T4366] xt_CT: No such helper "syz1" [ 94.517335][ T4373] FAULT_INJECTION: forcing a failure. [ 94.517335][ T4373] name failslab, interval 1, probability 0, space 0, times 0 [ 94.517482][ T4373] CPU: 1 UID: 0 PID: 4373 Comm: syz.0.247 Not tainted syzkaller #0 PREEMPT(lazy) [ 94.517510][ T4373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 94.517525][ T4373] Call Trace: [ 94.517533][ T4373] [ 94.517542][ T4373] __dump_stack+0x1d/0x30 [ 94.517599][ T4373] dump_stack_lvl+0x95/0xd0 [ 94.517625][ T4373] dump_stack+0x15/0x1b [ 94.517646][ T4373] should_fail_ex+0x259/0x270 [ 94.517712][ T4373] ? security_inode_alloc+0x37/0x100 [ 94.517736][ T4373] should_failslab+0x8c/0xb0 [ 94.517812][ T4373] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 94.517846][ T4373] ? security_inode_alloc+0x37/0x100 [ 94.517877][ T4373] ? __init_rwsem+0x3e/0x60 [ 94.517902][ T4373] security_inode_alloc+0x37/0x100 [ 94.517940][ T4373] inode_init_always_gfp+0x49b/0x4e0 [ 94.517968][ T4373] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 94.518063][ T4373] alloc_inode+0x58/0x170 [ 94.518085][ T4373] new_inode+0x1d/0xe0 [ 94.518113][ T4373] shmem_get_inode+0x250/0x7b0 [ 94.518220][ T4373] __shmem_file_setup+0x1a0/0x260 [ 94.518354][ T4373] shmem_kernel_file_setup+0x3e/0x50 [ 94.518379][ T4373] newseg+0x2b4/0x670 [ 94.518405][ T4373] ipcget+0x2dc/0x480 [ 94.518493][ T4373] ? __se_sys_futex+0x2f6/0x370 [ 94.518545][ T4373] ? xfd_validate_state+0x45/0xf0 [ 94.518580][ T4373] __x64_sys_shmget+0xb8/0xe0 [ 94.518627][ T4373] x64_sys_call+0x2001/0x2550 [ 94.518657][ T4373] do_syscall_64+0x116/0x380 [ 94.518731][ T4373] ? clear_bhb_loop+0x70/0xc0 [ 94.518754][ T4373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.518778][ T4373] RIP: 0033:0x7fe107878f19 [ 94.518796][ T4373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.518817][ T4373] RSP: 002b:00007fe1062bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 94.518850][ T4373] RAX: ffffffffffffffda RBX: 00007fe107af5fa0 RCX: 00007fe107878f19 [ 94.518866][ T4373] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 0000000000000000 [ 94.518896][ T4373] RBP: 00007fe107907f6d R08: 0000000000000000 R09: 0000000000000000 [ 94.518911][ T4373] R10: 0000200000001000 R11: 0000000000000246 R12: 0000000000000000 [ 94.518981][ T4373] R13: 00007fe107af6038 R14: 00007fe107af5fa0 R15: 00007ffd10f8ba38 [ 94.518997][ T4373] [ 94.714513][ T4379] netlink: 'syz.0.247': attribute type 16 has an invalid length. [ 94.733571][ T4378] No source specified [ 94.841508][ T4383] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 94.841639][ T4383] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.841829][ T4383] vhci_hcd vhci_hcd.0: Device attached [ 94.974495][ T4383] loop3: detected capacity change from 0 to 512 [ 94.985617][ T4383] EXT4-fs (loop3): unable to read superblock [ 95.086743][ T1014] usb 7-1: new high-speed USB device number 3 using vhci_hcd [ 96.128730][ T4384] vhci_hcd: connection reset by peer [ 96.131376][ T3430] vhci_hcd vhci_hcd.3: stop threads [ 96.131396][ T3430] vhci_hcd vhci_hcd.3: release socket [ 96.131447][ T3430] vhci_hcd vhci_hcd.3: disconnect device [ 96.227134][ T4387] loop1: detected capacity change from 0 to 512 [ 96.303394][ T4399] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 96.691528][ T4387] loop1: detected capacity change from 0 to 1024 [ 96.727713][ T4411] No source specified [ 96.754220][ T4387] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 96.754329][ T4387] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 96.760137][ T4387] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 97.734304][ T4387] EXT4-fs error (device loop1): ext4_get_journal_inode:5971: inode #5: comm syz.1.252: casefold flag without casefold feature [ 97.734382][ T4387] loop1: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 97.734885][ T4387] EXT4-fs (loop1): no journal found [ 97.819470][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 97.819565][ T30] audit: type=1400 audit(1794410977.333:328): avc: denied { write } for pid=4420 comm="syz.2.261" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 98.281259][ T30] audit: type=1400 audit(1794410977.833:329): avc: denied { write } for pid=4420 comm="syz.2.261" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 98.477007][ T4427] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 98.839352][ T4443] No source specified [ 98.862228][ T4446] netlink: 'syz.2.268': attribute type 16 has an invalid length. [ 98.862296][ T4446] netlink: 'syz.2.268': attribute type 17 has an invalid length. [ 98.862374][ T4446] netlink: 'syz.2.268': attribute type 27 has an invalid length. [ 98.901495][ T4448] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 98.901518][ T4448] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.901856][ T4448] vhci_hcd vhci_hcd.0: Device attached [ 98.904269][ T4445] loop0: detected capacity change from 0 to 512 [ 98.940626][ T4445] journal_path: Lookup failure for './file1' [ 98.940696][ T4445] EXT4-fs: error: could not find journal device path [ 99.024090][ T4448] loop4: detected capacity change from 0 to 512 [ 99.053675][ T4448] EXT4-fs (loop4): unable to read superblock [ 99.135340][ T3378] usb 9-1: new high-speed USB device number 4 using vhci_hcd [ 99.153903][ T4445] xt_CT: No such helper "syz1" [ 99.737469][ T4449] vhci_hcd: connection reset by peer [ 99.739558][ T240] vhci_hcd vhci_hcd.4: stop threads [ 99.739574][ T240] vhci_hcd vhci_hcd.4: release socket [ 99.739637][ T240] vhci_hcd vhci_hcd.4: disconnect device [ 99.875318][ T4458] loop0: detected capacity change from 0 to 512 [ 99.882724][ T4458] journal_path: Lookup failure for './file1' [ 99.882863][ T4458] EXT4-fs: error: could not find journal device path [ 100.047942][ T4458] xt_CT: No such helper "syz1" [ 100.096878][ T4461] loop1: detected capacity change from 0 to 512 [ 100.121973][ T4461] journal_path: Lookup failure for './file1' [ 100.122191][ T4461] EXT4-fs: error: could not find journal device path [ 100.205677][ T1014] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 100.226829][ T4471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 100.271993][ T4473] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 100.343607][ T4461] xt_CT: No such helper "syz1" [ 101.050038][ T4490] netlink: 'syz.0.284': attribute type 16 has an invalid length. [ 101.050072][ T4490] netlink: 'syz.0.284': attribute type 17 has an invalid length. [ 101.050083][ T4490] netlink: 'syz.0.284': attribute type 27 has an invalid length. [ 101.644537][ T30] audit: type=1400 audit(1794410981.193:330): avc: denied { write } for pid=4505 comm="syz.4.289" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 101.676991][ T30] audit: type=1400 audit(1794410981.233:331): avc: denied { write } for pid=4505 comm="syz.4.289" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.275863][ T4509] loop0: detected capacity change from 0 to 512 [ 104.276273][ T3378] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 104.531077][ T4522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 104.582102][ T4520] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 106.054861][ T4509] loop0: detected capacity change from 0 to 1024 [ 106.088431][ T4509] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 106.088563][ T4509] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 106.088901][ T4509] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 106.094173][ T4509] EXT4-fs error (device loop0): ext4_get_journal_inode:5971: inode #5: comm syz.0.287: casefold flag without casefold feature [ 106.094349][ T4509] loop0: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 106.095185][ T4509] EXT4-fs (loop0): no journal found [ 106.095406][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 106.095446][ C0] EXT4-fs (loop0): initial error at time 1794410985: ext4_get_journal_inode:5971: inode 5 [ 106.095576][ C0] EXT4-fs (loop0): last error at time 1794410985: ext4_get_journal_inode:5971: inode 5 [ 107.489248][ T4552] FAULT_INJECTION: forcing a failure. [ 107.489248][ T4552] name failslab, interval 1, probability 0, space 0, times 0 [ 107.489356][ T4552] CPU: 0 UID: 0 PID: 4552 Comm: syz.1.301 Not tainted syzkaller #0 PREEMPT(lazy) [ 107.489379][ T4552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 107.489392][ T4552] Call Trace: [ 107.489400][ T4552] [ 107.489409][ T4552] __dump_stack+0x1d/0x30 [ 107.489437][ T4552] dump_stack_lvl+0x95/0xd0 [ 107.489532][ T4552] dump_stack+0x15/0x1b [ 107.489556][ T4552] should_fail_ex+0x259/0x270 [ 107.489594][ T4552] should_failslab+0x8c/0xb0 [ 107.489629][ T4552] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 107.489658][ T4552] ? __d_alloc+0x34/0x320 [ 107.489742][ T4552] ? __d_alloc+0x34/0x320 [ 107.489768][ T4552] __d_alloc+0x34/0x320 [ 107.489845][ T4552] ? d_alloc_pseudo+0x13/0x80 [ 107.489878][ T4552] d_alloc_pseudo+0x1e/0x80 [ 107.489905][ T4552] alloc_path_pseudo+0xa4/0x140 [ 107.489976][ T4552] alloc_file_pseudo+0x55/0x120 [ 107.490002][ T4552] __shmem_file_setup+0x226/0x260 [ 107.490035][ T4552] shmem_kernel_file_setup+0x3e/0x50 [ 107.490115][ T4552] newseg+0x2b4/0x670 [ 107.490144][ T4552] ipcget+0x2dc/0x480 [ 107.490215][ T4552] ? __se_sys_futex+0x2f6/0x370 [ 107.490332][ T4552] ? xfd_validate_state+0x45/0xf0 [ 107.490371][ T4552] __x64_sys_shmget+0xb8/0xe0 [ 107.490403][ T4552] x64_sys_call+0x2001/0x2550 [ 107.490493][ T4552] do_syscall_64+0x116/0x380 [ 107.490544][ T4552] ? clear_bhb_loop+0x70/0xc0 [ 107.490604][ T4552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.490624][ T4552] RIP: 0033:0x7fda5bca8f19 [ 107.490640][ T4552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.490658][ T4552] RSP: 002b:00007fda5a6f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 107.490676][ T4552] RAX: ffffffffffffffda RBX: 00007fda5bf25fa0 RCX: 00007fda5bca8f19 [ 107.490694][ T4552] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 0000000000000000 [ 107.490705][ T4552] RBP: 00007fda5bd37f6d R08: 0000000000000000 R09: 0000000000000000 [ 107.490717][ T4552] R10: 0000200000001000 R11: 0000000000000246 R12: 0000000000000000 [ 107.490742][ T4552] R13: 00007fda5bf26038 R14: 00007fda5bf25fa0 R15: 00007fff9dbfc1b8 [ 107.490762][ T4552] [ 107.902058][ T4553] netlink: 'syz.1.301': attribute type 16 has an invalid length. [ 108.390615][ T4562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 108.503768][ T4565] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 109.150581][ T4576] FAULT_INJECTION: forcing a failure. [ 109.150581][ T4576] name failslab, interval 1, probability 0, space 0, times 0 [ 109.150806][ T4576] CPU: 0 UID: 0 PID: 4576 Comm: syz.0.310 Not tainted syzkaller #0 PREEMPT(lazy) [ 109.150829][ T4576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 109.150843][ T4576] Call Trace: [ 109.150850][ T4576] [ 109.150857][ T4576] __dump_stack+0x1d/0x30 [ 109.150927][ T4576] dump_stack_lvl+0x95/0xd0 [ 109.150953][ T4576] dump_stack+0x15/0x1b [ 109.151047][ T4576] should_fail_ex+0x259/0x270 [ 109.151080][ T4576] ? security_inode_alloc+0x37/0x100 [ 109.151118][ T4576] should_failslab+0x8c/0xb0 [ 109.151180][ T4576] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 109.151217][ T4576] ? security_inode_alloc+0x37/0x100 [ 109.151251][ T4576] security_inode_alloc+0x37/0x100 [ 109.151306][ T4576] inode_init_always_gfp+0x49b/0x4e0 [ 109.151340][ T4576] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 109.151429][ T4576] alloc_inode+0x58/0x170 [ 109.151454][ T4576] new_inode+0x1d/0xe0 [ 109.151483][ T4576] shmem_get_inode+0x250/0x7b0 [ 109.151544][ T4576] __shmem_file_setup+0x1a0/0x260 [ 109.151577][ T4576] shmem_kernel_file_setup+0x3e/0x50 [ 109.151682][ T4576] newseg+0x2b4/0x670 [ 109.151785][ T4576] ipcget+0x2dc/0x480 [ 109.151817][ T4576] ? xfd_validate_state+0x45/0xf0 [ 109.151869][ T4576] ? restore_fpregs_from_fpstate+0x61/0x110 [ 109.151897][ T4576] __x64_sys_shmget+0xb8/0xe0 [ 109.151931][ T4576] x64_sys_call+0x2001/0x2550 [ 109.151960][ T4576] do_syscall_64+0x116/0x380 [ 109.152016][ T4576] ? clear_bhb_loop+0x70/0xc0 [ 109.152114][ T4576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.152134][ T4576] RIP: 0033:0x7fe107878f19 [ 109.152148][ T4576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.152167][ T4576] RSP: 002b:00007fe1062bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 109.152189][ T4576] RAX: ffffffffffffffda RBX: 00007fe107af5fa0 RCX: 00007fe107878f19 [ 109.152245][ T4576] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 0000000000000000 [ 109.152259][ T4576] RBP: 00007fe107907f6d R08: 0000000000000000 R09: 0000000000000000 [ 109.152273][ T4576] R10: 0000200000001000 R11: 0000000000000246 R12: 0000000000000000 [ 109.152289][ T4576] R13: 00007fe107af6038 R14: 00007fe107af5fa0 R15: 00007ffd10f8ba38 [ 109.152311][ T4576] [ 109.272426][ T4578] netlink: 'syz.0.310': attribute type 16 has an invalid length. [ 111.114566][ T4584] loop4: detected capacity change from 0 to 512 [ 112.018488][ T4595] netlink: 'syz.1.315': attribute type 16 has an invalid length. [ 112.018505][ T4595] netlink: 'syz.1.315': attribute type 17 has an invalid length. [ 112.018515][ T4595] netlink: 'syz.1.315': attribute type 27 has an invalid length. [ 112.113109][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 112.223735][ T4600] FAULT_INJECTION: forcing a failure. [ 112.223735][ T4600] name failslab, interval 1, probability 0, space 0, times 0 [ 112.299655][ T4584] loop4: detected capacity change from 0 to 1024 [ 112.319160][ T4600] CPU: 0 UID: 0 PID: 4600 Comm: syz.0.317 Not tainted syzkaller #0 PREEMPT(lazy) [ 112.319188][ T4600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 112.319279][ T4600] Call Trace: [ 112.319288][ T4600] [ 112.319296][ T4600] __dump_stack+0x1d/0x30 [ 112.319322][ T4600] dump_stack_lvl+0x95/0xd0 [ 112.319417][ T4600] dump_stack+0x15/0x1b [ 112.319438][ T4600] should_fail_ex+0x259/0x270 [ 112.319471][ T4600] should_failslab+0x8c/0xb0 [ 112.319556][ T4600] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 112.319589][ T4600] ? __d_alloc+0x34/0x320 [ 112.319671][ T4600] ? __d_alloc+0x34/0x320 [ 112.319728][ T4600] __d_alloc+0x34/0x320 [ 112.319751][ T4600] ? d_alloc_pseudo+0x13/0x80 [ 112.319778][ T4600] d_alloc_pseudo+0x1e/0x80 [ 112.319889][ T4600] alloc_path_pseudo+0xa4/0x140 [ 112.319934][ T4600] alloc_file_pseudo+0x55/0x120 [ 112.319961][ T4600] __shmem_file_setup+0x226/0x260 [ 112.319988][ T4600] shmem_kernel_file_setup+0x3e/0x50 [ 112.320017][ T4600] newseg+0x2b4/0x670 [ 112.320055][ T4600] ipcget+0x2dc/0x480 [ 112.320082][ T4600] ? __se_sys_futex+0x2f6/0x370 [ 112.320103][ T4600] ? xfd_validate_state+0x45/0xf0 [ 112.320164][ T4600] __x64_sys_shmget+0xb8/0xe0 [ 112.320204][ T4600] x64_sys_call+0x2001/0x2550 [ 112.320280][ T4600] do_syscall_64+0x116/0x380 [ 112.320301][ T4600] ? clear_bhb_loop+0x70/0xc0 [ 112.320395][ T4600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.320417][ T4600] RIP: 0033:0x7fe107878f19 [ 112.320489][ T4600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.320506][ T4600] RSP: 002b:00007fe1062bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 112.320528][ T4600] RAX: ffffffffffffffda RBX: 00007fe107af5fa0 RCX: 00007fe107878f19 [ 112.320568][ T4600] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 0000000000000000 [ 112.320627][ T4600] RBP: 00007fe107907f6d R08: 0000000000000000 R09: 0000000000000000 [ 112.320642][ T4600] R10: 0000200000001000 R11: 0000000000000246 R12: 0000000000000000 [ 112.320654][ T4600] R13: 00007fe107af6038 R14: 00007fe107af5fa0 R15: 00007ffd10f8ba38 [ 112.320670][ T4600] [ 112.443280][ T4584] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 112.443340][ T4584] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 112.447626][ T4584] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 112.463773][ T4603] netlink: 'syz.0.317': attribute type 16 has an invalid length. [ 112.474631][ T4584] EXT4-fs error (device loop4): ext4_get_journal_inode:5971: inode #5: comm syz.4.313: casefold flag without casefold feature [ 112.474751][ T4584] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 112.475259][ T4584] EXT4-fs (loop4): no journal found [ 112.475327][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 112.475386][ C0] EXT4-fs (loop4): initial error at time 1794410992: ext4_get_journal_inode:5971: inode 5 [ 112.475458][ C0] EXT4-fs (loop4): last error at time 1794410992: ext4_get_journal_inode:5971: inode 5 [ 112.853970][ T4622] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.951570][ T4621] loop3: detected capacity change from 0 to 512 [ 112.984072][ T4621] loop3: detected capacity change from 0 to 1024 [ 112.984707][ T4621] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 112.984730][ T4621] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 112.984766][ T4621] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 112.987798][ T4621] EXT4-fs error (device loop3): ext4_get_journal_inode:5971: inode #5: comm syz.3.324: casefold flag without casefold feature [ 112.987825][ T4621] loop3: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 112.987925][ T4621] EXT4-fs (loop3): no journal found [ 113.291543][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.327'. [ 113.472867][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.327'. [ 113.529826][ T4635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 114.004094][ T4648] No source specified [ 114.863534][ T3430] Bluetooth: hci0: Frame reassembly failed (-84) [ 114.864293][ T4658] loop2: detected capacity change from 0 to 512 [ 116.281255][ T4665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 116.363802][ T4658] loop2: detected capacity change from 0 to 1024 [ 116.364368][ T4658] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 116.364388][ T4658] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 116.364460][ T4658] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 116.365199][ T4658] EXT4-fs error (device loop2): ext4_get_journal_inode:5971: inode #5: comm syz.2.337: casefold flag without casefold feature [ 116.365220][ T4658] loop2: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 116.460611][ T4658] EXT4-fs (loop2): no journal found [ 116.479252][ T4673] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 117.336421][ T3524] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 117.445000][ T4681] No source specified [ 117.461882][ T4685] loop2: detected capacity change from 0 to 512 [ 117.462680][ T4685] EXT4-fs: test_dummy_encryption option not supported [ 117.568183][ T4691] loop3: detected capacity change from 0 to 512 [ 117.569623][ T4691] EXT4-fs: test_dummy_encryption option not supported [ 118.123936][ T4698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'. [ 118.217677][ T30] audit: type=1400 audit(1794410997.773:332): avc: denied { write } for pid=4699 comm="syz.3.354" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 118.254885][ T30] audit: type=1400 audit(1794410997.813:333): avc: denied { write } for pid=4699 comm="syz.3.354" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 119.321763][ T4706] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 119.395743][ T4708] loop3: detected capacity change from 0 to 512 [ 119.412011][ T4708] journal_path: Lookup failure for './file1' [ 119.412161][ T4708] EXT4-fs: error: could not find journal device path [ 119.482866][ T4712] No source specified [ 119.588546][ T4708] xt_CT: No such helper "syz1" [ 119.647390][ T4722] loop1: detected capacity change from 0 to 512 [ 119.650140][ T4722] EXT4-fs: test_dummy_encryption option not supported [ 119.682696][ T4724] loop4: detected capacity change from 0 to 512 [ 120.056409][ T4724] loop4: detected capacity change from 0 to 1024 [ 120.066485][ T4731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 120.091878][ T4724] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 120.091999][ T4724] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 120.092289][ T4724] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 120.135212][ T4724] EXT4-fs error (device loop4): ext4_get_journal_inode:5971: inode #5: comm syz.4.363: casefold flag without casefold feature [ 120.135936][ T4724] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 120.136539][ T4724] EXT4-fs (loop4): no journal found [ 120.372518][ T4733] loop3: detected capacity change from 0 to 512 [ 120.383973][ T4733] journal_path: Lookup failure for './file1' [ 120.384174][ T4733] EXT4-fs: error: could not find journal device path [ 120.512625][ T4733] xt_CT: No such helper "syz1" [ 120.576325][ T30] audit: type=1326 audit(1794411000.133:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4739 comm="syz.1.368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5bca8f19 code=0x7ffc0000 [ 120.576478][ T30] audit: type=1326 audit(1794411000.133:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4739 comm="syz.1.368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5bca8f19 code=0x7ffc0000 [ 120.576699][ T30] audit: type=1326 audit(1794411000.133:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4739 comm="syz.1.368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5bca8f19 code=0x7ffc0000 [ 120.576997][ T30] audit: type=1326 audit(1794411000.133:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4739 comm="syz.1.368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5bca8f19 code=0x7ffc0000 [ 120.577138][ T30] audit: type=1326 audit(1794411000.133:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4739 comm="syz.1.368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fda5bca8f19 code=0x7ffc0000 [ 120.577309][ T30] audit: type=1326 audit(1794411000.133:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4739 comm="syz.1.368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5bca8f19 code=0x7ffc0000 [ 120.577463][ T30] audit: type=1326 audit(1794411000.133:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4739 comm="syz.1.368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5bca8f19 code=0x7ffc0000 [ 120.577658][ T30] audit: type=1326 audit(1794411000.133:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4739 comm="syz.1.368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5bca8f19 code=0x7ffc0000 [ 120.638464][ T4749] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 120.901851][ T4754] netlink: 'syz.4.371': attribute type 16 has an invalid length. [ 120.901920][ T4754] netlink: 'syz.4.371': attribute type 17 has an invalid length. [ 120.901960][ T4754] netlink: 'syz.4.371': attribute type 27 has an invalid length. [ 121.878104][ T4763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'. [ 121.916894][ T4763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'. [ 121.991962][ T4765] loop3: detected capacity change from 0 to 512 [ 122.040809][ T4771] loop0: detected capacity change from 0 to 512 [ 122.041681][ T4769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 122.044380][ T4771] EXT4-fs: test_dummy_encryption option not supported [ 122.084726][ T4767] No source specified [ 122.440853][ T4765] loop3: detected capacity change from 0 to 1024 [ 122.461340][ T4765] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 122.461580][ T4765] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 122.461870][ T4765] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 122.474938][ T4765] EXT4-fs error (device loop3): ext4_get_journal_inode:5971: inode #5: comm syz.3.378: casefold flag without casefold feature [ 122.475304][ T4765] loop3: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 122.475652][ T4765] EXT4-fs (loop3): no journal found [ 122.765003][ T4790] netlink: 'syz.0.385': attribute type 16 has an invalid length. [ 122.765085][ T4790] netlink: 'syz.0.385': attribute type 17 has an invalid length. [ 122.765194][ T4790] netlink: 'syz.0.385': attribute type 27 has an invalid length. [ 122.920998][ T4793] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 124.170445][ T4805] No source specified [ 124.220473][ T4810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 124.490580][ T4812] loop4: detected capacity change from 0 to 512 [ 125.843072][ T4816] loop3: detected capacity change from 0 to 512 [ 125.844800][ T4816] EXT4-fs: test_dummy_encryption option not supported [ 126.003847][ T4824] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 126.014911][ T4825] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 126.016546][ T4826] netlink: 'syz.1.397': attribute type 16 has an invalid length. [ 126.016561][ T4826] netlink: 'syz.1.397': attribute type 17 has an invalid length. [ 126.016572][ T4826] netlink: 'syz.1.397': attribute type 27 has an invalid length. [ 126.080269][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 126.080286][ T30] audit: type=1400 audit(1794411005.633:359): avc: denied { write } for pid=4827 comm="syz.2.400" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 126.114156][ T30] audit: type=1400 audit(1794411005.663:360): avc: denied { write } for pid=4827 comm="syz.2.400" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 126.263869][ T4812] loop4: detected capacity change from 0 to 1024 [ 126.316712][ T4812] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 126.316831][ T4812] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 126.317012][ T4812] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 126.321147][ T4812] EXT4-fs error (device loop4): ext4_get_journal_inode:5971: inode #5: comm syz.4.393: casefold flag without casefold feature [ 126.321327][ T4812] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 126.321672][ T4812] EXT4-fs (loop4): no journal found [ 126.403886][ T4837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 126.638905][ T4842] loop3: detected capacity change from 0 to 512 [ 126.673281][ T4841] loop4: detected capacity change from 0 to 512 [ 126.687785][ T4841] EXT4-fs: test_dummy_encryption option not supported [ 126.689674][ T4842] EXT4-fs: test_dummy_encryption option not supported [ 127.068933][ T4848] loop1: detected capacity change from 0 to 512 [ 127.073444][ T4848] journal_path: Lookup failure for './file1' [ 127.073475][ T4848] EXT4-fs: error: could not find journal device path [ 127.110726][ T4848] xt_CT: No such helper "syz1" [ 127.217809][ T4854] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 127.701945][ T4859] netlink: 'syz.3.412': attribute type 16 has an invalid length. [ 127.702034][ T4859] netlink: 'syz.3.412': attribute type 17 has an invalid length. [ 127.702174][ T4859] netlink: 'syz.3.412': attribute type 27 has an invalid length. [ 128.497133][ T4867] loop1: detected capacity change from 0 to 512 [ 129.480111][ T4869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 129.512994][ T4867] loop1: detected capacity change from 0 to 1024 [ 129.522169][ T4867] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 129.522191][ T4867] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 129.522290][ T4867] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 129.522551][ T4871] loop2: detected capacity change from 0 to 512 [ 129.522892][ T4871] EXT4-fs: test_dummy_encryption option not supported [ 129.523772][ T4867] EXT4-fs error (device loop1): ext4_get_journal_inode:5971: inode #5: comm syz.1.414: casefold flag without casefold feature [ 129.523797][ T4867] loop1: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 129.524223][ T4867] EXT4-fs (loop1): no journal found [ 129.767646][ T4881] No source specified [ 130.467320][ T4894] loop2: detected capacity change from 0 to 512 [ 130.474467][ T4894] journal_path: Lookup failure for './file1' [ 130.474619][ T4894] EXT4-fs: error: could not find journal device path [ 130.618551][ T4899] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 130.729040][ T4894] xt_CT: No such helper "syz1" [ 131.671253][ T4913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.430'. [ 131.860767][ T4920] loop4: detected capacity change from 0 to 512 [ 132.023763][ T4920] loop4: detected capacity change from 0 to 1024 [ 132.038524][ T4920] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 132.038550][ T4920] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 132.038583][ T4920] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 132.040565][ T4920] EXT4-fs error (device loop4): ext4_get_journal_inode:5971: inode #5: comm syz.4.433: casefold flag without casefold feature [ 132.040593][ T4920] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 132.042081][ T4920] EXT4-fs (loop4): no journal found [ 132.299027][ T4931] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 132.299054][ T4931] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 132.299764][ T4931] vhci_hcd vhci_hcd.0: Device attached [ 132.535495][ T1014] usb 9-1: new high-speed USB device number 5 using vhci_hcd [ 132.589224][ T4931] loop4: detected capacity change from 0 to 512 [ 132.591097][ T4943] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 132.623594][ T4931] EXT4-fs (loop4): unable to read superblock [ 134.248231][ T4935] vhci_hcd: connection reset by peer [ 134.248494][ T240] vhci_hcd vhci_hcd.4: stop threads [ 134.248511][ T240] vhci_hcd vhci_hcd.4: release socket [ 134.248529][ T240] vhci_hcd vhci_hcd.4: disconnect device [ 135.792040][ T4975] loop0: detected capacity change from 0 to 512 [ 136.425665][ T4975] EXT4-fs: test_dummy_encryption option not supported [ 136.634046][ T4982] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 136.694245][ T4984] loop1: detected capacity change from 0 to 512 [ 136.777826][ T4990] loop3: detected capacity change from 0 to 512 [ 136.790877][ T4990] EXT4-fs: test_dummy_encryption option not supported [ 136.932727][ T4984] loop1: detected capacity change from 0 to 1024 [ 136.950980][ T4984] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 136.951172][ T4984] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 136.951340][ T4984] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 136.954052][ T4984] EXT4-fs error (device loop1): ext4_get_journal_inode:5971: inode #5: comm syz.1.451: casefold flag without casefold feature [ 136.954155][ T4984] loop1: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 136.954453][ T4984] EXT4-fs (loop1): no journal found [ 137.074091][ T4996] netlink: 'syz.1.456': attribute type 16 has an invalid length. [ 137.074252][ T4996] netlink: 'syz.1.456': attribute type 17 has an invalid length. [ 137.074301][ T4996] netlink: 'syz.1.456': attribute type 27 has an invalid length. [ 137.159719][ T5004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.460'. [ 137.647823][ T1014] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 139.211428][ T5021] netlink: 'syz.2.466': attribute type 16 has an invalid length. [ 139.211447][ T5021] netlink: 'syz.2.466': attribute type 17 has an invalid length. [ 139.211479][ T5021] netlink: 'syz.2.466': attribute type 27 has an invalid length. [ 139.284966][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 139.420854][ T5035] loop1: detected capacity change from 0 to 512 [ 139.422677][ T5035] EXT4-fs: test_dummy_encryption option not supported [ 139.963405][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.474'. [ 140.178631][ T5049] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 141.329233][ T5055] netlink: 'syz.3.479': attribute type 16 has an invalid length. [ 141.329301][ T5055] netlink: 'syz.3.479': attribute type 17 has an invalid length. [ 141.329373][ T5055] netlink: 'syz.3.479': attribute type 27 has an invalid length. [ 141.397953][ T5051] loop4: detected capacity change from 0 to 512 [ 141.642718][ T5066] loop0: detected capacity change from 0 to 512 [ 141.644746][ T5066] EXT4-fs: test_dummy_encryption option not supported [ 141.709598][ T5051] loop4: detected capacity change from 0 to 1024 [ 141.717316][ T5051] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 141.717517][ T5051] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 141.719860][ T5051] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 141.730697][ T5051] EXT4-fs error (device loop4): ext4_get_journal_inode:5971: inode #5: comm syz.4.477: casefold flag without casefold feature [ 141.730765][ T5051] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 141.731598][ T5051] EXT4-fs (loop4): no journal found [ 141.796926][ T5069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'. [ 141.869416][ T5073] No source specified [ 141.912500][ T5077] loop1: detected capacity change from 0 to 512 [ 141.914497][ T5077] EXT4-fs: test_dummy_encryption option not supported [ 142.055683][ T5081] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 143.485495][ T3524] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 143.688662][ T5101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.497'. [ 144.022656][ T5115] loop2: detected capacity change from 0 to 512 [ 144.031622][ T5115] EXT4-fs: test_dummy_encryption option not supported [ 144.485029][ T5123] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 146.455029][ T3430] Bluetooth: hci0: Frame reassembly failed (-84) [ 146.480876][ T5136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.509'. [ 148.526804][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 148.526829][ T3524] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 149.632314][ T5161] loop1: detected capacity change from 0 to 512 [ 149.652463][ T5161] EXT4-fs: test_dummy_encryption option not supported [ 149.762188][ T5170] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 149.773591][ T5174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 152.140851][ T5205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.533'. [ 152.286074][ T5212] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 152.321165][ T5214] loop0: detected capacity change from 0 to 512 [ 152.322945][ T5214] EXT4-fs: test_dummy_encryption option not supported [ 154.125107][ T3430] Bluetooth: hci0: Frame reassembly failed (-84) [ 156.069896][ T5242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'. [ 156.125729][ T3524] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 156.728836][ T5262] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 156.762374][ T5251] netlink: 'syz.0.551': attribute type 16 has an invalid length. [ 156.762565][ T5251] netlink: 'syz.0.551': attribute type 17 has an invalid length. [ 156.762586][ T5251] netlink: 'syz.0.551': attribute type 27 has an invalid length. [ 157.284844][ T5278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 157.881533][ T5300] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 157.919840][ T30] audit: type=1400 audit(1794411037.473:361): avc: denied { write } for pid=5302 comm="syz.2.566" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 157.940877][ T30] audit: type=1400 audit(1794411037.493:362): avc: denied { write } for pid=5302 comm="syz.2.566" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 158.705431][ T5307] No source specified [ 161.508782][ T5318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 162.020887][ T5332] loop0: detected capacity change from 0 to 512 [ 162.694829][ T5352] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 163.064223][ T5356] loop4: detected capacity change from 0 to 512 [ 163.266068][ T5332] loop0: detected capacity change from 0 to 1024 [ 163.271320][ T5332] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 163.271471][ T5332] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 163.271793][ T5332] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 163.276464][ T5332] EXT4-fs error (device loop0): ext4_get_journal_inode:5971: inode #5: comm syz.0.577: casefold flag without casefold feature [ 163.276566][ T5332] loop0: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 163.277105][ T5332] EXT4-fs (loop0): no journal found [ 163.866752][ T5356] loop4: detected capacity change from 0 to 1024 [ 163.887206][ T5356] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 163.887827][ T5356] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 163.890134][ T5356] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 163.902106][ T5356] EXT4-fs error (device loop4): ext4_get_journal_inode:5971: inode #5: comm syz.4.583: casefold flag without casefold feature [ 163.902166][ T5356] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 163.902740][ T5356] EXT4-fs (loop4): no journal found [ 163.998520][ T5368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 165.496093][ T5390] netlink: 'syz.4.594': attribute type 16 has an invalid length. [ 165.496203][ T5390] netlink: 'syz.4.594': attribute type 17 has an invalid length. [ 165.496216][ T5390] netlink: 'syz.4.594': attribute type 27 has an invalid length. [ 166.488896][ T5401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.598'. [ 166.638266][ T5410] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 168.819981][ T5438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'. [ 169.058347][ T5440] loop3: detected capacity change from 0 to 512 [ 169.608582][ T5451] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 171.832691][ T5457] loop2: detected capacity change from 0 to 512 [ 171.833020][ T5457] EXT4-fs: test_dummy_encryption option not supported [ 171.913592][ T3430] Bluetooth: hci0: Frame reassembly failed (-84) [ 173.707052][ T5476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 173.816052][ T5483] loop3: detected capacity change from 0 to 512 [ 173.818153][ T5483] EXT4-fs: test_dummy_encryption option not supported [ 173.965375][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 174.180619][ T5493] loop0: detected capacity change from 0 to 512 [ 174.471621][ T5498] loop3: detected capacity change from 0 to 512 [ 174.471993][ T5498] EXT4-fs: test_dummy_encryption option not supported [ 175.730627][ T5506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 175.775236][ T5509] loop1: detected capacity change from 0 to 512 [ 175.778409][ T5509] EXT4-fs: test_dummy_encryption option not supported [ 175.977569][ T5493] loop0: detected capacity change from 0 to 1024 [ 175.999612][ T5493] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 176.000003][ T5493] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 176.002192][ T5493] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 176.153740][ T30] audit: type=1400 audit(1794411055.553:363): avc: denied { write } for pid=5515 comm="syz.4.639" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 176.154262][ T5493] EXT4-fs error (device loop0): ext4_get_journal_inode:5971: inode #5: comm syz.0.631: casefold flag without casefold feature [ 176.154362][ T5493] loop0: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 176.177348][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 176.177374][ C0] EXT4-fs (loop0): initial error at time 1794411055: ext4_get_journal_inode:5971: inode 5 [ 176.177405][ C0] EXT4-fs (loop0): last error at time 1794411055: ext4_get_journal_inode:5971: inode 5 [ 176.208434][ T5493] EXT4-fs (loop0): no journal found [ 176.237603][ T30] audit: type=1400 audit(1794411055.793:364): avc: denied { write } for pid=5515 comm="syz.4.639" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 178.403650][ T5543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'. [ 178.445014][ T30] audit: type=1400 audit(1794411057.993:365): avc: denied { write } for pid=5545 comm="syz.0.651" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 178.495700][ T30] audit: type=1400 audit(1794411058.053:366): avc: denied { write } for pid=5545 comm="syz.0.651" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 178.586216][ T5553] loop2: detected capacity change from 0 to 512 [ 178.589246][ T5553] EXT4-fs: test_dummy_encryption option not supported [ 180.205041][ T5560] loop1: detected capacity change from 0 to 512 [ 180.394521][ T42] Bluetooth: hci0: Frame reassembly failed (-84) [ 180.448204][ T5560] loop1: detected capacity change from 0 to 1024 [ 180.453980][ T5560] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 180.454112][ T5560] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 180.454421][ T5560] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 180.472058][ T5560] EXT4-fs error (device loop1): ext4_get_journal_inode:5971: inode #5: comm syz.1.654: casefold flag without casefold feature [ 180.472238][ T5560] loop1: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 180.472934][ T5560] EXT4-fs (loop1): no journal found [ 180.587756][ T5581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.662'. [ 180.692527][ T30] audit: type=1400 audit(1794411060.243:367): avc: denied { write } for pid=5586 comm="syz.2.665" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 180.715136][ T30] audit: type=1400 audit(1794411060.253:368): avc: denied { write } for pid=5586 comm="syz.2.665" name="instances" dev="tracefs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 182.442463][ T5592] loop4: detected capacity change from 0 to 512 [ 182.452823][ T30] audit: type=1400 audit(1794411062.003:369): avc: denied { wake_alarm } for pid=5590 comm="syz.4.666" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 182.454934][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 182.454960][ T3524] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 182.535177][ T5595] loop4: detected capacity change from 0 to 1024 [ 182.545729][ T5595] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 182.548201][ T5595] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8800e118, mo2=0000] [ 182.549211][ T30] audit: type=1400 audit(1794411062.103:370): avc: denied { ioctl } for pid=5598 comm="syz.2.669" path="socket:[13618]" dev="sockfs" ino=13618 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 182.549595][ T5595] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #3: block 2: comm syz.4.666: lblock 2 mapped to illegal pblock 2 (length 1) [ 182.549627][ T5595] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 182.550835][ T5595] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 182.550855][ T5595] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #3: block 48: comm syz.4.666: lblock 0 mapped to illegal pblock 48 (length 1) [ 182.550889][ T5595] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 182.550961][ T5595] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 182.550995][ T5595] EXT4-fs error (device loop4): ext4_acquire_dquot:7120: comm syz.4.666: Failed to acquire dquot type 0 [ 182.551020][ T5595] loop4: lost filesystem error report for type 5 error -117 [ 182.551115][ T5595] EXT4-fs error (device loop4) in ext4_reserve_inode_write:7435: Corrupt filesystem [ 182.551132][ T5595] loop4: lost filesystem error report for type 5 error -117 [ 182.551237][ T5595] EXT4-fs error (device loop4): ext4_evict_inode:336: inode #11: comm syz.4.666: mark_inode_dirty error [ 182.551261][ T5595] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 182.551333][ T5595] EXT4-fs warning (device loop4): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 182.551364][ T5595] EXT4-fs (loop4): 1 orphan inode deleted [ 182.551813][ T5595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.561316][ T30] audit: type=1400 audit(1794411062.113:371): avc: denied { write } for pid=5590 comm="syz.4.666" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.561349][ T30] audit: type=1400 audit(1794411062.113:372): avc: denied { create } for pid=5590 comm="syz.4.666" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 182.562110][ T30] audit: type=1400 audit(1794411062.113:373): avc: denied { write } for pid=5590 comm="syz.4.666" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.562201][ T30] audit: type=1400 audit(1794411062.113:374): avc: denied { create } for pid=5590 comm="syz.4.666" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 182.567399][ T5592] netlink: 'syz.4.666': attribute type 11 has an invalid length. [ 182.637631][ T5605] netlink: 'syz.3.668': attribute type 2 has an invalid length. [ 182.637654][ T5605] netlink: 'syz.3.668': attribute type 2 has an invalid length. [ 182.637668][ T5605] netlink: 'syz.3.668': attribute type 1 has an invalid length. [ 182.689887][ T30] audit: type=1400 audit(1794411062.193:375): avc: denied { create } for pid=5596 comm="syz.3.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.689948][ T30] audit: type=1400 audit(1794411062.193:376): avc: denied { bind } for pid=5596 comm="syz.3.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.757278][ T5607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'. [ 182.942245][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.971660][ T5609] loop1: detected capacity change from 0 to 512 [ 182.979192][ T5609] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.672: iget: bad i_size value: 38620345925642 [ 182.979220][ T5609] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 182.979391][ T5609] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.672: couldn't read orphan inode 15 (err -117) [ 182.979415][ T5609] loop1: lost filesystem error report for type 5 error -117 [ 182.980457][ T5609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.999588][ T240] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 182.999628][ T240] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 183.019700][ T240] EXT4-fs error (device loop4): ext4_release_dquot:7156: comm kworker/u8:5: Failed to release dquot type 0 [ 183.019732][ T240] loop4: lost filesystem error report for type 5 error -117 [ 183.028161][ T3295] EXT4-fs error (device loop4): __ext4_get_inode_loc:5709: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 183.028263][ T3295] loop4: lost filesystem error report for type 5 error -117 [ 183.028345][ T3295] EXT4-fs error (device loop4) in ext4_reserve_inode_write:7435: Corrupt filesystem [ 183.028363][ T3295] loop4: lost filesystem error report for type 5 error -117 [ 183.028491][ T3295] EXT4-fs error (device loop4): ext4_quota_off:7404: inode #3: comm syz-executor: mark_inode_dirty error [ 183.028513][ T3295] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 183.028577][ T3295] EXT4-fs error (device loop4): __ext4_get_inode_loc:5709: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 183.028639][ T3295] loop4: lost filesystem error report for type 5 error -117 [ 183.051052][ T5609] FAULT_INJECTION: forcing a failure. [ 183.051052][ T5609] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 183.051185][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: syz.1.672 Not tainted syzkaller #0 PREEMPT(lazy) [ 183.051211][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 183.051277][ T5609] Call Trace: [ 183.051285][ T5609] [ 183.051371][ T5609] __dump_stack+0x1d/0x30 [ 183.051398][ T5609] dump_stack_lvl+0x95/0xd0 [ 183.051457][ T5609] dump_stack+0x15/0x1b [ 183.051494][ T5609] should_fail_ex+0x259/0x270 [ 183.051524][ T5609] should_fail_alloc_page+0xf2/0x100 [ 183.051571][ T5609] __alloc_frozen_pages_noprof+0x13b/0x3d0 [ 183.051664][ T5609] alloc_pages_mpol+0xaf/0x1d0 [ 183.051690][ T5609] alloc_pages_noprof+0x94/0x140 [ 183.051778][ T5609] pte_alloc_one+0x1c/0xc0 [ 183.051799][ T5609] __pte_alloc+0x32/0x2a0 [ 183.051917][ T5609] handle_mm_fault+0x31d0/0x3bd0 [ 183.051943][ T5609] ? mt_find+0x8c1/0xa10 [ 183.052024][ T5609] __get_user_pages+0xeaf/0x1930 [ 183.052052][ T5609] __mm_populate+0x2a0/0x3c0 [ 183.052074][ T5609] vm_mmap_pgoff+0x260/0x310 [ 183.052138][ T5609] ksys_mmap_pgoff+0xc1/0x310 [ 183.052156][ T5609] ? __x64_sys_mmap+0x49/0x70 [ 183.052192][ T5609] x64_sys_call+0x23b3/0x2550 [ 183.052235][ T5609] do_syscall_64+0x116/0x380 [ 183.052262][ T5609] ? clear_bhb_loop+0x70/0xc0 [ 183.052337][ T5609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.052359][ T5609] RIP: 0033:0x7fda5bca8f19 [ 183.052472][ T5609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.052504][ T5609] RSP: 002b:00007fda5a6f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 183.052628][ T5609] RAX: ffffffffffffffda RBX: 00007fda5bf25fa0 RCX: 00007fda5bca8f19 [ 183.052643][ T5609] RDX: 0000000000000002 RSI: 0000000000008000 RDI: 000000110c230000 [ 183.052656][ T5609] RBP: 00007fda5a6f7090 R08: ffffffffffffffff R09: 0000000000000000 [ 183.052670][ T5609] R10: 0000000000002172 R11: 0000000000000246 R12: 0000000000000001 [ 183.052684][ T5609] R13: 00007fda5bf26038 R14: 00007fda5bf25fa0 R15: 00007fff9dbfc1b8 [ 183.052755][ T5609] [ 183.156491][ T5608] loop0: detected capacity change from 0 to 128 [ 183.178886][ T5608] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.179196][ T5608] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 183.180490][ T5612] loop4: detected capacity change from 0 to 512 [ 183.224996][ T5608] netlink: 44 bytes leftover after parsing attributes in process `syz.0.670'. [ 183.266845][ T5608] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.320679][ T5617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.674'. [ 183.333808][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.842865][ T5612] loop4: detected capacity change from 0 to 1024 [ 183.849769][ T5612] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 183.849940][ T5612] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 183.850416][ T5612] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 183.856000][ T5612] EXT4-fs error (device loop4): ext4_get_journal_inode:5971: inode #5: comm syz.4.671: casefold flag without casefold feature [ 183.856265][ T5612] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 183.857536][ T5612] EXT4-fs (loop4): no journal found [ 184.074163][ T5641] netlink: 32 bytes leftover after parsing attributes in process `syz.4.682'. [ 184.363644][ T5657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 184.445717][ T5660] loop4: detected capacity change from 0 to 512 [ 184.446330][ T5660] EXT4-fs: test_dummy_encryption option not supported [ 184.473627][ T2978] ================================================================== [ 184.473663][ T2978] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 184.473701][ T2978] [ 184.473706][ T2978] write to 0xffff88810c6af7b0 of 8 bytes by task 5459 on cpu 0: [ 184.473720][ T2978] dentry_unlink_inode+0x65/0x290 [ 184.473751][ T2978] d_delete+0x164/0x180 [ 184.473778][ T2978] d_delete_notify+0x32/0x100 [ 184.473798][ T2978] vfs_unlink+0x287/0x4a0 [ 184.473814][ T2978] filename_unlinkat+0x1db/0x400 [ 184.473831][ T2978] __se_sys_unlink+0x2b/0xe0 [ 184.473848][ T2978] __x64_sys_unlink+0x1f/0x30 [ 184.473866][ T2978] x64_sys_call+0x18ee/0x2550 [ 184.473893][ T2978] do_syscall_64+0x116/0x380 [ 184.473913][ T2978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.473935][ T2978] [ 184.473940][ T2978] read to 0xffff88810c6af7b0 of 8 bytes by task 2978 on cpu 1: [ 184.473953][ T2978] step_into_slowpath+0x12c/0x4c0 [ 184.473976][ T2978] path_lookupat+0x2eb/0x4c0 [ 184.473998][ T2978] filename_lookup+0x18f/0x390 [ 184.474023][ T2978] do_readlinkat+0x74/0x2f0 [ 184.474048][ T2978] __x64_sys_readlink+0x47/0x60 [ 184.474072][ T2978] x64_sys_call+0x1d41/0x2550 [ 184.474097][ T2978] do_syscall_64+0x116/0x380 [ 184.474113][ T2978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.474132][ T2978] [ 184.474136][ T2978] value changed: 0xffff88811b12b6e0 -> 0x0000000000000000 [ 184.474148][ T2978] [ 184.474152][ T2978] Reported by Kernel Concurrency Sanitizer on: [ 184.474164][ T2978] CPU: 1 UID: 0 PID: 2978 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 184.474190][ T2978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 184.474203][ T2978] ==================================================================