last executing test programs: 1m53.572201283s ago: executing program 4 (id=351): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff3}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x1, 0x20000000, 0x9, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x0, 0x40000c0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000500)={0x4009, 0x400008, 0x3, 0x797a, 0x3, "00a6400d00000000000000f8ffffff00"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000003c0)=0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004"], 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r4, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x2000, 0x0, 0x8004800}, 0x8) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b80"], 0x250}}, 0x2000c000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r5) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x16c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x12c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}]}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}]}, @NL802154_DEVKEY_ATTR_ID={0x9c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x7}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffff}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20008000}, 0x804) fchdir(r7) r8 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80) getdents(r8, &(0x7f0000001fc0)=""/184, 0x2000208e) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r5) 1m53.291552852s ago: executing program 4 (id=353): syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0xfe, 0x0, 0x401c, 0x78180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10f06a, 0x3, 0x7, 0x3, 0x6, 0x94, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r1 = mq_open(&(0x7f0000000880)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@\xe92\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x00%U4\x87r\xb7u\xbb\xe5\xe1\xad-`w\x00\x00\x00\x00\x00\x00\a\xed\x9a\x99o-x\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2\xd6\xd6\xe1\t\x14\xda$Q\xbb\xd9g\xb9\xcd7\x1by\x9fg1\xf4\t\x18i/?\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\x00\x00KG.sM\xe5\xeb\x9a\"J\xcc\xd8R>\x0e\xf5h\xa3\a\"\xd3\xb0c9z\xd8k\x94N1\xfa|>\xd0\x1d`\x9b\x97\xe7r\xfd\xcc\x0e\x9c\xdb\xbe\xbf\xb0\x18\xb66\x9d\xa8\x06\xbe\xe9\x12\xe0\x15\x1b_\x06kb \xc8d\xb9\xc1\xcb{%\x81\xc3|\"w\xcc#\x8b\xe49\x99j\"\x04\xd1+]\x98G\x1e\xb4\xa5\t\x92gV^\xf5\x04{Q\xfb`fVA\xde\xa4\x7fa', 0x80, 0x11f, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000010001800000018000000020000000000000001000004000000000a0000000000000006000000000079fe382b9e12ce3a05f01531874d1bd43468660dd4ebc5431856b769e251a3354a2c55776906658fce7cd4aaef151bfdce1014640a5841c0449eb5a0ad2edf0415f42460a64a44f9f81735f9db5c47e314b7767f35a99884ba64ff"], 0x0, 0x32}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800ff000700000000000000008000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140)={0x0, 0xfffffffe}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000000a14000129bd7000ffdbdf250800030001000000080015000200000008001500000000000800016430fa968800010000000800010002000000"], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x404c044) bind$packet(r4, &(0x7f0000000380)={0x11, 0x1c, r6, 0x1, 0x10, 0x6, @random="9dd0391940fc"}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@getchain={0x24, 0x11, 0x1, 0x40, 0x1fffff9, {0x0, 0x0, 0x0, r6, {0x7, 0xd}, {0xc, 0x3}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0xd4}, 0xfffffe07) mq_timedsend(r1, &(0x7f0000000600)='m', 0x1, 0x6, 0x0) semctl$GETZCNT(0x0, 0x2, 0xf, &(0x7f0000000200)=""/58) mq_timedreceive(r1, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_SETMODE(r8, 0x5602, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000050) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') readlinkat(r10, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) 1m52.796137948s ago: executing program 4 (id=363): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) io_setup(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x2, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x0, 0xfff1}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 1m51.815308959s ago: executing program 4 (id=372): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5fa, &(0x7f0000000d40)="$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") r1 = socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000003c0)="15", 0x1}], 0x1}}], 0x1, 0x4) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x48) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r4 = syz_clone3(&(0x7f0000001880)={0x104000200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x81) r5 = syz_io_uring_setup(0x30da, &(0x7f00000002c0)={0x0, 0x6968, 0x10000, 0x1, 0x2ca}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000001540)={0x3, 0x0, 0x0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000001180)=""/237, 0xed}, {&(0x7f0000001280)=""/39, 0x27}], &(0x7f0000001500)=[0x0, 0x4, 0x3]}, 0x20) r6 = eventfd2(0x9, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000000)=r6, 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000001cc0)={0x2, 0x0, &(0x7f0000001c40)=[{0x0}], 0x0, 0x1}, 0x20) setuid(0xee00) tgkill(r4, r4, 0x11) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x4) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="c86e38c35d457269", 0x8}], 0x1, &(0x7f0000000100)=[@ip_retopts={{0x98, 0x0, 0x7, {[@timestamp_addr={0x44, 0x44, 0x6b, 0x1, 0x8, [{@empty, 0x6}, {@loopback, 0x2}, {@multicast2, 0x2}, {@remote, 0x4}, {@multicast2, 0x8}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x10000}]}, @generic={0x94, 0xe, "4c656513cc977fb200c9a6a1"}, @noop, @timestamp={0x44, 0x4, 0x21}, @rr={0x7, 0x23, 0xf6, [@empty, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty, @empty]}, @lsrr={0x83, 0xb, 0xad, [@broadcast, @remote]}]}}}], 0x98}, 0x20000000) 1m51.393577852s ago: executing program 4 (id=374): capset(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x8401) personality(0x87bf5ac905ea0f7f) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[], 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10004, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4ff1, &(0x7f0000000240)={0x0, 0x1b81, 0xc840, 0x20000a, 0x20002f9}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r3, 0x84, 0xb, 0xfffffffffffffffe, &(0x7f0000000000)=0x5e) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) io_uring_setup(0x5269, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x30, 0x28, 0x10, 0x70bd67, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {0x0, 0x9}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x10) 1m50.510168171s ago: executing program 4 (id=381): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_clone(0xb000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) r7 = ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x20885f, &(0x7f00000000c0), 0x1, 0x511, &(0x7f0000000f00)="$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") fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r8, 0x84, 0x0, 0x0, &(0x7f0000000040)) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x4, 0xec, [0xfffffffffffffffe, 0x27, 0x2, 0x3, 0xfff, 0x8], 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)=""/236}, &(0x7f0000000200)=0x78) sendmsg$nl_xfrm(r0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4048010, r0, 0x27224000) 1m50.468851712s ago: executing program 32 (id=381): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_clone(0xb000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) r7 = ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x20885f, &(0x7f00000000c0), 0x1, 0x511, &(0x7f0000000f00)="$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") fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r8, 0x84, 0x0, 0x0, &(0x7f0000000040)) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x4, 0xec, [0xfffffffffffffffe, 0x27, 0x2, 0x3, 0xfff, 0x8], 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)=""/236}, &(0x7f0000000200)=0x78) sendmsg$nl_xfrm(r0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4048010, r0, 0x27224000) 9.630158434s ago: executing program 5 (id=1323): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x6, 0x8}, 0x10c0e8, 0x0, 0x0, 0x0, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@noload}, {@errors_remount}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000ac0)=0x48000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000001400078008000840000000000800174000000004050005000a000000050001000700000005000400000000000900020073513d3100000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008114) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x1403, 0x100, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x27ce0ca36b72e4c2) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) 9.087569191s ago: executing program 5 (id=1330): r0 = epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x8000002a}) signalfd4(r1, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x40442, 0x1) close(0x3) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r4) socket$qrtr(0x2a, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r6) 8.950497925s ago: executing program 5 (id=1331): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = memfd_create(0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000711233000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffe, 0x0, @loopback, 0x10080bff}, @ib={0x1b, 0x1000, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x7ffffffffffffffe, 0x7, 0x4}}}, 0x118) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$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") socket(0x2, 0x80805, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x1800, 0x0) read$msr(r4, &(0x7f00000002c0)=""/4096, 0x1000) 3.958574394s ago: executing program 2 (id=1362): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@noload}, {@errors_remount}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000ac0)=0x48000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000001400078008000840000000000800174000000004050005000a000000050001000700000005000400000000000900020073513d3100000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008114) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x1403, 0x100, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x27ce0ca36b72e4c2) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) 3.633287264s ago: executing program 2 (id=1365): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x0) r0 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x0, 0x40000c0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r3, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x2000, 0x0, 0x8004800}, 0x8) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r0, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b80"], 0x250}}, 0x2000c000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r4) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf252a00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8080) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x16c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x12c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}]}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}]}, @NL802154_DEVKEY_ATTR_ID={0x9c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x7}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffff}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20008000}, 0x804) fchdir(r7) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0x2000208e) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) 3.512365518s ago: executing program 0 (id=1367): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x97a4c4e, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1, 0x0, 0x27}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000002", @ANYRES32, @ANYRES8=r0], 0xfe33) socket$can_bcm(0x1d, 0x2, 0x2) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3fffffffc, 0x4}, 0x11111a, 0x0, 0x0, 0x3, 0x8, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r1, 0x81) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x11) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x8800, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000000580)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000104000702000000000200000000", @ANYRES32=0x0, @ANYBLOB="0382000021460000140012800c0001006d616376746170000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) 3.333750574s ago: executing program 1 (id=1368): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 3.258090266s ago: executing program 1 (id=1370): r0 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r0, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/96, 0x60}, {&(0x7f0000000080)=""/189, 0xbd}], 0x2, 0xe, 0x7) rt_sigqueueinfo(0x0, 0x41, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0xffffff1f, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41063}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041000}, 0x4004) 3.204539448s ago: executing program 2 (id=1372): mq_open(&(0x7f0000000240)='.\x00', 0x2, 0x80, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) keyctl$set_reqkey_keyring(0xe, 0x5) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x8, 0x2, 0x80000000, 0x6, 0xc, 0x33c, 0x6c7, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x2, 0xb}, {0x9, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc220000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.16240797s ago: executing program 1 (id=1373): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x2, 0x80, 0x95, 0x8, 0x8, 0xff, 0x0, 0x7, 0x3, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0), 0xd}, 0x10200, 0x2, 0x3, 0x4, 0xffffffffffffffff, 0x6, 0x4, 0x0, 0x8, 0x0, 0x6}, r0, 0x1, 0xffffffffffffffff, 0xc) r2 = fsopen(&(0x7f0000000180)='exfat\x00', 0x1) fsmount(r2, 0x0, 0xc) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/225, 0xe1}], 0x1, 0x7, 0x800) 3.066824653s ago: executing program 1 (id=1374): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f0000000000)=@other={'decodes', ' ', 'mem'}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x202002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x1) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r5, 0x400455c8, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x8e0}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x1, 0x10, 0x0, @vifc_lcl_addr=@multicast1, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@multicast2, @empty, 0x0, "614afa85791a63abd0f993af8096b504000000000000003fdc3fd440829c98ae", 0x3, 0xffffffff}, 0x3c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000580)={&(0x7f00000000c0)=0x5, 0x4, &(0x7f0000000300)=[{}, {}, {}], &(0x7f0000000540)}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000680)={'gretap0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x701, 0x8, 0xb8000000, 0x41e, {{0xe, 0x4, 0x1, 0x8, 0x38, 0x66, 0x0, 0x6, 0x29, 0x0, @multicast2, @local, {[@timestamp_addr={0x44, 0xc, 0x9e, 0x1, 0xa, [{@multicast2}]}, @end, @ra={0x94, 0x4}, @cipso={0x86, 0xb, 0x2, [{0x6, 0x5, "54b17f"}]}, @generic={0x44, 0x5, "a5e25e"}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xf, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x28000}, [@jmp={0x5, 0x0, 0xc, 0x1, 0x5, 0xffffffffffffffe0}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @generic={0x6, 0x6, 0x9, 0x2, 0x7}, @exit, @call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x3d, &(0x7f00000005c0)=""/61, 0x41100, 0x60, '\x00', r6, @fallback=0x37, r1, 0x8, &(0x7f00000006c0)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x2, &(0x7f0000000700)=[r4, r4], &(0x7f0000000740)=[{0x5, 0x2, 0x5, 0x8}, {0x0, 0x5, 0x1, 0x4}], 0x10, 0x4}, 0x94) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) close(0x3) syz_emit_ethernet(0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaa3abbbbbbbbbbbb88a81700810001000011aa017372fd477d81006d0113f3cbbbddf7d86ddb38e91c3f84"], &(0x7f0000000180)={0x0, 0x4, [0xdc9, 0xa, 0x7b7, 0xbfa]}) socket$nl_netfilter(0x10, 0x3, 0xc) 3.018793184s ago: executing program 2 (id=1376): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x103af4, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = semget$private(0x0, 0x6, 0x1b5) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) ioctl$FIGETBSZ(r1, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) memfd_secret(0x80000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) syz_open_dev$vcsn(0x0, 0x7, 0x20800) semtimedop(0x0, &(0x7f0000000100)=[{0x2, 0x81, 0x1400}, {0x0, 0x7fff, 0x400}, {0x3, 0x86ac, 0x1000}], 0x3, 0x0) socket$inet6(0xa, 0x80000, 0x2) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000040)) 2.310906897s ago: executing program 3 (id=1380): r0 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r0, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/96, 0x60}], 0x1, 0xe, 0x7) rt_sigqueueinfo(0x0, 0x41, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x68, 0x10, 0xffffff1f, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41063}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1000}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041000}, 0x4004) 2.268609188s ago: executing program 3 (id=1381): r0 = epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x8000002a}) signalfd4(r1, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x40442, 0x1) close(0x3) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r4) socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r5) 2.19442667s ago: executing program 3 (id=1382): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) socket$inet6(0xa, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000000ac0)="$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") write$binfmt_format(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, 0x0, 0x200000c4) socket(0x15, 0x5, 0xfffffff1) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000400000000000000000000000000000000000000044010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003300000002000000ac1414aa00000000000000000000000000000000000000000000000694000000000000007f000001000000000000000000000000000000003c000000020000000000000000000000000000000000000000000000000020010000000000000000000000000000000000003c00000000000000fe8000000000000000000000000000bb000000000100"/422], 0x1fc}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000400)='./file1\x00', 0x2008800, &(0x7f0000000280), 0x3, 0x651, &(0x7f00000014c0)="$eJzs3c9vFG0dAPDvTLdLaV9tIUZ9jfFt8sa8JEqhBQwxJsKdEPxx00ulhSALJbRGS0goCV5MvHkg8eRB/Bc8KQlX/gEPJsYTMSFGOYghsmamu9thO9tuf+xuu/18kmmfZ2Z3nmcWvn1mnn2emQCOrOmImImIjyPiXhIxWdhWyX+m+Yuy173518Pr2ZJEvf6Dfybx8FGyVtxX0vg90Xjz/ybXV50c2Vzu8uqD2/O12uL9Rv7Myp17Z5ZXH5y+dWf+5uLNxbtz35q7eOH8hYuzZ/d0fCcK6StPfvrz9FdXf/T7375LZv/w16tJXMqOLpcdV/t7j+2p5Owzm476urfF9dnnenGP+z4o/jPZ/H+yIWlfwYGWxcBoRHwpJmOk8K85Gb/8XiuTDKhyQM/Uk2i2Udv5Y7XrlwKHQ7KroB7b/4oAfdY8D2he25ddB5couaIHDpvXl9c7pNZjfzQimvFfyfv8IsbyvoHxN8kH/TxJROytZ25dVsbLF1efZEt06IcDemPtcbOXu739T/LYnIqxPDf+Jv0g/tPCkq3//k4Kraat5HTbJvEP/bP2OCK+3Gj/q7GT+K9EIf5/ssvyxT8AAAAAAADsn+eXI+KbZeP/0tb4n2rJ+J+JiLi0D+Vv//1f2hwsYAYS7LPXlyO+Uzr+tzVGZ2qkkftcPh5gNLlxq7p4NiI+HxGnYvTYjVu1xdm2/aaF9Olfn3zaqfzi+L9sycp/+aI4vDj9R6VtIu7C/Mq8vwawd68fR3wlH//7SWPNh+N/svY/KWn/s/i+12UZJ7/+7FoxX6/XHzXT5fG/Pha4VLX7YwO2Vv9dxGel7f9GA5tsfX+OM1n73/hZWsbX3hUmGrXZcfwD+yZr/8c7x3/rzLt1v57lne0/a67PrVY6hX8X8V9+/l9NfjgShdOBX8yvrNyfjagmVzavn9tZnWFYNeOhGS9Z/J/6dOv+v9b5fyEOj0fEWpdlfvH9xN87bdP+w+Bk8b+w9fn/VNJo/yNv/1snAtslxhrvr809m/pzniq5L9y1rtr/83mbfqqxJu//AxrSTWu6jdSBVBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrk0Ij6KJJ1ppdN0ZiZiIiK+EONpbWl55Rs3ln52dyHblj//P20+6XdyPZ80n/8/VcjPteXPRcSJiPjNyPE8P3N9qbYw6IMHAAAAAAAAAAAAAAAAAACAA2IiIj769NWfvto2/z/zamTQtQN6rtL4vU28j/WjLkB/VXb9zvqxfa0I0He7j3/gsOs+/kd7Wg+g/zrH/9t39VwznyTFrf/ucb2A3nP+D0fXLuPf14MwBErif3oQ9QD6bcs+vaetlG//YSi5/gcAAAAAgKFy4pPnf0kiYu3bx/MlU21sM9gfhls66AoAA2MMLxxdlaVB1wAYFNf4wMa8/v/Wy7Z3Hv2f9KZCAAAAAAAAAAAAAMAmn31s/j8cVVvP/ze2H4bZFvP/y4Lf7QJgiHR+9Ie2H4ada3wgKU1uMP8fAAAAAAAAAAAAAA6AsQe352u1xfvLq3tMRMTf6knEXvfTIfHjkk3f7VFZPU2szR+Iauxr4n1v9jwaEX07ivcH5cPMEs1bcAywGgP+uwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT8PwAA///M+SNf") open(&(0x7f0000000180)='./file1\x00', 0x66842, 0x21) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000080)=0x8005) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, 0x1}, 0xc) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200006, 0x0, 0x0, 0xd}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8}]}, {0xfffffffffffffe4b}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 2.19429399s ago: executing program 5 (id=1383): unshare(0x6020400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, 0x0, &(0x7f0000000000)) 2.158337621s ago: executing program 0 (id=1384): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_ext={0x1c, 0x12, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe72, 0x0, 0x0, 0x0, 0xdc}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xd0}]}, 0x0, 0x8ed, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000cc0)={0x4, 0x2, 0x80000001, 0x1}, 0x10, 0x20e16, 0xffffffffffffffff, 0x1, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e40)=[{0x5, 0x7fffffff, 0x10, 0x4}], 0x10, 0xa}, 0x94) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x83, 0x3}, 0x1000, 0x0, 0x0, 0x6, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000003d40)=[{&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000840)=""/4084, 0xff4}], 0x2, 0x13, 0xf7) 2.156787901s ago: executing program 5 (id=1385): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8880}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x0, 0x40000c0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000003c0)=0x9) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r2, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x2000, 0x0, 0x8004800}, 0x8) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000c000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r3) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x16c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x12c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}]}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}]}, @NL802154_DEVKEY_ATTR_ID={0x9c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x7}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffff}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20008000}, 0x804) fchdir(r4) r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80) getdents(r5, &(0x7f0000001fc0)=""/184, 0x2000208e) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) 2.098596953s ago: executing program 2 (id=1386): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x5, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x5a, 0x5, 0xa, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x1000401) 2.030240185s ago: executing program 2 (id=1387): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) getpgrp(0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004811}, 0x40841) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000040)=0x8, 0x4) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e26, 0x200000ff, @loopback, 0x5}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x4855}, 0x24000052) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) 2.022300666s ago: executing program 5 (id=1388): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f0000000000)=@other={'decodes', ' ', 'mem'}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x202002, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r5, 0x400455c8, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x8e0}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x1, 0x10, 0x0, @vifc_lcl_addr=@multicast1, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@multicast2, @empty, 0x0, "614afa85791a63abd0f993af8096b504000000000000003fdc3fd440829c98ae", 0x3, 0xffffffff}, 0x3c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000580)={&(0x7f00000000c0)=0x5, 0x4, &(0x7f0000000300)=[{}, {}, {}], &(0x7f0000000540)}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000680)={'gretap0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x701, 0x8, 0xb8000000, 0x41e, {{0xe, 0x4, 0x1, 0x8, 0x38, 0x66, 0x0, 0x6, 0x29, 0x0, @multicast2, @local, {[@timestamp_addr={0x44, 0xc, 0x9e, 0x1, 0xa, [{@multicast2}]}, @end, @ra={0x94, 0x4}, @cipso={0x86, 0xb, 0x2, [{0x6, 0x5, "54b17f"}]}, @generic={0x44, 0x7, "a5e25edd6d"}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xf, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x28000}, [@jmp={0x5, 0x0, 0xc, 0x1, 0x5, 0xffffffffffffffe0}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @generic={0x6, 0x6, 0x9, 0x2, 0x7}, @exit, @call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x3d, &(0x7f00000005c0)=""/61, 0x41100, 0x60, '\x00', r6, @fallback=0x37, r1, 0x8, &(0x7f00000006c0)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x2, &(0x7f0000000700)=[r4, r4], &(0x7f0000000740)=[{0x5, 0x2, 0x5, 0x8}, {0x0, 0x5, 0x1, 0x4}], 0x10, 0x4}, 0x94) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) close(0x3) syz_emit_ethernet(0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaa3abbbbbbbbbbbb88a81700810001000011aa017372fd477d81006d0113f3cbbbddf7d86ddb38e91c3f84"], &(0x7f0000000180)={0x0, 0x4, [0xdc9, 0xa, 0x7b7, 0xbfa]}) socket$nl_netfilter(0x10, 0x3, 0xc) 1.89233894s ago: executing program 0 (id=1389): syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000fdffffff0000000c020000001000"], 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) unshare(0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000000540)) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 1.737251475s ago: executing program 3 (id=1390): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000001c0)={[], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@appraise_type}, {@obj_type={'obj_type', 0x3d, 'ext4\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xce\x8c\xb5VSm\xe3\xfd\x84\xf1L]\r\xbbv\xd9A\x96\x82,G}(\x84q\xf8\x88=\x91\xc9\xb2\x1c{\x99\xaeMt\xc6dJ\xb0\xd6\x010\x95,\xa3\xde\xa6\xcej\xd9|&\x00ot,\x17>\xe3.\xad\xe9\x02\xa9\xeev\x14Lqc\xf8\xa4\x9c\x83\x80\x14\xea\xbc \xb3\x13\xe9C\xd0\xbd\x9e:\xdeO\xb0\xe9\xf4\x92r\xc4\xe9\x02\xd1\xd3\x1bt\xc9\xba\xca\x84fl?j\x037\xfb\xd6\xef\x05\x7f\xce\xbc\xf3o@7\x9c\x90\xab\xcbfq}\xdf\x02x\x90i\x82P\xe9\"x\xab\x91\x95P\xb22\x02\xa2\x92\xc7\xad\xb3\xe8\xe5\xd6\xc6\xf9|\x91\x1dm\xb9\xc4.Q\xdbn\x850\xe6\xb2\x8bW\xc3z'}}, {@pcr={'pcr', 0x3d, 0x2}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, 'q}'}}, {@seclabel}]}, 0x3, 0x4a1, &(0x7f00000004c0)="$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") r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x31) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, 0x0, 0x4) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x20052f9, 0xfffffff8, 0x100802, 0x2, 0x8}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x444, &(0x7f0000000200)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFXRglA5okrcEUck/gJOcEHACYkr3FGlCvXSwslo7d3Gduw0dp241L+ftM7M7lgzn3fHnp2JHcDQGs8ekojtEfFHRIzWs80Fxut/bl6/MPvP9QuzSVSr7/yd1MrduH5htihaPG9bkSlHpJ8nsbdNvYvnzp+aqVTmz+b5yaXTH04unjv/wsnTMyfmT8yfmT569PChqZeOTL/YlzizuG7s+WRh3+433rvy1uyxK+//8l1SxN8SR5+Mr3bw6Wq1z9UN1o6GdFIeYEPoSqneTWOk1v9HoxTLJ280Xv9soI0D1lW1Wq0+1PnwpSpwD0ti0C0ABqP4oM/uf4ttg4Yed4Vrr9RvgLK4b+Zb/Ug50rzMSMv9bT+NR8SxS/9+nW2xPvMQAABNfsjGP8+3G/+l0TgvdH++hjIWEQ9ExM6IOBIRuyLiwYha2Ycj4pEu629dJFk5/kmv9hTYGmXjv5fzta3m8V8x+ouxUp7bUYt/JDl+sjJ/MH9NDsTI5iw/tUodP772+5edjjWO/7Itq78YC+btuFre3PycuZmlmTuJudG1TyP2lNvFn9xaCUgiYndE7OmxjpPPfruv07Hbx7+KPqwzVb+JeKZ+/i9FS/yFZPX1ycn7ojJ/cLK4Klb69bfLb3eq/47i74Ps/G9te/3fin8saVyvXey+jst/ftHxnqbX639T8m7Tvo9nlpbOTkVsSt6sN3p5f+nsdEu56eXyWfwH9rfv/ztj+ZXYGxHZRfxoRDwWEY/nbX8iIp6MiP2rxP/zq0990Hv86yuLf66r87+c2BSte9onSqd++r6p0rFu4s/O/+Fa6kC+Zy3vf2tpV29XMwAAAPz/pBGxPZJ04lY6TScm6v/Dvyu2ppWFxaXnji98dGau/h2BsRhJi5mu0Yb50Kn8tr7IT7fkD+Xzxl+VttTyE7MLlblBBw9DbluH/p/5qzTo1gHrrrd1tLTv7QA2nu9rwvDS/2F4ddX/t61fO4CN16b/b2n+FSDgXtXu8//iANoBbLxyw2P+m2DAkDD/B8NL/4fhpf/DUFrcErf/kryExIpEpHdFMyS6TFQvrq3woN+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+uO/AAAA//9yX+cP") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 761.565236ms ago: executing program 0 (id=1391): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x40000000015, 0x5, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000300)={&(0x7f0000000280)=[{0x4563, 0x8000, 0x2, 0x3, 0x9}, {0x34, 0x4, 0x0, 0x8, 0x7}], 0x2, 0x28, 0x6, 0x18}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x123481, 0x127) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x7) wait4(r3, 0x0, 0x0, 0x0) setpgid(0x0, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710263d2ac", 0x0, 0xe505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd}, 0xfffffe2c) sendmsg$nl_route(r2, 0x0, 0x20000040) r6 = socket$inet6(0xa, 0x1, 0x6) sendto$inet6(r6, 0x0, 0x0, 0x20000000, &(0x7f0000000180)={0xa, 0x0, 0x1, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000140)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket$inet6(0xa, 0x2, 0x104) setsockopt$inet6_int(r8, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) write$binfmt_script(r2, &(0x7f00000006c0)={'#! ', './file0'}, 0xb) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xe2) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000005c0), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 582.571162ms ago: executing program 0 (id=1392): r0 = epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x8000002a}) signalfd4(r1, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x40442, 0x1) close(0x3) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r4) socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r5) 579.138952ms ago: executing program 0 (id=1393): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000080)={[{@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7b9, &(0x7f0000000f80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xb, 0x9}}}, 0x24}}, 0x4c840) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b5000000"], 0xc8) connect$inet(r1, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x8000) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) socket(0x400000000010, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x40) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000680)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@mblk_io_submit}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) r4 = socket(0x18, 0x800, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x2, 0x0, 0x9, 0xff, 0x5, "f4007661a5591ff6"}) sendfile(r4, r0, 0x0, 0x8) 395.637917ms ago: executing program 1 (id=1394): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_vlan\x00', 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000040)={@private=0xa010101, @remote, @multicast1}, 0xc) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) 347.628759ms ago: executing program 1 (id=1395): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x97a4c4e, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1, 0x0, 0x27}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000002", @ANYRES32, @ANYRES8=r0], 0xfe33) socket$can_bcm(0x1d, 0x2, 0x2) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3fffffffc, 0x4}, 0x11111a, 0x0, 0x0, 0x3, 0x8, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r1, 0x81) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x11) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x8800, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000000580)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000104000702000000000200000000", @ANYRES32=0x0, @ANYBLOB="0382000021460000140012800c0001006d616376746170000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) 138.473566ms ago: executing program 3 (id=1396): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x6, 0x8}, 0x10c0e8, 0x0, 0x0, 0x0, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@noload}, {@errors_remount}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000ac0)=0x48000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000001400078008000840000000000800174000000004050005000a000000050001000700000005000400000000000900020073513d3100000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008114) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x1403, 0x100, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x27ce0ca36b72e4c2) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) 0s ago: executing program 3 (id=1397): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x5a, 0x5, 0xa, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x1000401) kernel console output (not intermixed with test programs): 721][ T7193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.355265][ T7193] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.419472][ T7166] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 145.419762][ T7166] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.822: corrupted inode contents [ 145.448657][ T7193] xt_hashlimit: size too large, truncated to 1048576 [ 145.495231][ T7166] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 145.497518][ T7166] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.822: mark_inode_dirty error [ 145.508097][ T7166] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 145.512019][ T7166] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.822: corrupted inode contents [ 145.512143][ T7166] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 145.512305][ T7166] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 145.512343][ T7166] loop5: lost filesystem error report for type 5 error -117 [ 145.512473][ T7166] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.822: corrupted inode contents [ 145.512551][ T7166] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 145.512773][ T7166] EXT4-fs error (device loop5): ext4_truncate:4690: inode #16: comm syz.5.822: mark_inode_dirty error [ 145.512817][ T7166] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 145.513046][ T7166] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 145.513067][ T7166] loop5: lost filesystem error report for type 5 error -117 [ 145.513848][ T7166] EXT4-fs (loop5): 1 truncate cleaned up [ 145.514360][ T7166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.514463][ T7166] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.547447][ T2035] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 145.547474][ T2035] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:10: Failed to release dquot type 1 [ 145.602156][ T7204] loop3: detected capacity change from 0 to 2048 [ 145.639011][ T3559] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 145.679159][ T4054] Bluetooth: hci0: command 0x1003 tx timeout [ 145.721728][ T7204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.806603][ T28] audit: type=1400 audit(1779428987.726:1750): avc: denied { watch watch_reads } for pid=7208 comm="syz.2.834" path="/158/file0" dev="tmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 145.860697][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.901012][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.920956][ T7214] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 145.959168][ T2087] Bluetooth: hci0: Frame reassembly failed (-84) [ 146.028395][ T7219] dvmrp1: entered allmulticast mode [ 146.046748][ T7219] dvmrp1: left allmulticast mode [ 146.072630][ T7221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.838'. [ 146.081593][ T7221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.838'. [ 146.135396][ T7223] loop2: detected capacity change from 0 to 512 [ 146.152182][ T7223] EXT4-fs error (device loop2): ext4_quota_enable:7221: comm syz.2.838: Bad quota inum: 2, type: 1 [ 146.177560][ T7223] loop2: lost filesystem error report for type 5 error -117 [ 146.178017][ T7223] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 146.185472][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 146.185493][ C0] EXT4-fs (loop2): initial error at time 1779428988: ext4_quota_enable:7221 [ 146.185528][ C0] EXT4-fs (loop2): last error at time 1779428988: ext4_quota_enable:7221 [ 146.283356][ T7223] EXT4-fs (loop2): mount failed [ 146.411583][ T7230] netlink: 84 bytes leftover after parsing attributes in process `syz.2.839'. [ 146.460328][ T7231] netlink: 108 bytes leftover after parsing attributes in process `syz.2.839'. [ 146.494116][ T7230] netlink: 232 bytes leftover after parsing attributes in process `syz.2.839'. [ 146.558356][ T7230] netlink: 'syz.2.839': attribute type 39 has an invalid length. [ 146.644180][ T7233] loop2: detected capacity change from 0 to 512 [ 146.703631][ T7233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 146.735126][ T7233] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.870342][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.068242][ T28] audit: type=1400 audit(1779428988.906:1751): avc: denied { write } for pid=7232 comm="syz.2.840" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.320215][ T7251] netlink: 36 bytes leftover after parsing attributes in process `syz.5.845'. [ 147.540517][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 147.651665][ T7268] can0: slcan on ptm1. [ 147.674625][ T28] audit: type=1400 audit(1779428989.596:1752): avc: denied { execute } for pid=7267 comm="syz.2.851" path=2F6D656D66643AFD0F6D33232F202864656C6574656429 dev="hugetlbfs" ino=16126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 147.779265][ T28] audit: type=1400 audit(1779428989.696:1753): avc: denied { write } for pid=7272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.809275][ T7267] can0 (unregistered): slcan off ptm1. [ 147.828968][ T28] audit: type=1400 audit(1779428989.706:1754): avc: denied { write } for pid=7284 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.908542][ T28] audit: type=1400 audit(1779428989.826:1755): avc: denied { write } for pid=7286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.940935][ T28] audit: type=1400 audit(1779428989.826:1756): avc: denied { write } for pid=7301 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.018982][ T3559] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 148.019141][ T4054] Bluetooth: hci0: command 0x1003 tx timeout [ 148.588659][ T7321] program syz.1.861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.693260][ T7330] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 148.703082][ T7330] SELinux: failed to load policy [ 148.716364][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'. [ 148.734041][ T7330] netlink: 'syz.1.863': attribute type 15 has an invalid length. [ 148.754148][ T7330] netlink: 'syz.1.863': attribute type 25 has an invalid length. [ 148.774663][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'. [ 148.847934][ T7330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=7330 comm=syz.1.863 [ 148.887059][ T7330] loop1: detected capacity change from 0 to 1024 [ 148.919218][ T7330] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 148.943151][ T7330] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 148.964436][ T7330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.106644][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.116892][ T7346] loop3: detected capacity change from 0 to 512 [ 149.139267][ T7346] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.175066][ T7346] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.869: iget: bad i_size value: 38620345925642 [ 149.201870][ T7340] loop0: detected capacity change from 0 to 128 [ 149.208712][ T7350] loop1: detected capacity change from 0 to 1024 [ 149.216342][ T7346] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 149.218762][ T7346] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.869: couldn't read orphan inode 15 (err -117) [ 149.218941][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 149.218971][ C1] EXT4-fs (loop3): initial error at time 1779428991: ext4_orphan_get:1397: inode 15 [ 149.219038][ C1] EXT4-fs (loop3): last error at time 1779428991: ext4_orphan_get:1397: inode 15 [ 149.269559][ T7346] loop3: lost filesystem error report for type 5 error -117 [ 149.275101][ T7350] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 149.295480][ T7350] System zones: 0-1, 3-36 [ 149.296342][ T7346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.312979][ T7350] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.870: bad orphan inode 134217728 [ 149.326256][ T7350] loop1: lost filesystem error report for type 5 error -117 [ 149.326867][ T7350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.362049][ T7356] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 149.415739][ T2188] Bluetooth: hci0: Frame reassembly failed (-84) [ 149.424728][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.455378][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.473930][ T7362] dvmrp1: entered allmulticast mode [ 149.483486][ T7362] dvmrp1: left allmulticast mode [ 149.537368][ T7359] netlink: 'syz.0.873': attribute type 39 has an invalid length. [ 149.634433][ T7372] __nla_validate_parse: 3 callbacks suppressed [ 149.634449][ T7372] netlink: 84 bytes leftover after parsing attributes in process `syz.3.879'. [ 149.673232][ T7372] netlink: 108 bytes leftover after parsing attributes in process `syz.3.879'. [ 149.682776][ T7377] loop5: detected capacity change from 0 to 4096 [ 149.695555][ T7372] netlink: 232 bytes leftover after parsing attributes in process `syz.3.879'. [ 149.708500][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 149.708513][ T28] audit: type=1400 audit(1779428991.626:1761): avc: denied { write } for pid=7375 comm="syz.5.880" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.783987][ T7372] netlink: 'syz.3.879': attribute type 39 has an invalid length. [ 150.357531][ T7392] loop3: detected capacity change from 0 to 512 [ 150.766032][ T7395] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 150.915452][ T7396] dvmrp1: entered allmulticast mode [ 150.939527][ T7396] dvmrp1: left allmulticast mode [ 151.170785][ T7392] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 151.188393][ T7392] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 151.201906][ T7392] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.883: bad orphan inode 4 [ 151.214665][ T7392] loop3: lost filesystem error report for type 5 error -117 [ 151.216376][ T7392] EXT4-fs (loop3): 1 orphan inode deleted [ 151.225346][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 151.225484][ C1] EXT4-fs (loop3): initial error at time 1779428993: ext4_orphan_get:1423 [ 151.225870][ C1] EXT4-fs (loop3): last error at time 1779428993: ext4_orphan_get:1423 [ 151.289124][ T7392] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.883: lblock 0 mapped to illegal pblock 4 (length 1) [ 151.383208][ T28] audit: type=1400 audit(1779428993.206:1762): avc: denied { setattr } for pid=7389 comm="syz.3.883" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.482952][ T3559] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 151.501068][ T28] audit: type=1400 audit(1779428993.206:1763): avc: denied { write } for pid=7389 comm="syz.3.883" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.550979][ T28] audit: type=1400 audit(1779428993.206:1764): avc: denied { create } for pid=7389 comm="syz.3.883" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 151.679083][ T7399] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 152.040276][ T7406] netlink: 'syz.3.885': attribute type 1 has an invalid length. [ 152.093159][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'. [ 152.120603][ T7406] 8021q: adding VLAN 0 to HW filter on device bond6 [ 152.127775][ T7417] netlink: 'syz.2.891': attribute type 1 has an invalid length. [ 152.168905][ T7417] 8021q: adding VLAN 0 to HW filter on device bond6 [ 152.185520][ T28] audit: type=1400 audit(1779428994.106:1765): avc: denied { mount } for pid=7420 comm="syz.3.892" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 152.214176][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 152.415716][ T7430] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.650441][ T7435] loop1: detected capacity change from 0 to 164 [ 152.659055][ T7435] rock: corrupted directory entry. extent=8, offset=0, size=16774637 [ 152.706431][ T28] audit: type=1400 audit(1779428994.626:1766): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 152.899031][ T4054] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 152.899126][ T3531] Bluetooth: hci1: command 0x1003 tx timeout [ 153.124442][ T7447] netlink: 'syz.5.902': attribute type 1 has an invalid length. [ 153.137191][ T7447] 8021q: adding VLAN 0 to HW filter on device bond4 [ 153.147773][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.902'. [ 153.176511][ T28] audit: type=1400 audit(1779428995.096:1767): avc: denied { write } for pid=7449 comm="syz.5.903" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 153.177616][ T7450] mmap: syz.5.903 (7450) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 153.363604][ T7463] netlink: 28 bytes leftover after parsing attributes in process `syz.5.908'. [ 153.374698][ T7463] netlink: 28 bytes leftover after parsing attributes in process `syz.5.908'. [ 153.431438][ T7472] loop5: detected capacity change from 0 to 512 [ 153.552533][ T7472] EXT4-fs error (device loop5): ext4_quota_enable:7221: comm syz.5.908: Bad quota inum: 2, type: 1 [ 153.569255][ T7480] loop3: detected capacity change from 0 to 512 [ 153.580193][ T7472] loop5: lost filesystem error report for type 5 error -117 [ 153.580392][ T7472] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 153.603859][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 153.603888][ C1] EXT4-fs (loop5): initial error at time 1779428995: ext4_quota_enable:7221 [ 153.604032][ C1] EXT4-fs (loop5): last error at time 1779428995: ext4_quota_enable:7221 [ 153.632077][ T7472] EXT4-fs (loop5): mount failed [ 153.669514][ T7480] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.699712][ T7503] loop0: detected capacity change from 0 to 512 [ 154.749434][ T7503] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 154.766369][ T7503] EXT4-fs (loop0): mount failed [ 154.797140][ T28] audit: type=1400 audit(1779428995.976:1768): avc: denied { write } for pid=7479 comm="syz.3.914" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.102979][ T7511] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 155.194351][ T7514] dvmrp1: entered allmulticast mode [ 155.325176][ T7511] dvmrp1: left allmulticast mode [ 156.025328][ T7524] loop1: detected capacity change from 0 to 512 [ 156.095182][ T7524] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 156.208247][ T7530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.927'. [ 156.255098][ T7524] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 156.270073][ T7524] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.923: bad orphan inode 4 [ 156.280685][ T7524] loop1: lost filesystem error report for type 5 error -117 [ 156.282281][ T7524] EXT4-fs (loop1): 1 orphan inode deleted [ 156.290359][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 156.290418][ C0] EXT4-fs (loop1): initial error at time 1779428998: ext4_orphan_get:1423 [ 156.290697][ C0] EXT4-fs (loop1): last error at time 1779428998: ext4_orphan_get:1423 [ 156.340022][ T7524] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 4: comm syz.1.923: lblock 0 mapped to illegal pblock 4 (length 1) [ 156.437581][ T28] audit: type=1400 audit(1779428998.256:1769): avc: denied { write } for pid=7512 comm="syz.1.923" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.486577][ T7530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.927'. [ 156.585764][ T7528] loop0: detected capacity change from 0 to 512 [ 156.634164][ T7521] loop2: detected capacity change from 0 to 2048 [ 156.660327][ T7528] EXT4-fs error (device loop0): ext4_quota_enable:7221: comm syz.0.927: Bad quota inum: 2, type: 1 [ 156.681530][ T7521] EXT4-fs: Ignoring removed i_version option [ 156.709983][ T7528] loop0: lost filesystem error report for type 5 error -117 [ 156.710712][ T7528] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 156.732947][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 156.732970][ C0] EXT4-fs (loop0): initial error at time 1779428998: ext4_quota_enable:7221 [ 156.732997][ C0] EXT4-fs (loop0): last error at time 1779428998: ext4_quota_enable:7221 [ 156.804276][ T7521] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.828201][ T7528] EXT4-fs (loop0): mount failed [ 157.137779][ T7545] loop3: detected capacity change from 0 to 512 [ 157.210704][ T7545] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.579480][ T28] audit: type=1400 audit(1779428999.486:1770): avc: denied { write } for pid=7544 comm="syz.3.931" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.001064][ T3308] EXT4-fs unmount: 11 callbacks suppressed [ 158.001089][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 158.079714][ T7574] loop5: detected capacity change from 0 to 512 [ 158.094770][ T7576] loop3: detected capacity change from 0 to 512 [ 158.106738][ T7576] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 158.120327][ T7576] EXT4-fs (loop3): 1 truncate cleaned up [ 158.126770][ T7574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 158.150790][ T7576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.156685][ T7574] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.172352][ T28] audit: type=1400 audit(1779429000.096:1771): avc: denied { write } for pid=7575 comm="syz.3.942" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.653492][ T7590] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.944'. [ 158.860793][ T28] audit: type=1400 audit(1779429000.376:1772): avc: denied { write } for pid=7573 comm="syz.5.941" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.885768][ T7590] can0: slcan on ttyS3. [ 158.952573][ T7595] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 158.961972][ T7590] loop1: detected capacity change from 0 to 512 [ 158.989171][ T7592] can0 (unregistered): slcan off ttyS3. [ 159.032475][ T7590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.079786][ T7590] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.097228][ T28] audit: type=1326 audit(1779429001.016:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7575 comm="syz.3.942" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8aaace59 code=0x7ffc0000 [ 159.151842][ T28] audit: type=1326 audit(1779429001.016:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7575 comm="syz.3.942" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8aaace59 code=0x7ffc0000 [ 159.255641][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 159.268241][ T7592] xt_hashlimit: size too large, truncated to 1048576 [ 159.308160][ T7595] 8021q: adding VLAN 0 to HW filter on device bond7 [ 159.375780][ T7619] loop5: detected capacity change from 0 to 512 [ 159.395242][ T28] audit: type=1400 audit(1779429001.316:1775): avc: denied { write } for pid=7600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.457010][ T7619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 159.468374][ T7594] can0: slcan on ttyS3. [ 159.532467][ T28] audit: type=1400 audit(1779429001.406:1776): avc: denied { write } for pid=7626 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.558292][ T7619] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.821501][ T28] audit: type=1400 audit(1779429001.736:1777): avc: denied { write } for pid=7616 comm="syz.5.950" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.100669][ T7589] can0 (unregistered): slcan off ttyS3. [ 160.282570][ T7588] vlan2: entered allmulticast mode [ 160.352012][ T7588] bond7: entered allmulticast mode [ 160.515800][ T28] audit: type=1400 audit(1779429002.436:1778): avc: denied { write } for pid=7632 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.534210][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.948951][ T28] audit: type=1400 audit(1779429002.496:1779): avc: denied { write } for pid=7653 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.113358][ T7591] bond7: (slave geneve3): making interface the new active one [ 161.168119][ T7591] geneve3: entered allmulticast mode [ 161.225456][ T7591] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 161.361450][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 161.371000][ T7595] syz.3.942 (7595) used greatest stack depth: 8464 bytes left [ 161.418334][ T7669] FAULT_INJECTION: forcing a failure. [ 161.418334][ T7669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.437211][ T7667] netlink: 84 bytes leftover after parsing attributes in process `syz.5.958'. [ 161.459057][ T7669] CPU: 0 UID: 0 PID: 7669 Comm: syz.2.959 Tainted: G W syzkaller #0 PREEMPT(full) [ 161.459158][ T7669] Tainted: [W]=WARN [ 161.459165][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 161.459179][ T7669] Call Trace: [ 161.459186][ T7669] [ 161.459195][ T7669] __dump_stack+0x1d/0x30 [ 161.459228][ T7669] dump_stack_lvl+0x95/0xd0 [ 161.459337][ T7669] dump_stack+0x15/0x1b [ 161.459353][ T7669] should_fail_ex+0x263/0x280 [ 161.459378][ T7669] should_fail+0xb/0x20 [ 161.459399][ T7669] should_fail_usercopy+0x1a/0x20 [ 161.459449][ T7669] _copy_to_user+0x20/0xa0 [ 161.459478][ T7669] simple_read_from_buffer+0xb5/0x130 [ 161.459518][ T7669] proc_fail_nth_read+0x10e/0x150 [ 161.459611][ T7669] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.459676][ T7669] vfs_read+0x1ab/0x7f0 [ 161.459795][ T7669] ? l2cap_sock_setsockopt+0x13a6/0x13d0 [ 161.459823][ T7669] ? __rcu_read_unlock+0x4e/0x70 [ 161.459848][ T7669] ? __fget_files+0x184/0x1c0 [ 161.459909][ T7669] ? mutex_lock+0x57/0x90 [ 161.459934][ T7669] ksys_read+0xdc/0x1a0 [ 161.459978][ T7669] __x64_sys_read+0x40/0x50 [ 161.460069][ T7669] x64_sys_call+0x2886/0x3020 [ 161.460093][ T7669] do_syscall_64+0x12c/0x3b0 [ 161.460125][ T7669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.460164][ T7669] RIP: 0033:0x7f55ef52d68e [ 161.460179][ T7669] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 161.460197][ T7669] RSP: 002b:00007f55edfbefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 161.460229][ T7669] RAX: ffffffffffffffda RBX: 00007f55edfbf6c0 RCX: 00007f55ef52d68e [ 161.460245][ T7669] RDX: 000000000000000f RSI: 00007f55edfbf0a0 RDI: 0000000000000004 [ 161.460260][ T7669] RBP: 00007f55edfbf090 R08: 0000000000000000 R09: 0000000000000000 [ 161.460272][ T7669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.460326][ T7669] R13: 00007f55ef7e6038 R14: 00007f55ef7e5fa0 R15: 00007ffe198cc268 [ 161.460345][ T7669] [ 161.730460][ T7667] netlink: 232 bytes leftover after parsing attributes in process `syz.5.958'. [ 161.797364][ T7667] netlink: 'syz.5.958': attribute type 39 has an invalid length. [ 161.926912][ T7674] netlink: 'syz.5.960': attribute type 1 has an invalid length. [ 161.937780][ T7673] loop2: detected capacity change from 0 to 512 [ 161.955074][ T7673] EXT4-fs: Ignoring removed orlov option [ 161.969624][ T7673] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 161.988322][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.960'. [ 162.050502][ T7674] 8021q: adding VLAN 0 to HW filter on device bond5 [ 162.126430][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.201608][ T7685] netlink: 84 bytes leftover after parsing attributes in process `syz.1.965'. [ 162.233528][ T7685] netlink: 108 bytes leftover after parsing attributes in process `syz.1.965'. [ 162.257958][ T7685] netlink: 232 bytes leftover after parsing attributes in process `syz.1.965'. [ 162.323036][ T7685] netlink: 'syz.1.965': attribute type 39 has an invalid length. [ 162.349295][ T7692] loop3: detected capacity change from 0 to 512 [ 162.370786][ T7692] EXT4-fs (loop3): 1 truncate cleaned up [ 162.377646][ T7692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.405255][ T7692] EXT4-fs warning (device loop3): ext4_group_extend:1885: will only finish group (8193 blocks, 7937 new) [ 162.429760][ T7692] EXT4-fs warning (device loop3): ext4_group_extend:1890: can't read last block, resize aborted [ 162.441500][ T7692] netlink: 16 bytes leftover after parsing attributes in process `syz.3.967'. [ 162.448121][ T3380] IPVS: starting estimator thread 0... [ 162.463467][ T7697] loop1: detected capacity change from 0 to 512 [ 162.472334][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.487009][ T7697] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 162.523828][ T7697] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.969: bad orphan inode 131083 [ 162.527610][ T7700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.970'. [ 162.536472][ T7697] loop1: lost filesystem error report for type 5 error -117 [ 162.544130][ T7697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.565566][ T7700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.970'. [ 162.575828][ T7698] IPVS: using max 2352 ests per chain, 117600 per kthread [ 162.619617][ T7703] loop3: detected capacity change from 0 to 512 [ 162.640412][ T28] audit: type=1400 audit(1779429004.566:1780): avc: denied { write } for pid=7696 comm="syz.1.969" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.662192][ T28] audit: type=1400 audit(1779429004.566:1781): avc: denied { create } for pid=7696 comm="syz.1.969" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 162.690733][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.702492][ T7703] EXT4-fs error (device loop3): ext4_quota_enable:7221: comm syz.3.970: Bad quota inum: 2, type: 1 [ 162.735924][ T7703] loop3: lost filesystem error report for type 5 error -117 [ 162.736076][ T7703] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 162.743542][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 162.743561][ C0] EXT4-fs (loop3): initial error at time 1779429004: ext4_quota_enable:7221 [ 162.743593][ C0] EXT4-fs (loop3): last error at time 1779429004: ext4_quota_enable:7221 [ 162.811032][ T7709] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 162.823636][ T7703] EXT4-fs (loop3): mount failed [ 162.893416][ T7718] netlink: 'syz.2.975': attribute type 1 has an invalid length. [ 162.914383][ T7709] dvmrp1: entered allmulticast mode [ 162.942846][ T7718] 8021q: adding VLAN 0 to HW filter on device bond7 [ 162.967065][ T7709] dvmrp1: left allmulticast mode [ 162.998082][ T7728] netlink: 32 bytes leftover after parsing attributes in process `syz.1.979'. [ 163.155674][ T7736] program syz.2.980 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.507653][ T7755] netlink: 'syz.1.988': attribute type 1 has an invalid length. [ 163.535381][ T7755] 8021q: adding VLAN 0 to HW filter on device bond7 [ 163.619702][ T2188] bond4: (slave dummy0): link status definitely down, disabling slave [ 163.636259][ T7758] loop1: detected capacity change from 0 to 512 [ 163.653856][ T2188] bond4: now running without any active interface! [ 163.679994][ T7768] program syz.2.993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.695807][ T7758] EXT4-fs error (device loop1): ext4_quota_enable:7221: comm syz.1.989: Bad quota inum: 2, type: 1 [ 163.714146][ T7758] loop1: lost filesystem error report for type 5 error -117 [ 163.714495][ T7758] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 163.721876][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 163.721896][ C1] EXT4-fs (loop1): initial error at time 1779429005: ext4_quota_enable:7221 [ 163.721914][ C1] EXT4-fs (loop1): last error at time 1779429005: ext4_quota_enable:7221 [ 163.760965][ T7758] EXT4-fs (loop1): mount failed [ 163.950371][ T7784] netlink: 'syz.1.999': attribute type 1 has an invalid length. [ 163.977832][ T7784] 8021q: adding VLAN 0 to HW filter on device bond8 [ 164.001070][ T7785] loop5: detected capacity change from 0 to 1024 [ 164.022734][ T7785] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 164.093781][ T7785] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 164.124654][ T7785] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: inode #32: comm syz.5.996: iget: special inode unallocated [ 164.137668][ T7785] loop5: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 164.138939][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 164.154778][ C0] EXT4-fs (loop5): initial error at time 1779429006: ext4_get_journal_inode:5896: inode 32 [ 164.158759][ T28] audit: type=1400 audit(1779429006.076:1782): avc: denied { map } for pid=7794 comm="syz.2.1003" path="socket:[18017]" dev="sockfs" ino=18017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.167181][ C0] EXT4-fs (loop5): last error at time 1779429006: ext4_get_journal_inode:5896: inode 32 [ 164.215442][ T7785] EXT4-fs (loop5): no journal found [ 164.224622][ T7785] EXT4-fs (loop5): can't get journal size [ 164.235603][ T7785] EXT4-fs (loop5): filesystem is read-only [ 164.287752][ T7785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 164.346368][ T28] audit: type=1400 audit(1779429006.076:1783): avc: denied { read } for pid=7794 comm="syz.2.1003" path="socket:[18017]" dev="sockfs" ino=18017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.411680][ T7793] netlink: 'syz.1.1002': attribute type 39 has an invalid length. [ 164.877241][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.235243][ T28] audit: type=1326 audit(1779429007.156:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.1.1009" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470223ce59 code=0x7ffc0000 [ 165.283489][ T7818] syzkaller0: entered promiscuous mode [ 165.284126][ T28] audit: type=1326 audit(1779429007.156:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.1.1009" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470223ce59 code=0x7ffc0000 [ 165.299504][ T7818] syzkaller0: entered allmulticast mode [ 165.331109][ T28] audit: type=1326 audit(1779429007.156:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.1.1009" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470223ce59 code=0x7ffc0000 [ 165.359785][ T28] audit: type=1326 audit(1779429007.156:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.1.1009" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470223ce59 code=0x7ffc0000 [ 165.389378][ T28] audit: type=1326 audit(1779429007.156:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.1.1009" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470223ce59 code=0x7ffc0000 [ 165.425032][ T28] audit: type=1326 audit(1779429007.156:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.1.1009" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f470223ce59 code=0x7ffc0000 [ 165.462646][ T28] audit: type=1326 audit(1779429007.156:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.1.1009" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470223ce59 code=0x7ffc0000 [ 165.469574][ T7827] netlink: 'syz.2.1013': attribute type 1 has an invalid length. [ 165.512772][ T28] audit: type=1326 audit(1779429007.156:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.1.1009" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470223ce59 code=0x7ffc0000 [ 165.550510][ T7827] 8021q: adding VLAN 0 to HW filter on device bond8 [ 165.590016][ T7832] loop5: detected capacity change from 0 to 512 [ 165.598977][ T28] audit: type=1326 audit(1779429007.156:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.1.1009" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470223ce59 code=0x7ffc0000 [ 165.624683][ T28] audit: type=1326 audit(1779429007.166:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.1.1009" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f470223ce59 code=0x7ffc0000 [ 165.706431][ T7832] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 165.745335][ T7832] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.870607][ T7834] netlink: 'syz.2.1016': attribute type 39 has an invalid length. [ 165.938807][ T7840] loop1: detected capacity change from 0 to 512 [ 165.959702][ T7840] EXT4-fs (loop1): 1 truncate cleaned up [ 165.969803][ T7840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.437023][ T7846] can0: slcan on ttyS3. [ 166.477200][ T7840] EXT4-fs warning (device loop1): ext4_group_extend:1885: will only finish group (8193 blocks, 7937 new) [ 166.493726][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 166.504912][ T7847] can0 (unregistered): slcan off ttyS3. [ 166.519801][ T7840] EXT4-fs warning (device loop1): ext4_group_extend:1890: can't read last block, resize aborted [ 166.536348][ T7846] loop2: detected capacity change from 0 to 512 [ 166.548390][ T7840] __nla_validate_parse: 10 callbacks suppressed [ 166.548417][ T7840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1017'. [ 166.580552][ T7846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.625195][ T7846] ext4 filesystem being mounted at /205/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.652943][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.766229][ T7847] can0: slcan on ttyS3. [ 166.807782][ T7846] xt_hashlimit: size too large, truncated to 1048576 [ 167.177067][ T7895] netlink: 'syz.5.1026': attribute type 1 has an invalid length. [ 167.247160][ T7895] 8021q: adding VLAN 0 to HW filter on device bond6 [ 167.422158][ T7845] can0 (unregistered): slcan off ttyS3. [ 167.426308][ T7921] FAULT_INJECTION: forcing a failure. [ 167.426308][ T7921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.455332][ T7921] CPU: 0 UID: 0 PID: 7921 Comm: syz.5.1031 Tainted: G W syzkaller #0 PREEMPT(full) [ 167.455368][ T7921] Tainted: [W]=WARN [ 167.455376][ T7921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.455418][ T7921] Call Trace: [ 167.455425][ T7921] [ 167.455432][ T7921] __dump_stack+0x1d/0x30 [ 167.455455][ T7921] dump_stack_lvl+0x95/0xd0 [ 167.455473][ T7921] dump_stack+0x15/0x1b [ 167.455504][ T7921] should_fail_ex+0x263/0x280 [ 167.455590][ T7921] should_fail+0xb/0x20 [ 167.455617][ T7921] should_fail_usercopy+0x1a/0x20 [ 167.455647][ T7921] _copy_to_user+0x20/0xa0 [ 167.455681][ T7921] simple_read_from_buffer+0xb5/0x130 [ 167.455715][ T7921] proc_fail_nth_read+0x10e/0x150 [ 167.455746][ T7921] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.455910][ T7921] vfs_read+0x1ab/0x7f0 [ 167.455939][ T7921] ? kmem_cache_free+0xca/0x380 [ 167.455961][ T7921] ? putname+0x7c/0xc0 [ 167.455977][ T7921] ksys_read+0xdc/0x1a0 [ 167.456051][ T7921] __x64_sys_read+0x40/0x50 [ 167.456127][ T7921] x64_sys_call+0x2886/0x3020 [ 167.456227][ T7921] do_syscall_64+0x12c/0x3b0 [ 167.456256][ T7921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.456279][ T7921] RIP: 0033:0x7f753575d68e [ 167.456295][ T7921] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 167.456315][ T7921] RSP: 002b:00007f75341f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.456377][ T7921] RAX: ffffffffffffffda RBX: 00007f75341f76c0 RCX: 00007f753575d68e [ 167.456390][ T7921] RDX: 000000000000000f RSI: 00007f75341f70a0 RDI: 0000000000000004 [ 167.456402][ T7921] RBP: 00007f75341f7090 R08: 0000000000000000 R09: 0000000000000000 [ 167.456450][ T7921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.456462][ T7921] R13: 00007f7535a16038 R14: 00007f7535a15fa0 R15: 00007ffd5ae354d8 [ 167.456479][ T7921] [ 167.780426][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.370844][ T7974] netlink: 'syz.2.1040': attribute type 1 has an invalid length. [ 168.418379][ T7974] 8021q: adding VLAN 0 to HW filter on device bond9 [ 168.819662][ T7980] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1042'. [ 168.830901][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1042'. [ 168.895527][ T7986] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 168.963387][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 169.030243][ T7987] dvmrp1: entered allmulticast mode [ 169.047955][ T7987] dvmrp1: left allmulticast mode [ 169.287909][ T8000] loop2: detected capacity change from 0 to 512 [ 169.296833][ T8002] netlink: 'syz.0.1051': attribute type 1 has an invalid length. [ 169.306375][ T8000] EXT4-fs: Ignoring removed nobh option [ 169.322944][ T8000] ext4: Unknown parameter 'smackfsdef' [ 169.335562][ T8005] loop3: detected capacity change from 0 to 512 [ 169.342246][ T8002] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.352579][ T8006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1051'. [ 169.384470][ T8005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 169.407391][ T8005] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.429243][ T7938] loop1: detected capacity change from 0 to 512 [ 169.525254][ T8016] loop0: detected capacity change from 0 to 512 [ 169.588204][ T8016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 169.619152][ T8016] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.812376][ T7938] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1029: corrupted inode contents [ 169.826516][ T7938] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 169.828947][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 169.846335][ C0] EXT4-fs (loop1): initial error at time 1779429011: ext4_do_update_inode:5690: inode 16 [ 169.856547][ C0] EXT4-fs (loop1): last error at time 1779429011: ext4_do_update_inode:5690: inode 16 [ 169.868318][ T7938] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.1029: mark_inode_dirty error [ 169.916252][ T8028] loop2: detected capacity change from 0 to 512 [ 170.019430][ T7938] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 170.022588][ T7938] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1029: corrupted inode contents [ 170.079225][ T8028] EXT4-fs (loop2): 1 truncate cleaned up [ 170.106575][ T8028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.146389][ T7938] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 170.151166][ T7938] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.1029: mark_inode_dirty error [ 170.277975][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 170.288268][ T8028] EXT4-fs warning (device loop2): ext4_group_extend:1885: will only finish group (8193 blocks, 7937 new) [ 170.309282][ T8028] EXT4-fs warning (device loop2): ext4_group_extend:1890: can't read last block, resize aborted [ 170.322051][ T7938] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 170.333376][ T7938] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1029: corrupted inode contents [ 170.366541][ T8028] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1055'. [ 170.429966][ T7938] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 170.430493][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 170.449389][ T7938] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 170.460024][ T7938] loop1: lost filesystem error report for type 5 error -117 [ 170.478366][ T7938] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1029: corrupted inode contents [ 170.504495][ T8038] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 170.539537][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.565275][ T7938] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 170.570921][ T7938] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.1029: mark_inode_dirty error [ 170.595002][ T7938] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 170.596643][ T7938] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 170.619745][ T7938] loop1: lost filesystem error report for type 5 error -117 [ 170.631176][ T7938] EXT4-fs (loop1): 1 truncate cleaned up [ 170.649790][ T1837] __quota_error: 154 callbacks suppressed [ 170.649805][ T1837] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 170.668956][ T1837] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 170.684916][ T8045] dvmrp1: entered allmulticast mode [ 170.694044][ T8045] dvmrp1: left allmulticast mode [ 170.702036][ T1837] loop1: lost filesystem error report for type 5 error -117 [ 170.733319][ T7938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.789384][ T7938] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.813484][ T28] audit: type=1400 audit(1779429012.736:1948): avc: denied { shutdown } for pid=8052 comm="syz.2.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 170.830016][ T8055] netlink: 'syz.3.1063': attribute type 1 has an invalid length. [ 170.854665][ T8055] 8021q: adding VLAN 0 to HW filter on device bond8 [ 170.866021][ T8055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1063'. [ 170.886082][ T28] audit: type=1400 audit(1779429012.806:1949): avc: denied { create } for pid=8052 comm="syz.2.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 170.906937][ T8053] netlink: 'syz.2.1062': attribute type 48 has an invalid length. [ 170.984338][ T8060] loop2: detected capacity change from 0 to 512 [ 170.988975][ T4054] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 170.990866][ T3559] Bluetooth: hci0: command 0x1003 tx timeout [ 171.003742][ T8060] EXT4-fs: Ignoring removed oldalloc option [ 171.023384][ T8060] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1065: bad orphan inode 32 [ 171.034141][ T8060] loop2: lost filesystem error report for type 5 error -117 [ 171.034947][ T8060] ext4_test_bit(bit=31, block=4) = 0 [ 171.042282][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 171.042301][ C1] EXT4-fs (loop2): initial error at time 1779429012: ext4_orphan_get:1423 [ 171.042330][ C1] EXT4-fs (loop2): last error at time 1779429012: ext4_orphan_get:1423 [ 171.071384][ T8060] EXT4-fs (loop2): 1 truncate cleaned up [ 171.077811][ T8060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.102371][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.122563][ T8065] loop2: detected capacity change from 0 to 512 [ 171.159348][ T8065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 171.176671][ T8065] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.293422][ T28] audit: type=1400 audit(1779429013.116:1950): avc: denied { write } for pid=8070 comm="syz.3.1069" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 171.368260][ T28] audit: type=1400 audit(1779429013.276:1951): avc: denied { write } for pid=8064 comm="syz.2.1067" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.121165][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 172.133355][ T28] audit: type=1400 audit(1779429014.046:1952): avc: denied { ioctl } for pid=8079 comm="syz.3.1073" path="socket:[18425]" dev="sockfs" ino=18425 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 172.274172][ T8086] netlink: 'syz.5.1074': attribute type 1 has an invalid length. [ 172.338259][ T8092] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1074'. [ 172.378213][ T8086] 8021q: adding VLAN 0 to HW filter on device bond7 [ 172.416595][ T8096] loop3: detected capacity change from 0 to 512 [ 172.485956][ T8096] EXT4-fs (loop3): 1 truncate cleaned up [ 172.495200][ T8099] loop5: detected capacity change from 0 to 512 [ 172.514692][ T8096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.529081][ T8099] EXT4-fs: Ignoring removed oldalloc option [ 172.544729][ T8096] EXT4-fs warning (device loop3): ext4_group_extend:1885: will only finish group (8193 blocks, 7937 new) [ 172.547000][ T8099] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.1078: bad orphan inode 32 [ 172.556732][ T8096] EXT4-fs warning (device loop3): ext4_group_extend:1890: can't read last block, resize aborted [ 172.595847][ T8099] loop5: lost filesystem error report for type 5 error -117 [ 172.596060][ T8099] ext4_test_bit(bit=31, block=4) = 0 [ 172.604135][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 172.604158][ C0] EXT4-fs (loop5): initial error at time 1779429014: ext4_orphan_get:1423 [ 172.604193][ C0] EXT4-fs (loop5): last error at time 1779429014: ext4_orphan_get:1423 [ 172.632998][ T8099] EXT4-fs (loop5): 1 truncate cleaned up [ 172.633703][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.639275][ T8099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.660564][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1079'. [ 172.661202][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.669581][ T3531] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 172.686297][ T8107] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1079'. [ 172.737913][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.751252][ T8111] loop3: detected capacity change from 0 to 512 [ 172.781356][ T8111] EXT4-fs (loop3): 1 truncate cleaned up [ 172.821779][ T8111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.883023][ T8111] EXT4-fs warning (device loop3): ext4_group_extend:1885: will only finish group (8193 blocks, 7937 new) [ 172.926246][ T8111] EXT4-fs warning (device loop3): ext4_group_extend:1890: can't read last block, resize aborted [ 172.948255][ T8128] netlink: 'syz.1.1088': attribute type 1 has an invalid length. [ 172.957010][ T8130] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1080'. [ 172.976144][ T8128] 8021q: adding VLAN 0 to HW filter on device bond9 [ 173.151325][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.348087][ T28] audit: type=1400 audit(1779429015.266:1953): avc: denied { read } for pid=8140 comm="syz.0.1092" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 174.218599][ T8150] EXT4-fs (loop3): 1 truncate cleaned up [ 174.230591][ T8155] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1096'. [ 174.261081][ T8150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.313108][ T8150] EXT4-fs warning (device loop3): ext4_group_extend:1885: will only finish group (8193 blocks, 7937 new) [ 174.325459][ T8155] can0: slcan on ttyS3. [ 174.367371][ T8150] EXT4-fs warning (device loop3): ext4_group_extend:1890: can't read last block, resize aborted [ 174.392250][ T8155] can0 (unregistered): slcan off ttyS3. [ 174.489771][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.003174][ T8164] set_capacity_and_notify: 1 callbacks suppressed [ 175.003358][ T8164] loop1: detected capacity change from 0 to 512 [ 175.133369][ T28] audit: type=1400 audit(1779429017.056:1954): avc: denied { write } for pid=8161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.326835][ T8164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.414288][ T28] audit: type=1400 audit(1779429017.326:1955): avc: denied { write } for pid=8185 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.461397][ T8164] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.532862][ T8188] netlink: 'syz.3.1099': attribute type 1 has an invalid length. [ 175.563304][ T8188] 8021q: adding VLAN 0 to HW filter on device bond9 [ 175.906278][ T8155] xt_hashlimit: size too large, truncated to 1048576 [ 175.932363][ T28] audit: type=1400 audit(1779429017.846:1956): avc: denied { write } for pid=8193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.032130][ T28] audit: type=1400 audit(1779429017.956:1957): avc: denied { write } for pid=8212 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.161955][ T8164] can0: slcan on ttyS3. [ 176.238206][ T28] audit: type=1400 audit(1779429018.156:1958): avc: denied { read } for pid=8217 comm="syz.3.1107" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 176.352567][ T28] audit: type=1400 audit(1779429018.216:1959): avc: denied { ioctl } for pid=8217 comm="syz.3.1107" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 176.407581][ T8226] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1108'. [ 176.483573][ T28] audit: type=1400 audit(1779429018.216:1960): avc: denied { read } for pid=8217 comm="syz.3.1107" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 176.566897][ T8226] can0 (unregistered): slcan off ttyS3. [ 176.582452][ T28] audit: type=1400 audit(1779429018.216:1961): avc: denied { open } for pid=8217 comm="syz.3.1107" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 176.625212][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.664750][ T28] audit: type=1400 audit(1779429018.236:1962): avc: denied { ioctl } for pid=8217 comm="syz.3.1107" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 176.666209][ T8243] program syz.0.1111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.735006][ T8243] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 176.751731][ T28] audit: type=1400 audit(1779429018.396:1963): avc: denied { write } for pid=8218 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.755326][ T8243] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1111'. [ 176.837341][ T28] audit: type=1400 audit(1779429018.406:1964): avc: denied { write } for pid=8232 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.896130][ T28] audit: type=1400 audit(1779429018.566:1965): avc: denied { append } for pid=8242 comm="syz.0.1111" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 176.904674][ T8236] loop3: detected capacity change from 0 to 512 [ 177.015483][ T8254] can0: slcan on ttyS3. [ 177.030443][ T8259] bond_slave_1: entered promiscuous mode [ 177.044826][ T8259] bond_slave_1: entered allmulticast mode [ 177.139510][ T8236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.175173][ T8277] netlink: 'syz.1.1114': attribute type 1 has an invalid length. [ 177.198133][ T8236] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.200926][ T8277] 8021q: adding VLAN 0 to HW filter on device bond10 [ 177.358941][ T8226] xt_hashlimit: size too large, truncated to 1048576 [ 177.889044][ T8253] can0 (unregistered): slcan off ttyS3. [ 177.975519][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.455538][ T8311] loop0: detected capacity change from 0 to 512 [ 178.634434][ T8311] EXT4-fs (loop0): 1 truncate cleaned up [ 178.666380][ T8311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.687601][ T8311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1123'. [ 178.804648][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.829157][ T8326] netlink: 'syz.3.1126': attribute type 1 has an invalid length. [ 178.862574][ T8326] 8021q: adding VLAN 0 to HW filter on device bond10 [ 178.979223][ T8335] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 179.519602][ T8352] tmpfs: Unknown parameter 'epol' [ 179.558786][ T8352] loop1: detected capacity change from 0 to 512 [ 179.693305][ T8352] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.737944][ T8344] dvmrp1: entered allmulticast mode [ 179.749533][ T8352] EXT4-fs: Ignoring removed i_version option [ 179.800718][ T8346] dvmrp1: left allmulticast mode [ 179.815749][ T8352] EXT4-fs: dax option not supported [ 180.087770][ T8352] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 180.387614][ T8358] syzkaller0: entered promiscuous mode [ 180.393276][ T8358] syzkaller0: entered allmulticast mode [ 180.617393][ T8368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1134'. [ 180.668372][ T8368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1134'. [ 180.687114][ T8373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1135'. [ 180.741157][ T8374] loop1: detected capacity change from 0 to 512 [ 180.803129][ T8374] EXT4-fs error (device loop1): ext4_quota_enable:7221: comm syz.1.1134: Bad quota inum: 2, type: 1 [ 180.804648][ T8380] netlink: 'syz.3.1137': attribute type 1 has an invalid length. [ 180.826515][ T8374] loop1: lost filesystem error report for type 5 error -117 [ 180.828950][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 180.842719][ C0] EXT4-fs (loop1): initial error at time 1779429022: ext4_quota_enable:7221 [ 180.851865][ C0] EXT4-fs (loop1): last error at time 1779429022: ext4_quota_enable:7221 [ 180.886078][ T8374] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 180.928603][ T8387] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 180.941819][ T8385] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1138'. [ 180.954467][ T8374] EXT4-fs (loop1): mount failed [ 180.965518][ T8385] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1138'. [ 180.981683][ T8385] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1138'. [ 181.037603][ T8385] netlink: 'syz.2.1138': attribute type 39 has an invalid length. [ 181.055631][ T8380] 8021q: adding VLAN 0 to HW filter on device bond11 [ 181.064331][ T3531] Bluetooth: hci0: sending frame failed (-49) [ 181.075536][ T4054] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 181.107444][ T8387] dvmrp1: entered allmulticast mode [ 181.139462][ T8387] dvmrp1: left allmulticast mode [ 181.359163][ T8395] loop2: detected capacity change from 0 to 32768 [ 181.372457][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 181.372472][ T28] audit: type=1326 audit(1779429023.296:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.1.1145" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470223ce59 code=0x7ffc0000 [ 181.406034][ T28] audit: type=1326 audit(1779429023.296:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.1.1145" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470223ce59 code=0x7ffc0000 [ 181.432082][ T28] audit: type=1326 audit(1779429023.296:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.1.1145" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470223ce59 code=0x7ffc0000 [ 181.480150][ T8395] SELinux: failed to load policy [ 181.484288][ T28] audit: type=1326 audit(1779429023.296:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.1.1145" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470223ce59 code=0x7ffc0000 [ 181.513044][ T28] audit: type=1326 audit(1779429023.296:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.1.1145" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470223ce59 code=0x7ffc0000 [ 181.541014][ T28] audit: type=1326 audit(1779429023.296:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.1.1145" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f470223ce59 code=0x7ffc0000 [ 181.567260][ T28] audit: type=1326 audit(1779429023.336:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.1.1145" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470223ce59 code=0x7ffc0000 [ 181.605141][ T8410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1147'. [ 181.686711][ T28] audit: type=1326 audit(1779429023.336:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.1.1145" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470223ce59 code=0x7ffc0000 [ 181.754239][ T8416] netlink: 'syz.3.1151': attribute type 1 has an invalid length. [ 181.759106][ T28] audit: type=1326 audit(1779429023.336:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.1.1145" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f470223cbc2 code=0x7ffc0000 [ 181.801626][ T28] audit: type=1326 audit(1779429023.336:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.1.1145" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f470223cc57 code=0x7ffc0000 [ 181.829367][ T8416] 8021q: adding VLAN 0 to HW filter on device bond12 [ 181.865925][ T8424] loop0: detected capacity change from 0 to 512 [ 181.909266][ T8428] loop1: detected capacity change from 0 to 512 [ 181.921101][ T8428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 181.923469][ T8434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1156'. [ 181.935319][ T8424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 181.955678][ T8424] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.959020][ T8428] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.986496][ T8434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1156'. [ 181.995112][ T8436] loop3: detected capacity change from 0 to 512 [ 182.022047][ T8438] loop2: detected capacity change from 0 to 512 [ 182.165109][ T8436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 182.180739][ T8436] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.516094][ T8438] EXT4-fs error (device loop2): ext4_quota_enable:7221: comm syz.2.1156: Bad quota inum: 2, type: 1 [ 182.527233][ T8438] loop2: lost filesystem error report for type 5 error -117 [ 182.527538][ T8438] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 182.534899][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 182.534917][ C0] EXT4-fs (loop2): initial error at time 1779429024: ext4_quota_enable:7221 [ 182.534941][ C0] EXT4-fs (loop2): last error at time 1779429024: ext4_quota_enable:7221 [ 182.574640][ T8438] EXT4-fs (loop2): mount failed [ 182.827169][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 182.838911][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 182.875477][ T8461] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 182.909274][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 182.987412][ T8469] netlink: 'syz.0.1167': attribute type 1 has an invalid length. [ 183.001694][ T8469] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.048566][ T8461] dvmrp1: entered allmulticast mode [ 183.055877][ T8461] dvmrp1: left allmulticast mode [ 183.226888][ T8484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.244216][ T8484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.273093][ T8489] loop0: detected capacity change from 0 to 512 [ 183.294769][ T8489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 183.309682][ T8489] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.418865][ T8497] loop3: detected capacity change from 0 to 512 [ 183.425569][ T8497] EXT4-fs: Ignoring removed oldalloc option [ 183.431933][ T8497] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.439057][ T8497] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 183.452800][ T8497] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1175: bg 0: block 104: invalid block bitmap [ 183.465826][ T8497] loop3: lost filesystem error report for type 5 error -117 [ 183.466009][ T8497] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 183.473422][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 183.473441][ C1] EXT4-fs (loop3): initial error at time 1779429025: ext4_validate_block_bitmap:432 [ 183.473475][ C1] EXT4-fs (loop3): last error at time 1779429025: ext4_validate_block_bitmap:432 [ 183.510987][ T8497] loop3: lost filesystem error report for type 5 error -117 [ 183.511282][ T8497] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1175: invalid indirect mapped block 1 (level 1) [ 183.598967][ T8497] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 183.599280][ T8497] EXT4-fs (loop3): 1 truncate cleaned up [ 183.616740][ T8497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.752519][ T8501] program syz.1.1176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.827455][ T8504] __nla_validate_parse: 2 callbacks suppressed [ 183.827544][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1177'. [ 183.856850][ T8507] netlink: 'syz.2.1178': attribute type 1 has an invalid length. [ 183.875195][ T8507] 8021q: adding VLAN 0 to HW filter on device bond10 [ 183.885373][ T8507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1178'. [ 183.920246][ T8502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1175'. [ 184.180491][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 184.196060][ T8528] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.205459][ T8528] loop2: detected capacity change from 0 to 512 [ 184.210453][ T8526] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1185'. [ 184.249131][ T8526] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1185'. [ 184.253428][ T8530] can0: slcan on ttyS3. [ 184.296166][ T8526] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1185'. [ 184.339730][ T8530] can0 (unregistered): slcan off ttyS3. [ 184.346797][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.456638][ T8551] netlink: 'syz.3.1190': attribute type 1 has an invalid length. [ 184.529843][ T8526] netlink: 'syz.5.1185': attribute type 39 has an invalid length. [ 184.559652][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1190'. [ 184.594571][ T8539] loop0: detected capacity change from 0 to 512 [ 184.603301][ T8551] 8021q: adding VLAN 0 to HW filter on device bond13 [ 184.667036][ T8568] program syz.3.1192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.745291][ T8576] can: request_module (can-proto-0) failed. [ 184.777238][ T8539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.793502][ T8539] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.879465][ T8530] xt_hashlimit: size too large, truncated to 1048576 [ 184.911586][ T8587] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1196: invalid block [ 184.944089][ T8594] EXT4-fs: Ignoring removed nobh option [ 184.957213][ T8587] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 184.958960][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 184.975082][ C1] EXT4-fs (loop5): initial error at time 1779429026: ext4_get_branch:178: inode 11: block 4294967295 [ 184.986029][ C1] EXT4-fs (loop5): last error at time 1779429026: ext4_get_branch:178: inode 11: block 4294967295 [ 185.003940][ T8587] EXT4-fs (loop5): Remounting filesystem read-only [ 185.011327][ T8587] EXT4-fs (loop5): 2 truncates cleaned up [ 185.011868][ T8594] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.018536][ T8587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.039288][ T8539] can0: slcan on ttyS3. [ 185.058046][ T8594] EXT4-fs (loop1): 1 truncate cleaned up [ 185.068509][ T8594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.111695][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.211305][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.232453][ T8611] netlink: 'syz.5.1202': attribute type 1 has an invalid length. [ 185.295779][ T8529] can0 (unregistered): slcan off ttyS3. [ 185.310215][ T8621] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1202'. [ 185.374104][ T8611] 8021q: adding VLAN 0 to HW filter on device bond8 [ 185.431208][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.534666][ T8626] SET target dimension over the limit! [ 185.546494][ T8640] syzkaller1: entered allmulticast mode [ 185.636713][ T8646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.665156][ T8646] netlink: 'syz.5.1208': attribute type 4 has an invalid length. [ 185.673416][ T8646] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1208'. [ 185.887913][ T8663] FAULT_INJECTION: forcing a failure. [ 185.887913][ T8663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.916323][ T8663] CPU: 0 UID: 0 PID: 8663 Comm: syz.1.1214 Tainted: G W syzkaller #0 PREEMPT(full) [ 185.916490][ T8663] Tainted: [W]=WARN [ 185.916537][ T8663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.916582][ T8663] Call Trace: [ 185.916593][ T8663] [ 185.916602][ T8663] __dump_stack+0x1d/0x30 [ 185.916625][ T8663] dump_stack_lvl+0x95/0xd0 [ 185.916659][ T8663] dump_stack+0x15/0x1b [ 185.916680][ T8663] should_fail_ex+0x263/0x280 [ 185.916712][ T8663] should_fail+0xb/0x20 [ 185.916738][ T8663] should_fail_usercopy+0x1a/0x20 [ 185.916888][ T8663] _copy_from_user+0x1c/0xb0 [ 185.916919][ T8663] ___sys_sendmsg+0xc1/0x1e0 [ 185.916993][ T8663] __x64_sys_sendmsg+0xd4/0x160 [ 185.917146][ T8663] x64_sys_call+0x194c/0x3020 [ 185.917171][ T8663] do_syscall_64+0x12c/0x3b0 [ 185.917203][ T8663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.917246][ T8663] RIP: 0033:0x7f470223ce59 [ 185.917263][ T8663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.917281][ T8663] RSP: 002b:00007f4700c8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.917310][ T8663] RAX: ffffffffffffffda RBX: 00007f47024b5fa0 RCX: 00007f470223ce59 [ 185.917325][ T8663] RDX: 000000002000c004 RSI: 0000200000000000 RDI: 0000000000000003 [ 185.917392][ T8663] RBP: 00007f4700c8f090 R08: 0000000000000000 R09: 0000000000000000 [ 185.917403][ T8663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.917421][ T8663] R13: 00007f47024b6038 R14: 00007f47024b5fa0 R15: 00007fffd727a8e8 [ 185.917469][ T8663] [ 186.096004][ T8666] set_capacity_and_notify: 3 callbacks suppressed [ 186.096063][ T8666] loop5: detected capacity change from 0 to 128 [ 186.122038][ T8671] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 186.147943][ T8671] 8021q: adding VLAN 0 to HW filter on device bond11 [ 186.166354][ T8671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1217'. [ 186.236328][ T8678] netlink: 'syz.2.1221': attribute type 17 has an invalid length. [ 186.646794][ T8682] loop1: detected capacity change from 0 to 512 [ 186.727499][ T8682] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1220: corrupted inode contents [ 186.740489][ T8682] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 186.743480][ T8682] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.1220: mark_inode_dirty error [ 186.752981][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 186.753009][ C0] EXT4-fs (loop1): initial error at time 1779429028: ext4_do_update_inode:5690: inode 16 [ 186.753089][ C0] EXT4-fs (loop1): last error at time 1779429028: ext4_do_update_inode:5690: inode 16 [ 186.792141][ T8682] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 186.796647][ T8682] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1220: corrupted inode contents [ 186.818984][ T8682] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 186.820273][ T8682] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.1220: mark_inode_dirty error [ 186.841938][ T8682] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 186.843358][ T8682] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1220: corrupted inode contents [ 186.865468][ T8682] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 186.866647][ T8682] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 186.885176][ T8682] loop1: lost filesystem error report for type 5 error -117 [ 186.886659][ T8682] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1220: corrupted inode contents [ 186.907000][ T8682] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 186.911098][ T8682] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.1220: mark_inode_dirty error [ 186.934503][ T8682] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 186.935769][ T8682] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 186.954310][ T8682] loop1: lost filesystem error report for type 5 error -117 [ 186.957423][ T8682] EXT4-fs (loop1): 1 truncate cleaned up [ 186.978912][ T8682] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.046587][ T30] __quota_error: 209 callbacks suppressed [ 187.046605][ T30] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 187.148265][ T30] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 187.205672][ T8690] batadv_slave_1: entered promiscuous mode [ 187.214391][ T8689] batadv_slave_1: left promiscuous mode [ 187.293912][ T8696] loop3: detected capacity change from 0 to 512 [ 187.347437][ T8696] EXT4-fs: Ignoring removed nobh option [ 187.384133][ T8696] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 187.439320][ T8696] EXT4-fs (loop3): 1 truncate cleaned up [ 187.469452][ T28] audit: type=1400 audit(1779429029.396:2195): avc: denied { write } for pid=8695 comm="syz.3.1224" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.536747][ T8714] netlink: 'syz.0.1231': attribute type 1 has an invalid length. [ 187.557146][ T28] audit: type=1400 audit(1779429029.416:2196): avc: denied { write } for pid=8695 comm="syz.3.1224" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.612956][ T8714] 8021q: adding VLAN 0 to HW filter on device bond5 [ 187.653695][ T28] audit: type=1400 audit(1779429029.416:2197): avc: denied { write } for pid=8695 comm="syz.3.1224" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.846005][ T28] audit: type=1400 audit(1779429029.436:2198): avc: denied { bind } for pid=8711 comm="syz.2.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.133732][ T28] audit: type=1400 audit(1779429030.056:2199): avc: denied { read } for pid=8747 comm="syz.2.1244" dev="sockfs" ino=21187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 188.170429][ T28] audit: type=1400 audit(1779429030.086:2200): avc: denied { create } for pid=8753 comm="syz.1.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 188.201561][ T28] audit: type=1400 audit(1779429030.086:2201): avc: denied { ioctl } for pid=8753 comm="syz.1.1246" path="socket:[20296]" dev="sockfs" ino=20296 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 188.230988][ T8757] netlink: 'syz.1.1247': attribute type 1 has an invalid length. [ 188.255090][ T8757] 8021q: adding VLAN 0 to HW filter on device bond12 [ 188.296366][ T8763] tipc: Enabling of bearer rejected, failed to enable media [ 188.329651][ T8764] loop1: detected capacity change from 0 to 512 [ 188.343208][ T8763] loop0: detected capacity change from 0 to 512 [ 188.366711][ T8763] EXT4-fs mount: 5 callbacks suppressed [ 188.366727][ T8763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.377463][ T8764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 188.385077][ T8763] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.397849][ T8764] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.417232][ T8763] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 49 (only 1 groups) [ 188.480415][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.583837][ T28] audit: type=1400 audit(1779429030.476:2202): avc: denied { write } for pid=8761 comm="syz.1.1250" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.710547][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 188.811567][ T8778] loop0: detected capacity change from 0 to 512 [ 188.863204][ T8778] EXT4-fs error (device loop0): ext4_quota_enable:7221: comm syz.0.1252: Bad quota inum: 2, type: 1 [ 188.879577][ T8778] loop0: lost filesystem error report for type 5 error -117 [ 188.879954][ T8778] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 188.901996][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 188.902036][ C1] EXT4-fs (loop0): initial error at time 1779429030: ext4_quota_enable:7221 [ 188.902056][ C1] EXT4-fs (loop0): last error at time 1779429030: ext4_quota_enable:7221 [ 188.989259][ T8778] EXT4-fs (loop0): mount failed [ 189.013767][ T8786] loop1: detected capacity change from 0 to 512 [ 189.029425][ T8786] EXT4-fs (loop1): 1 truncate cleaned up [ 189.042963][ T8788] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 189.043312][ T8786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.090149][ T8786] EXT4-fs warning (device loop1): ext4_group_extend:1885: will only finish group (8193 blocks, 7937 new) [ 189.102381][ T8786] EXT4-fs warning (device loop1): ext4_group_extend:1890: can't read last block, resize aborted [ 189.113814][ T8786] __nla_validate_parse: 5 callbacks suppressed [ 189.113840][ T8786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1256'. [ 189.150082][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.232574][ T8799] program syz.1.1259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.267196][ T8797] usb usb7: usbfs: process 8797 (syz.0.1261) did not claim interface 0 before use [ 189.313664][ T8804] loop5: detected capacity change from 0 to 512 [ 189.345254][ T8807] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 189.376408][ T8804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 189.391397][ T8811] loop2: detected capacity change from 0 to 512 [ 189.447994][ T8804] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.522541][ T8811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.618752][ T28] audit: type=1400 audit(1779429031.536:2203): avc: denied { write } for pid=8803 comm="syz.5.1263" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.762994][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 189.867332][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.900207][ T8831] xt_CONNSECMARK: invalid mode: 0 [ 189.937223][ T8831] loop0: detected capacity change from 0 to 512 [ 189.955093][ T8831] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 189.997741][ T8831] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 190.002720][ T8835] EXT4-fs (loop2): 1 truncate cleaned up [ 190.023560][ T8831] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 190.041914][ T8831] System zones: 0-2, 18-18, 34-34 [ 190.056388][ T8831] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1270: bad orphan inode 15 [ 190.085625][ T8835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.101151][ T8831] loop0: lost filesystem error report for type 5 error -117 [ 190.102852][ T8831] ext4_test_bit(bit=14, block=18) = 1 [ 190.110206][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 190.110221][ C1] EXT4-fs (loop0): initial error at time 1779429032: ext4_orphan_get:1423 [ 190.110242][ C1] EXT4-fs (loop0): last error at time 1779429032: ext4_orphan_get:1423 [ 190.150970][ T8835] EXT4-fs warning (device loop2): ext4_group_extend:1885: will only finish group (8193 blocks, 7937 new) [ 190.185947][ T8835] EXT4-fs warning (device loop2): ext4_group_extend:1890: can't read last block, resize aborted [ 190.200347][ T8831] is_bad_inode(inode)=0 [ 190.209727][ T8831] NEXT_ORPHAN(inode)=2264924160 [ 190.213692][ T8835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1269'. [ 190.234469][ T8831] max_ino=32 [ 190.244625][ T8831] i_nlink=0 [ 190.248004][ T8831] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.1270: corrupted inode contents [ 190.263928][ T8831] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 190.264320][ T8831] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #15: comm syz.0.1270: mark_inode_dirty error [ 190.303843][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.309396][ T8831] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 190.315262][ T8831] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.1270: corrupted inode contents [ 190.381670][ T8851] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 190.429179][ T8831] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 190.429340][ T8831] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.1270: mark_inode_dirty error [ 190.453714][ T8831] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 190.453914][ T8831] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.1270: mark inode dirty (error -117) [ 190.476044][ T8831] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 190.476267][ T8851] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.481657][ T8859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1278'. [ 190.485916][ T8831] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 190.521879][ T8859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1278'. [ 190.522424][ T8831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.626442][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.650729][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 190.684724][ T8860] EXT4-fs error (device loop2): ext4_quota_enable:7221: comm syz.2.1278: Bad quota inum: 2, type: 1 [ 190.731248][ T8860] loop2: lost filesystem error report for type 5 error -117 [ 190.731791][ T8860] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 190.739580][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 190.739602][ C0] EXT4-fs (loop2): initial error at time 1779429032: ext4_quota_enable:7221 [ 190.739649][ C0] EXT4-fs (loop2): last error at time 1779429032: ext4_quota_enable:7221 [ 190.796264][ T8860] EXT4-fs (loop2): mount failed [ 190.897304][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1285'. [ 190.938804][ T8872] netlink: 'syz.1.1285': attribute type 30 has an invalid length. [ 190.978074][ T8878] EXT4-fs (loop0): 1 truncate cleaned up [ 190.991604][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1285'. [ 191.002530][ T8882] netlink: 'syz.1.1285': attribute type 30 has an invalid length. [ 191.016177][ T8878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.117777][ T8878] EXT4-fs warning (device loop0): ext4_group_extend:1885: will only finish group (8193 blocks, 7937 new) [ 191.234559][ T8892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1288'. [ 191.234823][ T8878] EXT4-fs warning (device loop0): ext4_group_extend:1890: can't read last block, resize aborted [ 191.268250][ T8889] usb usb7: usbfs: process 8889 (syz.5.1291) did not claim interface 0 before use [ 191.324173][ T8769] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.1248: corrupted inode contents [ 191.343368][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.392570][ T8769] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 191.398946][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 191.409943][ T8902] set_capacity_and_notify: 5 callbacks suppressed [ 191.410039][ T8902] loop0: detected capacity change from 0 to 512 [ 191.415589][ C0] EXT4-fs (loop3): initial error at time 1779429033: ext4_do_update_inode:5690: inode 16 [ 191.441050][ C0] EXT4-fs (loop3): last error at time 1779429033: ext4_do_update_inode:5690: inode 16 [ 191.444878][ T8902] rpc_pipefs: Unknown parameter 'bsdgroups' [ 191.460657][ T8769] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #16: comm syz.3.1248: mark_inode_dirty error [ 191.467407][ T8904] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1297'. [ 191.502382][ T8769] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 191.507314][ T8904] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1297'. [ 191.519946][ T8769] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.1248: corrupted inode contents [ 191.563216][ T8907] loop5: detected capacity change from 0 to 512 [ 191.617452][ T8907] EXT4-fs error (device loop5): ext4_quota_enable:7221: comm syz.5.1297: Bad quota inum: 2, type: 1 [ 191.630590][ T8769] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 191.631288][ T8769] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.1248: mark_inode_dirty error [ 191.632516][ T8907] loop5: lost filesystem error report for type 5 error -117 [ 191.652354][ T8769] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 191.668145][ T8907] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 191.677400][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 191.677417][ C1] EXT4-fs (loop5): initial error at time 1779429033: ext4_quota_enable:7221 [ 191.677436][ C1] EXT4-fs (loop5): last error at time 1779429033: ext4_quota_enable:7221 [ 191.679921][ T8769] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.1248: corrupted inode contents [ 191.732182][ T8907] EXT4-fs (loop5): mount failed [ 191.761190][ T8769] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 191.762524][ T8769] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 191.781631][ T8769] loop3: lost filesystem error report for type 5 error -117 [ 191.781830][ T8769] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.1248: corrupted inode contents [ 191.802914][ T8769] EXT4-fs error (device loop3): ext4_truncate:4690: inode #16: comm syz.3.1248: mark_inode_dirty error [ 191.884851][ T8769] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 192.045072][ T8769] loop3: lost filesystem error report for type 5 error -117 [ 192.163265][ T8769] EXT4-fs (loop3): 1 truncate cleaned up [ 192.371992][ T8927] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1304'. [ 192.423009][ T8769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.426166][ T2188] __quota_error: 20 callbacks suppressed [ 192.426182][ T2188] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 192.440200][ T8769] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.465477][ T2188] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:12: Failed to release dquot type 1 [ 192.672688][ T8933] loop5: detected capacity change from 0 to 512 [ 192.695641][ T8928] netlink: 'syz.1.1304': attribute type 39 has an invalid length. [ 192.724882][ T8937] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 192.762563][ T8933] EXT4-fs (loop5): 1 truncate cleaned up [ 192.801644][ T8933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.876251][ T8933] EXT4-fs warning (device loop5): ext4_group_extend:1885: will only finish group (8193 blocks, 7937 new) [ 192.923696][ T2087] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.939783][ T8933] EXT4-fs warning (device loop5): ext4_group_extend:1890: can't read last block, resize aborted [ 192.965038][ T2087] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 193.011467][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.112249][ T8955] syzkaller0: entered promiscuous mode [ 193.131715][ T8955] syzkaller0: entered allmulticast mode [ 193.141591][ T8963] loop5: detected capacity change from 0 to 512 [ 193.175289][ T8963] EXT4-fs error (device loop5): ext4_quota_enable:7221: comm syz.5.1313: Bad quota inum: 2, type: 1 [ 193.198718][ T8963] loop5: lost filesystem error report for type 5 error -117 [ 193.199617][ T8963] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 193.221747][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 193.221770][ C0] EXT4-fs (loop5): initial error at time 1779429035: ext4_quota_enable:7221 [ 193.221812][ C0] EXT4-fs (loop5): last error at time 1779429035: ext4_quota_enable:7221 [ 193.245887][ T8963] EXT4-fs (loop5): mount failed [ 193.277172][ T8967] netlink: 'syz.0.1314': attribute type 39 has an invalid length. [ 193.292400][ T2087] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.309076][ T2087] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 193.409923][ T2087] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.433324][ T2087] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 193.454139][ T8973] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 193.479827][ T8914] loop2: detected capacity change from 0 to 512 [ 193.493355][ T176] Bluetooth: hci0: Frame reassembly failed (-84) [ 193.524702][ T2087] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.535324][ T2087] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 193.575785][ T8976] dvmrp1: entered allmulticast mode [ 193.647790][ T8976] dvmrp1: left allmulticast mode [ 193.706333][ T2087] bridge_slave_1: left allmulticast mode [ 193.720503][ T2087] bridge_slave_1: left promiscuous mode [ 193.740279][ T2087] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.793140][ T8988] netlink: 'syz.0.1320': attribute type 39 has an invalid length. [ 193.812467][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.831757][ T8914] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.1294: corrupted inode contents [ 193.848950][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 193.853750][ T8914] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.1294: mark_inode_dirty error [ 193.855414][ C1] EXT4-fs (loop2): initial error at time 1779429035: ext4_do_update_inode:5690: inode 16 [ 193.855449][ C1] EXT4-fs (loop2): last error at time 1779429035: ext4_do_update_inode:5690: inode 16 [ 193.892814][ T8991] loop3: detected capacity change from 0 to 512 [ 193.893006][ T8914] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.1294: corrupted inode contents [ 193.920135][ T8914] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.1294: mark_inode_dirty error [ 193.937193][ T2087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.940810][ T8914] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.1294: corrupted inode contents [ 193.964807][ T8914] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 193.976594][ T2087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.986624][ T8914] loop2: lost filesystem error report for type 5 error -117 [ 193.989375][ T8914] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.1294: corrupted inode contents [ 194.011577][ T2087] bond0 (unregistering): Released all slaves [ 194.021744][ T8914] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.1294: mark_inode_dirty error [ 194.045473][ T8914] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 194.132362][ T28] audit: type=1326 audit(1779429036.056:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8999 comm="syz.0.1325" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bcc8ce59 code=0x7ffc0000 [ 194.160759][ T8914] loop2: lost filesystem error report for type 5 error -117 [ 194.161753][ T8996] loop5: detected capacity change from 0 to 512 [ 194.179106][ T28] audit: type=1326 audit(1779429036.076:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8999 comm="syz.0.1325" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bcc8ce59 code=0x7ffc0000 [ 194.209565][ T2087] hsr_slave_0: left promiscuous mode [ 194.219441][ T2087] hsr_slave_1: left promiscuous mode [ 194.226548][ T8914] EXT4-fs (loop2): 1 truncate cleaned up [ 194.227159][ T2087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.245021][ T30] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 194.245292][ T8996] EXT4-fs (loop5): 1 truncate cleaned up [ 194.274898][ T8914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.276578][ T30] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 194.289565][ T28] audit: type=1326 audit(1779429036.076:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8999 comm="syz.0.1325" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bcc8ce59 code=0x7ffc0000 [ 194.310228][ T8996] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.328666][ T8914] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.345988][ T2087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.352853][ T28] audit: type=1326 audit(1779429036.076:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8999 comm="syz.0.1325" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bcc8ce59 code=0x7ffc0000 [ 194.399531][ T2087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.407048][ T28] audit: type=1326 audit(1779429036.086:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8999 comm="syz.0.1325" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f14bcc8ce59 code=0x7ffc0000 [ 194.410388][ T2087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.459063][ T8996] EXT4-fs warning (device loop5): ext4_group_extend:1885: will only finish group (8193 blocks, 7937 new) [ 194.483889][ T8996] EXT4-fs warning (device loop5): ext4_group_extend:1890: can't read last block, resize aborted [ 194.504490][ T28] audit: type=1326 audit(1779429036.086:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8999 comm="syz.0.1325" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bcc8ce59 code=0x7ffc0000 [ 194.506572][ T8996] __nla_validate_parse: 11 callbacks suppressed [ 194.506619][ T8996] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1323'. [ 194.538518][ T8914] syz.2.1294 (8914) used greatest stack depth: 8256 bytes left [ 194.558850][ T30] Bluetooth: hci1: Frame reassembly failed (-84) [ 194.558875][ T28] audit: type=1326 audit(1779429036.086:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8999 comm="syz.0.1325" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bcc8ce59 code=0x7ffc0000 [ 194.591274][ T28] audit: type=1326 audit(1779429036.086:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8999 comm="syz.0.1325" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bcc8ce59 code=0x7ffc0000 [ 194.604120][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.625962][ T2087] veth1_macvtap: left promiscuous mode [ 194.631933][ T2087] veth0_macvtap: left promiscuous mode [ 194.637570][ T2087] veth1_vlan: left promiscuous mode [ 194.643014][ T2087] veth0_vlan: left promiscuous mode [ 194.648843][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.803691][ T2087] team0 (unregistering): Port device team_slave_1 removed [ 194.822569][ T2087] team0 (unregistering): Port device team_slave_0 removed [ 194.855533][ T3030] 8021q: adding VLAN 0 to HW filter on device eth1 [ 194.863263][ T9030] syzkaller0: entered promiscuous mode [ 194.868809][ T9030] syzkaller0: entered allmulticast mode [ 194.907273][ T9045] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1332'. [ 195.113440][ T9045] can0: slcan on ttyS3. [ 195.149146][ T3030] 8021q: adding VLAN 0 to HW filter on device eth2 [ 195.189837][ T9056] can0 (unregistered): slcan off ttyS3. [ 195.344216][ T9060] loop2: detected capacity change from 0 to 512 [ 195.485946][ T3030] 8021q: adding VLAN 0 to HW filter on device eth3 [ 195.555370][ T3559] Bluetooth: hci0: command 0x1003 tx timeout [ 195.561531][ T4054] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 195.633833][ T9060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.663120][ T9060] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.877547][ T9056] can0: slcan on ttyS3. [ 195.894679][ T3030] 8021q: adding VLAN 0 to HW filter on device eth4 [ 196.021864][ T9116] loop0: detected capacity change from 0 to 512 [ 196.049372][ T9116] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 196.079246][ T9116] EXT4-fs (loop0): orphan cleanup on readonly fs [ 196.085970][ T9116] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.1338: Failed to acquire dquot type 1 [ 196.112545][ T9116] loop0: lost filesystem error report for type 5 error -5 [ 196.114609][ T9116] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1338: bg 0: block 40: padding at end of block bitmap is not set [ 196.121865][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 196.121887][ C1] EXT4-fs (loop0): initial error at time 1779429038: ext4_acquire_dquot:7034 [ 196.121913][ C1] EXT4-fs (loop0): last error at time 1779429038: ext4_acquire_dquot:7034 [ 196.167179][ T9044] can0 (unregistered): slcan off ttyS3. [ 196.220184][ T9045] xt_hashlimit: size too large, truncated to 1048576 [ 196.273592][ T9131] raw_sendmsg: syz.1.1340 forgot to set AF_INET. Fix it! [ 196.284300][ T9116] loop0: lost filesystem error report for type 5 error -117 [ 196.285795][ T9116] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 196.345632][ T9116] loop0: lost filesystem error report for type 5 error -117 [ 196.348346][ T9116] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #16: comm syz.0.1338: data will be lost [ 196.386247][ T9047] loop5: detected capacity change from 0 to 512 [ 196.399238][ T9116] EXT4-fs (loop0): 1 truncate cleaned up [ 196.410540][ T9116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 196.578992][ T3531] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 196.633191][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.649012][ T9116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1338'. [ 196.792580][ T9166] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1346'. [ 196.845983][ T9166] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1346'. [ 196.891404][ T9166] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1346'. [ 196.944739][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.965995][ T9047] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1331: corrupted inode contents [ 197.027138][ T9174] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1349'. [ 197.040914][ T9047] fserror_report: 9 callbacks suppressed [ 197.040987][ T9047] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 197.068963][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 197.083572][ T9178] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 197.085429][ C0] EXT4-fs (loop5): initial error at time 1779429038: ext4_do_update_inode:5690: inode 16 [ 197.103292][ T9047] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #16: comm syz.5.1331: mark_inode_dirty error [ 197.105514][ C0] EXT4-fs (loop5): last error at time 1779429038: ext4_do_update_inode:5690: inode 16 [ 197.109740][ T9179] netlink: 'syz.1.1346': attribute type 39 has an invalid length. [ 197.139248][ T9174] can0: slcan on ttyS3. [ 197.201695][ T9174] loop2: detected capacity change from 0 to 512 [ 197.251237][ T9184] dvmrp1: entered allmulticast mode [ 197.263116][ T9180] can0 (unregistered): slcan off ttyS3. [ 197.288029][ T9184] dvmrp1: left allmulticast mode [ 197.305778][ T9047] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 197.309677][ T9047] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1331: corrupted inode contents [ 197.350067][ T9174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.353273][ T9186] loop3: detected capacity change from 0 to 1024 [ 197.369242][ T9174] ext4 filesystem being mounted at /271/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.395408][ T9047] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 197.403082][ T9047] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.1331: mark_inode_dirty error [ 197.457654][ T9186] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 197.458123][ T9174] xt_hashlimit: size too large, truncated to 1048576 [ 197.466342][ T9180] can0: slcan on ttyS3. [ 197.478479][ T9047] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 197.491589][ T9186] System zones: [ 197.502535][ T9047] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1331: corrupted inode contents [ 197.571789][ T9186] 0-1, 3-36 [ 197.608460][ T9186] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1352: bad orphan inode 134217728 [ 197.637838][ T9047] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 197.640263][ T9203] netlink: 'syz.1.1355': attribute type 10 has an invalid length. [ 197.667136][ T9047] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 197.688840][ T28] kauditd_printk_skb: 245 callbacks suppressed [ 197.688857][ T28] audit: type=1400 audit(1779429039.606:2475): avc: denied { write } for pid=9198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.688917][ T9186] loop3: lost filesystem error report for type 5 error -117 [ 197.723735][ T9203] bridge0: port 1(team0) entered disabled state [ 197.732377][ T9047] loop5: lost filesystem error report for type 5 error -117 [ 197.749520][ T9047] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1331: corrupted inode contents [ 197.766097][ T28] audit: type=1400 audit(1779429039.686:2476): avc: denied { write } for pid=9213 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.803756][ T9203] team0 (unregistering): left allmulticast mode [ 197.822076][ T9203] team_slave_0: left allmulticast mode [ 197.828081][ T9203] team_slave_1: left allmulticast mode [ 197.828479][ T9186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.835000][ T9203] team0 (unregistering): left promiscuous mode [ 197.854401][ T9047] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 197.856152][ T9203] team_slave_0: left promiscuous mode [ 197.856425][ T9047] EXT4-fs error (device loop5): ext4_truncate:4690: inode #16: comm syz.5.1331: mark_inode_dirty error [ 197.867934][ T9203] team_slave_1: left promiscuous mode [ 197.893906][ T9203] bridge0: port 1(team0) entered disabled state [ 197.913422][ T9047] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 197.919660][ T9047] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 197.924771][ T9203] team0 (unregistering): Port device team_slave_0 removed [ 197.949969][ T9047] loop5: lost filesystem error report for type 5 error -117 [ 197.972107][ T9203] team0 (unregistering): Port device team_slave_1 removed [ 197.991124][ T9047] EXT4-fs (loop5): 1 truncate cleaned up [ 197.997064][ T28] audit: type=1400 audit(1779429039.916:2477): avc: denied { write } for pid=9185 comm="syz.3.1352" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.042322][ T9203] team0 (unregistering): Port device bridge2 removed [ 198.050612][ T28] audit: type=1400 audit(1779429039.916:2478): avc: denied { connect } for pid=9185 comm="syz.3.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.067189][ T12] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 198.110933][ T9047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.136057][ T12] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 1 [ 198.148293][ T9172] can0 (unregistered): slcan off ttyS3. [ 198.185087][ T12] loop5: lost filesystem error report for type 5 error -117 [ 198.189838][ T9047] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.215980][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.295741][ T28] audit: type=1400 audit(1779429040.216:2479): avc: denied { write } for pid=9217 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.475943][ T28] audit: type=1400 audit(1779429040.396:2480): avc: denied { write } for pid=9240 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.598125][ T9242] loop1: detected capacity change from 0 to 256 [ 198.620334][ T9242] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.656539][ T9242] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 198.665279][ T9242] FAT-fs (loop1): Filesystem has been set read-only [ 198.673241][ T9242] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 199.295951][ T3531] Bluetooth: hci0: command 0x1003 tx timeout [ 199.303057][ T4054] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 199.516161][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.533228][ T28] audit: type=1326 audit(1779429041.456:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9244 comm="syz.2.1360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ef56ce59 code=0x7ffc0000 [ 199.600405][ T28] audit: type=1326 audit(1779429041.456:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9244 comm="syz.2.1360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ef56ce59 code=0x7ffc0000 [ 199.687381][ T28] audit: type=1326 audit(1779429041.456:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9244 comm="syz.2.1360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ef56ce59 code=0x7ffc0000 [ 199.784829][ T9247] loop2: detected capacity change from 0 to 512 [ 199.823843][ T9247] EXT4-fs (loop2): 1 truncate cleaned up [ 199.849522][ T9247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.891992][ T9247] EXT4-fs warning (device loop2): ext4_group_extend:1885: will only finish group (8193 blocks, 7937 new) [ 199.926515][ T9247] EXT4-fs warning (device loop2): ext4_group_extend:1890: can't read last block, resize aborted [ 199.983570][ T9250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1362'. [ 200.075079][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.132857][ T9255] usb usb7: usbfs: process 9255 (syz.0.1366) did not claim interface 0 before use [ 200.221762][ T9257] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1367'. [ 200.247684][ T9238] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 200.255694][ T9238] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 200.326099][ T9257] can0: slcan on ttyS3. [ 200.427948][ T9257] can0 (unregistered): slcan off ttyS3. [ 200.653936][ T9291] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 200.715055][ T9294] loop3: detected capacity change from 0 to 512 [ 200.755131][ T9294] EXT4-fs (loop3): 1 truncate cleaned up [ 200.769628][ T9294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.786091][ T9291] dvmrp1: entered allmulticast mode [ 200.793773][ T9291] dvmrp1: left allmulticast mode [ 200.832338][ T9294] EXT4-fs warning (device loop3): ext4_group_extend:1885: will only finish group (8193 blocks, 7937 new) [ 200.834562][ T9269] loop0: detected capacity change from 0 to 512 [ 200.875967][ T9294] EXT4-fs warning (device loop3): ext4_group_extend:1890: can't read last block, resize aborted [ 200.903064][ T9294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1375'. [ 200.953838][ T9269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.983538][ T9269] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.998174][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.084258][ T9257] xt_hashlimit: size too large, truncated to 1048576 [ 201.090775][ T9324] netlink: 'syz.3.1377': attribute type 10 has an invalid length. [ 201.274657][ T9269] can0: slcan on ttyS3. [ 201.282057][ T9327] syzkaller1: entered promiscuous mode [ 201.292315][ T9327] syzkaller1: entered allmulticast mode [ 201.480491][ T5420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.515727][ T9351] loop3: detected capacity change from 0 to 2048 [ 201.529306][ T9257] can0 (unregistered): slcan off ttyS3. [ 201.549239][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.572675][ T9351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.633451][ T9351] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.695105][ T9373] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 201.729666][ T9351] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1382'. [ 201.822024][ T176] Bluetooth: hci1: Frame reassembly failed (-84) [ 201.851212][ T9351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.867203][ T9351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.880193][ T9351] bond0 (unregistering): Released all slaves [ 201.900719][ T9373] dvmrp1: entered allmulticast mode [ 201.914993][ T9373] dvmrp1: left allmulticast mode [ 201.970310][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.050032][ T9395] loop3: detected capacity change from 0 to 512 [ 202.067619][ T9395] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 202.234183][ T9393] ------------[ cut here ]------------ [ 202.239692][ T9393] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#1: syz.0.1389/9393 [ 202.249810][ T9393] Modules linked in: [ 202.254029][ T9393] CPU: 1 UID: 0 PID: 9393 Comm: syz.0.1389 Tainted: G W syzkaller #0 PREEMPT(full) [ 202.264925][ T9393] Tainted: [W]=WARN [ 202.269325][ T9393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 202.279600][ T9393] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 202.285254][ T9393] Code: 8b 05 e1 88 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 04 38 5f 04 cc e8 8e 1b 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 80 1b 1e 00 90 0f 0b 90 e9 af fa ff ff [ 202.304892][ T9393] RSP: 0018:ffffc90000ef3dd8 EFLAGS: 00010093 [ 202.310965][ T9393] RAX: ffffffff813b1762 RBX: ffff888105c33300 RCX: ffff888105c33300 [ 202.319009][ T9393] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 202.327250][ T9393] RBP: 0000000000000080 R08: ffff888105c33e00 R09: 0000000000000000 [ 202.335233][ T9393] R10: ffffc90000ef3df0 R11: 0001c90000ef3df0 R12: ffff888105c33300 [ 202.343285][ T9393] R13: ffff888105c33b28 R14: ffff888105113190 R15: 0000000000000080 [ 202.351268][ T9393] FS: 0000000000000000(0000) GS:ffff8882ae9fa000(0000) knlGS:0000000000000000 [ 202.360825][ T9393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.367499][ T9393] CR2: 000000110c2ca3de CR3: 0000000155be0000 CR4: 00000000003506f0 [ 202.375545][ T9393] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 202.383661][ T9393] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 202.391645][ T9393] Call Trace: [ 202.394978][ T9393] [ 202.397909][ T9393] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 202.403363][ T9393] ? __list_add_valid_or_report+0x38/0xe0 [ 202.409088][ T9393] do_exit+0xc13/0x1530 [ 202.413252][ T9393] ? switch_fpu_return+0xe7/0x1b0 [ 202.418274][ T9393] __x64_sys_exit+0x1f/0x20 [ 202.422781][ T9393] x64_sys_call+0x301d/0x3020 [ 202.427508][ T9393] do_syscall_64+0x12c/0x3b0 [ 202.432241][ T9393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.438166][ T9393] RIP: 0033:0x7f14bcc8ce59 [ 202.442597][ T9393] Code: Unable to access opcode bytes at 0x7f14bcc8ce2f. [ 202.449704][ T9393] RSP: 002b:00007f14bb6defd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 202.458135][ T9393] RAX: ffffffffffffffda RBX: 00007f14bcf05fa0 RCX: 00007f14bcc8ce59 [ 202.466203][ T9393] RDX: 00007f14bb6df9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.474231][ T9393] RBP: 00007f14bcd22d6f R08: 0000000000000000 R09: 0000000000000000 [ 202.482291][ T9393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.490462][ T9393] R13: 00007f14bcf06038 R14: 00007f14bcf05fa0 R15: 00007fff6718a1e8 [ 202.498439][ T9393] [ 202.501448][ T9393] ---[ end trace 0000000000000000 ]--- [ 202.678172][ T9399] loop3: detected capacity change from 0 to 512 [ 202.697324][ T9399] EXT4-fs: Ignoring removed nobh option [ 202.709678][ T9399] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 202.721386][ T9399] EXT4-fs (loop3): 1 truncate cleaned up [ 202.727471][ T9399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.739631][ T3559] Bluetooth: hci0: command 0x1003 tx timeout [ 202.745704][ T4054] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 203.192221][ T9410] loop0: detected capacity change from 0 to 2048 [ 203.221726][ T9410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.252584][ T28] kauditd_printk_skb: 295 callbacks suppressed [ 203.252598][ T28] audit: type=1400 audit(1779429045.176:2779): avc: denied { write } for pid=9409 comm="syz.0.1393" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.383273][ T9417] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1395'. [ 203.474499][ T9417] can0: slcan on ttyS3. [ 203.522543][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.539693][ T9417] can0 (unregistered): slcan off ttyS3. [ 203.601265][ T9422] loop3: detected capacity change from 0 to 512 [ 203.617709][ T9422] EXT4-fs (loop3): 1 truncate cleaned up [ 203.629882][ T9422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.645250][ T9422] EXT4-fs warning (device loop3): ext4_group_extend:1885: will only finish group (8193 blocks, 7937 new) [ 203.657310][ T9422] EXT4-fs warning (device loop3): ext4_group_extend:1890: can't read last block, resize aborted [ 203.669425][ T9422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1396'. [ 203.707665][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.739501][ T28] audit: type=1400 audit(1779429045.656:2780): avc: denied { write } for pid=9423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.763834][ T3308] ================================================================== [ 203.771943][ T3308] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 203.779507][ T3308] [ 203.781822][ T3308] read-write to 0xffff888237d266e8 of 1 bytes by task 9423 on cpu 1: [ 203.789878][ T3308] folio_add_lru+0xaa/0x1f0 [ 203.794400][ T3308] folio_add_lru_vma+0x49/0x70 [ 203.799372][ T3308] do_wp_page+0x13b1/0x2040 [ 203.804238][ T3308] handle_mm_fault+0x8bb/0x2e70 [ 203.809903][ T3308] do_user_addr_fault+0x62f/0x1050 [ 203.815041][ T3308] exc_page_fault+0x62/0xa0 [ 203.819544][ T3308] asm_exc_page_fault+0x26/0x30 [ 203.824427][ T3308] [ 203.826740][ T3308] read to 0xffff888237d266e8 of 1 bytes by task 3308 on cpu 0: [ 203.834273][ T3308] __lru_add_drain_all+0x17e/0x450 [ 203.839591][ T3308] lru_add_drain_all+0x10/0x20 [ 203.844885][ T3308] invalidate_bdev+0x47/0x70 [ 203.849482][ T3308] ext4_put_super+0x610/0x7b0 [ 203.854150][ T3308] generic_shutdown_super+0xee/0x220 [ 203.859437][ T3308] kill_block_super+0x2a/0x70 [ 203.864133][ T3308] ext4_kill_sb+0x42/0x80 [ 203.868452][ T3308] deactivate_locked_super+0x75/0x1c0 [ 203.874347][ T3308] deactivate_super+0x97/0xa0 [ 203.879027][ T3308] cleanup_mnt+0x2bb/0x330 [ 203.883464][ T3308] __cleanup_mnt+0x19/0x20 [ 203.887872][ T3308] task_work_run+0x130/0x1a0 [ 203.892453][ T3308] exit_to_user_mode_loop+0x211/0x820 [ 203.897918][ T3308] do_syscall_64+0x232/0x3b0 [ 203.902547][ T3308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.908459][ T3308] [ 203.910773][ T3308] value changed: 0x06 -> 0x08 [ 203.915433][ T3308] [ 203.917745][ T3308] Reported by Kernel Concurrency Sanitizer on: [ 203.923881][ T3308] CPU: 0 UID: 0 PID: 3308 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 203.935068][ T3308] Tainted: [W]=WARN [ 203.938864][ T3308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.948940][ T3308] ================================================================== [ 203.957279][ T4054] Bluetooth: hci1: command 0x1003 tx timeout [ 203.988970][ T3531] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 203.994267][ T28] audit: type=1400 audit(1779429045.916:2781): avc: denied { write } for pid=9435 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.026156][ T9420] loop1: detected capacity change from 0 to 512 [ 204.126752][ T1837] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 204.186321][ T1837] EXT4-fs (loop0): Remounting filesystem read-only [ 204.240052][ T9420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.269002][ T28] audit: type=1400 audit(1779429046.186:2782): avc: denied { write } for pid=9440 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.275350][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.304371][ T9420] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.341832][ T28] audit: type=1400 audit(1779429046.266:2783): avc: denied { write } for pid=9451 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.407606][ T9417] xt_hashlimit: size too large, truncated to 1048576 [ 204.459144][ T9420] can0: slcan on ttyS3. [ 204.620264][ T9416] can0 (unregistered): slcan off ttyS3. [ 204.625945][ T28] audit: type=1400 audit(1779429046.546:2784): avc: denied { write } for pid=9454 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.686544][ T28] audit: type=1400 audit(1779429046.606:2785): avc: denied { write } for pid=9465 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.767914][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.847222][ T28] audit: type=1400 audit(1779429046.766:2786): avc: denied { write } for pid=9469 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.881619][ T28] audit: type=1400 audit(1779429046.786:2787): avc: denied { write } for pid=9480 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.448190][ T28] audit: type=1400 audit(1779429048.366:2788): avc: denied { write } for pid=9482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.226322][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 209.226336][ T28] audit: type=1400 audit(1779429051.146:2794): avc: denied { write } for pid=9524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.256436][ T28] audit: type=1400 audit(1779429051.166:2795): avc: denied { write } for pid=9535 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1