last executing test programs: 1m20.282609534s ago: executing program 1 (id=1306): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000800)="e3008067", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff}, 0x50) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x1010, r2, 0x6296000) mprotect(&(0x7f00001f9000/0x1000)=nil, 0x1000, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) r4 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$LOOP_CONFIGURE(r4, 0xc0c0128e, &(0x7f0000000140)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8]}}) 1m20.148776158s ago: executing program 1 (id=1308): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$sock(r1, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@timestamping={{0x14, 0x1, 0x25, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x30}, 0x8840) readv(r0, &(0x7f00000000c0), 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 1m20.014787152s ago: executing program 1 (id=1309): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x154) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x1c0, 0x0, 0xd0, 0x380, 0xd0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @remote}, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21, 0x0, 0x1}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0xff000000, 0xffffffff], 'ip6gre0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4, 'syz0\x00', {0x6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x1000000}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x37}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xff0000ff, 0xffffffff, 0xff], 'gretap0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x7, 0x6, 0x60}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000000100000040000000300000041010000", @ANYRES32, @ANYBLOB="00000200000000000008419a00"/23, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x10) sendmsg$inet6(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="0e7b6ef057976c7352fbceef5acb192dc50e", 0x12}, {&(0x7f0000001380)="eabc7858551175de00ac25b769e42eee2e7bcf80b925cf582b0dfbfb762998c04406d2ac6567b8d2434972484f18d341c0735430e4748d24ae439b1e5f03622bf457c44634683420869a6026b331b50e2fbff44ece33c7a50348fa68b36639f5c80626b220b706a2862bfb2d5e071afb421b98dd58d0f8317b37af9817d8f89235236e103093561d974647eb08b5f11502029337efa97cb333f43269adfc0f95c36ee52fd6db1d96342cd44276c8dc16dbec10c4c62b47b96a370fa3d1409a", 0xbf}, {&(0x7f0000001440)="203f178445023ec678162cc5697413ff2d509ee78792a7c995dce374c11a55c4960f312d2ca4ce283761684137e78dbd975e0f6b0c05cf11e7a474d9b91886a8c10a6534878a433707dd3ccd2d7f483e33b4736022d0b42da82db2ed6b4ebbe8f2b75f96f2e517ed496b8c8b656c6f70140876f0a00ae35130df895831efaa98d24a8467aad5125ce4af44f13dbda587cce478b8d20030b493363139f15c4abf951488b80bba3ca53eaa95132de0374a34eda9dfb63734745f95621546a8c99aa40f6869d4e188344e8ced0f298ca31ebc36ba9bbbdcd5c27835a966", 0xdc}], 0x4}, 0x4000800) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_config_ext, 0x4, 0x3, 0x3, 0x0, 0x2, 0x80000001, 0x6, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x1, 0x334, &(0x7f0000000880)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x42042, 0xdea1a290e97695ad) pwritev2(r3, &(0x7f0000000140)=[{&(0x7f0000000040)="ed20", 0x2}], 0x1, 0x7ff, 0x8, 0x5) r4 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r5, 0x0, r4, &(0x7f0000000140)=0x8008, 0x4, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000180)) 1m19.938923514s ago: executing program 1 (id=1311): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x4, 0xfffffff9, 0x1, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x7, 0x9, 0x2b}}) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @dev}, {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3, {[@exp_fastopen={0x1d, 0x4}, @md5sig={0x13, 0x12, "0cd80e00"}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@mpls_delroute={0x38, 0x19, 0x200, 0x70bd2b, 0x25dfdbfb, {0x1c, 0x10, 0x10, 0x1, 0xff, 0x1, 0x0, 0x0, 0x2100}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x2a, 0x0, r1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xc, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x9}, 0x420, 0xe52, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x810000, &(0x7f0000000280)={[{@showassoc}]}, 0x0, 0x567, &(0x7f0000000740)="$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") r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0x498144ee5762a049, 0x0, 0x0, 0x0, 0x0, 0x0) 1m19.423213578s ago: executing program 1 (id=1313): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000440)={r1, @in={{0x2, 0x4e21, @empty}}, 0xa3, 0x0, 0xd159, 0x8, 0x40, 0x7, 0x9}, 0x9c) 1m19.061244918s ago: executing program 1 (id=1314): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x18, 0x14, 0x503, 0x800000, 0x25dfdbfb, {0x2, 0x1f, 0x56, 0xff}}, 0x18}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb59171e3664ffcfc, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1802000087cd000000000000000000f0850000002200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000280)="e09f21b5b1547effffff00180f26", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) 1m18.968438281s ago: executing program 32 (id=1314): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x18, 0x14, 0x503, 0x800000, 0x25dfdbfb, {0x2, 0x1f, 0x56, 0xff}}, 0x18}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb59171e3664ffcfc, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1802000087cd000000000000000000f0850000002200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000280)="e09f21b5b1547effffff00180f26", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) 5.282489053s ago: executing program 5 (id=1836): socket(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x10, 0xffffffffffffffff, 'id0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x7ffffe2, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f0000001480)="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", 0x5ee}], 0x2}}], 0x1, 0x9200000000040000) bind$tipc(r3, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4201, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000180)) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xd8cf932b327f8a8b}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x170, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0xc}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x100}, @NL80211_ATTR_PEER_MEASUREMENTS={0x138, 0x111, 0x0, 0x1, {0x134, 0x5, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20d}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x217}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1eb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xb4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x119}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x3}]}, 0x170}}, 0x2000800) 4.984319482s ago: executing program 5 (id=1841): close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0), 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0xa, 0x6) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x25, 0x35b, &(0x7f0000000540)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21cd1e, &(0x7f0000000240)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid={'resgid', 0x3d, r3}}, {@norecovery}, {@abort}, {@auto_da_alloc}, {@debug}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x7, 0x83, 0x7fff0000}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x39000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x10001) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x8}}, {@init_itable}, {@block_validity}, {@debug}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x479, &(0x7f0000000dc0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x224061, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 4.201594233s ago: executing program 4 (id=1846): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="460a0000000000006311340000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000}, 0x0, 0x0, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="2d63707520cff4f40300167eeb70331599c5223e7529f8e0bae5a26ad430019480"], 0x5) r4 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000080), 0x9) 4.113825215s ago: executing program 4 (id=1847): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe79) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000180)={[{@nodioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@norecovery}, {@quota}, {@resuid}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x50c, &(0x7f00000008c0)="$eJzs3V9rHGsZAPBnNtk2bRKTg14cD5zjwR5JgnaTGE9P8OJ4BNGrA+rxvsZkE0I22ZBs2iZUTfEDCCJW8KpX3gh+AEH6EUQo6L2o+Adt9aKg7crM7qZpOmm2dDdbs78fTOadd2b2eZ8s++68M8NsAH3r7Yi4FBGP6/X6VESMNesLzSn2G1O63YP7NxfTKYl6/aN/JBFJoy7dbPLQaw43d0t982sR30mejbu9u7e2UKmUt5rL07X1zent3b3Lq+sLK+WV8sbc3OyV+ffm352f6UieIxHx/lf+/JMf/vyr7//6c9f/cPWvk99LmvURT/LotEbqxRg6VDcYEVvdCNYjg1mGAAD8P2gd5386IqZiLAayozkAAADgLKl/aST+m0TU2zLU3mYAAADAK6WQ3QObFErN+wBG4s3bpVLjHt5PxMVCpbpd++xydWdjqXGv7HgUC8urlfJM817h8Sgm6fJsVj5YjoiHh5fLcxHxWkT8eOxCtlxarFaWen3yAwAAAPrE8JHx/7/HCoV0/H/If3rWOAAAAKBzxnvdAAAAAKDrjP8BAADg7DP+BwAAgDPt6x9+mE711u9fL13b3VmrXru8VN5eK63vLJYWq1ubpZVqdSV7Zt/6Sa9XqVY3vxAbOzema+W/jTbqqjsbtaurT/0ENgAAAHCKXvvU3d8nEbH/xQvZlDrX60YBp2LwRTb+U/faAZy+gV43AOiZF/r+B86UYq8bAPRccsL6oTvfzV/xm260BgAA6IaJT+Zf/z9/4rmB/cIpNRHoEuf/oH+5/g/9y/V/6F/FGAgDeehvxz0CdLg5P/bhHW1f/6/XX7hRAABAR41kU1IoRWTnAUaiUCiVIkazMUExWV6tlGci4mMR8bux4vl0eTbbM4nkpJuGAQAAAAAAAAAAAAAAAAAAAAAAAIBMvZ5EHQAAADjTIgp/SbKn+UdMjL0zcvT8wLnk4Vg2j4jrP/vo9o2FWm1rNq3/50F97afN+s/34gwGAAAAcFRrnN4axwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAJz24f3OxNZ1m3L9/OSLG8+IPxlA2H4piRFz8VxKDh/ZLImKgA/H3b0XE63nxk7RZMd5sRV78Cz2OP9yB+NDP7qb9zwd5n79CvJ3N8z9/V7Ie6uUd3/8VDvq/gZz4ad3oQen53rj3y+lj49+KeGMwv/9pxU9i9On4+43+51KbOX77W3t7x62r34mYyP3+SQ62SUvTtfXN6e3dvcur6wsr5ZXyxtzc7JX59+bfnZ+ZXl6tlJt/c2P86M1fPX5e/hePiT9+kH9+//tOm/k/unfj/scbxeLB7smT+JOX8t//14+JX2i+659pltP1E63yfqN82Fu/+O1brfIHOfkvHc1/Ko68//n5T7aZ/9Q3fvDHNjcFAE7B9u7e2kKlUt7q68JL/TfSw6JXIouXKpzrVhbp//VVSDCv8P0uvHJ6ZN7rvNopDJ2wTcT5nvZMAABApz07BgYAAAAAAAAAAAAAAAAAAABOW5efNPYoLRSPxNzP/nbi6fkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3zvwAAAP//eDnQjA==") bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) 3.900276731s ago: executing program 4 (id=1849): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="3068855505836d7838ec34c51366193d4ee8ea08ef6f3d4052836f54b0da22facbdcd9efb4e37b6d3c72b495369d6d8c11ee2accb7b27fe947e3f1cd50c0c447e87ecaed0d4418f9684c", 0x4a}], 0x1, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}], 0xf0}, 0x20000000) ioctl$TUNSETNOCSUM(r2, 0x894c, 0x0) 3.831031283s ago: executing program 4 (id=1850): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8927, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r3 = dup(r2) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000140)={{0xe, 0x1}, {0x10, 0x9}, 0x6}) openat(0xffffffffffffffff, 0x0, 0x421647, 0x160) r4 = socket(0x2b, 0x80801, 0x1) listen(r4, 0x8) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x33) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x20000088) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf0500050012", 0x2d}], 0x1}, 0x40000) 3.57278511s ago: executing program 5 (id=1853): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0xa, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_GETX(r4, 0x4018920a, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r6, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x3, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@fadd={0x58, 0x114, 0x6, {{0x83, 0x9}, &(0x7f00000003c0)=0xa0000000000000, 0x0, 0x8, 0x8000000000000002, 0x3, 0x4843, 0x74bd180309d768c, 0x5051}}], 0x58}, 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000000040)='cgroup2\x00', 0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e04, 0x18c, @dev={0xfe, 0x80, '\x00', 0x20}, 0x7}, 0x1c) 3.386106655s ago: executing program 2 (id=1855): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2000000004b, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0x100b08, 0x6, 0x0, 0x9, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2000000004b, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0x100b08, 0x6, 0x0, 0x9, 0x8, 0x20001, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0xa, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noquota}, {@lazytime}, {@data_err_abort}, {@sb={'sb', 0x3d, 0x4960}}]}, 0x1, 0x5a3, &(0x7f0000000a80)="$eJzs3U9oHNUfAPDvzGab/snvlwoKKj0UFSqUbpL+0eqpvYqFQg+CFw3bbSjZZEs20SYETO9F7EFUeqk3PXhUPHgQLx69elE8C8UGhaaCrmx2Nk3TTZvEbBYznw9M9r2Z2fm+N7Pfl51hhg0gtw43/6QRz0TE+SRicNWyvsgWHm6tt7Q4X763OF9OotG48FsSSUTcXZwvt9dPstcDEbEQEU9HxHfFiKPpyib3tAv12bnx0Wq1MpXVh6YnrgzVZ+eOXZ4YHauMVSZPvPzKqdMnT40cH1nd3HuN1bXi5vp6/ecb71//4bVbNz7/4tBC+cPRJM7EQLZsdT+2U2ufFOPMmvknuxGsh5JeN4AtKWR53kylp2IwClnWd9JYPTj070jzgC5q9Ec0VqwqAjmQSHrIqfb3gOb5b3vaye8ft8+2TkCacZcW58vvRTt+X+vaROxdPjfZ/3vywJlJ83zz4E42lF1p4VpEDPf1Pfz5T7LP39YNb0cD6apvz7YO1MPHP10Zf6LD+DPQvnb6L7XHv6Vs/FvqEL+wzvh3foMx/nrzl0/WjX+tP57tGD9ZiZ90iJ9GxNsbjH/zja9Pr7es8WnEkegcvy159PXhoUuXq5Xh1t+OMb45cujV9fsfsX+d+K1rtnuXG7K6/3uyNqUb7P9X33/53MIj4r/4/KOPf6f9vy8iPthg/Cfufvb6estuX0vuNL8FbPb4J1GMW503+dBV+ZfOHP4pK7pqCAAAAAAAAAAA2yhdvpctSUsr5TQtlVrP8D4Z+9NqrT599FJtZvJi6563g1FM23daDbbqSbM+kt2P264fX1M/UcgCFvYt10vlWtJ6ShgAAAAAAAAAAAAAAAAAAAA4sOb5/z8Ky8//r/25amC3Wv8nv4HdTv5Dfj2Y/0nP2gHsPP//Ibca8h/yS/5Dfsl/yC/5D/kl/yG/NpH/hgrYZSQ1AAAAAAAAAAAAAAAAAAAAAAAAAAB0xflz55pT497ifLlZv9g3OzNee+fYxUp9vDQxUy6Va1NXSmO12li1UirXJh63vaRWuzIckzNXh6Yr9emh+uzcWxO1mcn2b4pWil3vEQAAAAAAAAAAAAAAAAAAAPz3DCxPSVqKKLbqaVoqRfwvIg4mkVy6XK0MR8T/I+LHQrG/WR/pdaMBAAAAAAAAAAAAAAAAAABgl6nPzo2PVquVqe4V+rJQW3r7n43HrZNsaoN9m1k5Iha2d280t7jpdxWzHdjdw5STQmFrn8P8FXo4KAEAAAAAAAAAAAAAAAAAQE7df+h3o+/4u7sNAgAAAAAAAAAAAAAAAAAAgFxKf00iojkdGXxhYO3SPclSYfk1It69eeGjq6PT01Mjzfl3VuZPf5zNP96L9gMb1c7TNCKaeQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcV5+dGx+tVitTWyz0b2CdXvcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYCv+CQAA//8ls87C") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip6_mr_vif\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x163041, 0x0) write$P9_ROPEN(r0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x9}, 0x1adb0, 0x1003, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, r1, 0xffffdfffffffffff, 0xffffffffffffffff, 0xa) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2717, 0x0, &(0x7f0000000280)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffffdfe, 0x7, 0x81, 0x8002, 0xb3, "20ab9800cea4a7a36c180000cde81e5d67a000", 0x5, 0x4}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) 2.954871397s ago: executing program 4 (id=1859): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x154) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x1c0, 0x0, 0xd0, 0x380, 0xd0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @remote}, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21, 0x0, 0x1}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0xff000000, 0xffffffff], 'ip6gre0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4, 'syz0\x00', {0x6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x1000000}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x37}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xff0000ff, 0xffffffff, 0xff], 'gretap0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x7, 0x6, 0x60}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000000100000040000000300000041010000", @ANYRES32, @ANYBLOB="00000200000000000008419a00"/23, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x10) sendmsg$inet6(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="0e7b6ef057976c7352fbceef5acb192dc50e", 0x12}, {&(0x7f0000001380)="eabc7858551175de00ac25b769e42eee2e7bcf80b925cf582b0dfbfb762998c04406d2ac6567b8d2434972484f18d341c0735430e4748d24ae439b1e5f03622bf457c44634683420869a6026b331b50e2fbff44ece33c7a50348fa68b36639f5c80626b220b706a2862bfb2d5e071afb421b98dd58d0f8317b37af9817d8f89235236e103093561d974647eb08b5f11502029337efa97cb333f43269adfc0f95c36ee52fd6db1d96342cd44276c8dc16dbec10c4c62b47b96a370fa3d1409a", 0xbf}, {&(0x7f0000001440)="203f178445023ec678162cc5697413ff2d509ee78792a7c995dce374c11a55c4960f312d2ca4ce283761684137e78dbd975e0f6b0c05cf11e7a474d9b91886a8c10a6534878a433707dd3ccd2d7f483e33b4736022d0b42da82db2ed6b4ebbe8f2b75f96f2e517ed496b8c8b656c6f70140876f0a00ae35130df895831efaa98d24a8467aad5125ce4af44f13dbda587cce478b8d20030b493363139f15c4abf951488b80bba3ca53eaa95132de0374a34eda9dfb63734745f95621546a8c99aa40f6869d4e188344e8ced0f298ca31ebc36ba9bbbdcd5c27835a966", 0xdc}], 0x4}, 0x4000800) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x1, 0x334, &(0x7f0000000880)="$eJzs3M9rI2UYwPEnP5uktMlBFAXpi170MrTRsxikBTFgaRuxFYRpO9GQMSmZUImIbU9exbsnwUPpsbeC+g/04k0vXvbWy8IetofdnWV+NckkadNsuum23w+UefO87zOZH2/KM0MmZ1/+8l21bGllvSnRlJKIiMi5SE6iEoj4y6jbTkqnfXl/+tG/b6+ub3xWKBYXV5RaKqx9kFdKzc79+f2PaX/YyZSc5r4+e5h/cPr66Ztnz9a+rViqYqlaval0tVn/v6lvmobarlhVTall09AtQ1VqltHw+utef9ms7+y0lF7bnsnsNAzLUnqtpapGSzXrqtloKf0bvVJTmqapmYzgKqXDlRW9MGLy1pg3BmMw1SfWaBT0mIike3pKhy9lowAAwK0Srv+jTkk/Uv0vs2797wxu1/9H7/zdnP7ieNav/0+S/er/D//z1tVV/6dEZJT6/ze5Rv3fWxHdLy9U/+N2mEv2hCJdr5z6P+N/fl0HXx3Nuw3qfwAAAAAAAAAAAAAAAAAAAAAAXgXntp21bTsbLIO/9iME/mvcSYPO/5SIpJyzb3P+77LV9Q1JuQ/uOefY/Hm3tFvylk7vU9sjhsxLVp648yGIiW0HTx4pR07+Mvf8/L3dUsztKZSlIqYYsiBZyYXzbXvp0+LigvL4+RePKWU68/OSldf65+e78/33T8p773bka5KVf7akLqZsu/O6nf/TglKffF4M5afdcQAAAAAA3AWautD3+l3TBvV7vzJSKLu3iQbcH/Cur+f7Xp/Hs2/FJ733AAAAAADcD1brh6pumkbjkkZarh4zeiM+3OBkKJK4bHCsYw+H3Z6keyNDZNCYWOiIJQas+fchj2pXI/giRVdXyg+OdniD/R/b+drvjERliKx4eOPnnIC65rsf+DtyEQluGyUHHGdZ7l1P9JKZkBjbfH7j1z8ej+8D8tFxMAOuHnzQERk0M/s2UuFZ5zYSN/k/BwAAAMBktIv+IPJxZ3dkIhsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA9cyM/6RdqTHofAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNvieQAAAP//lI75aw==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x42042, 0xdea1a290e97695ad) pwritev2(r2, &(0x7f0000000140)=[{&(0x7f0000000040)="ed20", 0x2}], 0x1, 0x7ff, 0x8, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r4, 0x0, r3, &(0x7f0000000140)=0x8008, 0x4, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000180)) 2.937747768s ago: executing program 0 (id=1860): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2}, 0x38) 2.893422979s ago: executing program 3 (id=1861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8, 0x6}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@afid={'afid', 0x3d, 0x44}}]}}) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000b000095bb4f522cab95edf1140c6598e7220696d3f057e2c8415eb3ebb12960f018a9f96cb6088985adf55e61e0ab2801b7d1dc2180f42d9b532c41a08feef9d1bfbffb0fcfe0b333bd094e49a57e6d437bb9b1db59fe03be0a2074fa003f226c38cf07ca17555480cfd3e0706194a5f00ed2ef0ae67416f5828cc78e39fae17e82106396c00f894231a93b17be3b57f96eeb3dec8e6420833647a149b80c"], 0xfe78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x4000) socket(0x10, 0x3, 0x0) r9 = openat$snapshot(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) write(r9, &(0x7f0000000180)="f5", 0x1) 2.729271064s ago: executing program 0 (id=1862): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) munmap(&(0x7f000049b000/0x400000)=nil, 0x400000) syz_clone(0x20822180, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x10, 0xffffffffffffffff, 0xb694a000) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xb6ac, @local, 0x10}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xe, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @alu={0x4, 0x0, 0x1, 0x6, 0x5, 0x10, 0x8}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001b00)=@generic={&(0x7f0000000540)='./file0\x00', r0}, 0x18) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000020090103000000000000000002000000000000081f0000000500160011000000"], 0x24}}, 0x44004) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r3 = socket(0x2, 0x3, 0xff) bind$inet(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$rds(r3, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/23, 0x17}], 0x2, 0x0, 0x0, 0x4c880}, 0x8000) r5 = socket(0x1e, 0x805, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@getchain={0x24, 0x66, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x6, 0x9}, {0x6, 0x2}, {0x10, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40050) sendmmsg$inet6(r5, &(0x7f0000003c80)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x2, @remote, 0x5}, 0x1c, 0x0}}], 0x1, 0x1004) 2.698372745s ago: executing program 3 (id=1863): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe79) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000180)={[{@nodioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@norecovery}, {@quota}, {@resuid}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x50c, &(0x7f00000008c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) 2.422759312s ago: executing program 3 (id=1864): socket(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x10, 0xffffffffffffffff, 'id0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x7ffffe2, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f0000001480)="b652db63d0d18d54bd3295484e075beccc75394c992af5136203e0d1ab7d82e857b1fc29f4f6b88192e111dd4b4ba0c9f3a8152dbebab4a06034edd33294123cdc8b78a9bdecc53fd22efb7a64afd8941bf4562eb70bf907982ff646cc70a15305ad5d6c9e2d9c3bc2077ce5f1c2229237930a2a4175bea551d9ab203a98f6c518c3b376162aa0d9b1318d1a0c849ef00a296c870386c0e92de2a9df1f9190bfc283286373059abcf548a9f73e5479bfdc78240cee916b0d18ff5e0e117c3d701b155ca9c2b174d3da47ecfc94f89938b355c979eb63556fb722d7a962a145bcaf2e3d5e18cde91f716be6c4bb239478584adef3c8e63c7bc363b314b803f99a00916f4af413c1e72fc4d222f13a4a59e307aa16fb18be198bfca02a2300cef90c307e45781d368dab266345624f6359779e31e2652b7f65b11549ea3fc4bcb70fd8ca1fb6645d5d9c962b664228a349787361e82148fa10e7066fa9deea51d90cfa5628591d3d0b94f4bcee54897ba32f1e05c06d9a0acf39772c910453437847fc841e84db77579d38b031a41fe990fd2dca040ba36c73e7b20f011aa418206648504ec626493dc31610e8050738f18f2e36d7b6b1658990c60816d36074727ed49331b7dcbc8a19ade9f822a935a9e276d520894b03f6f064c92f9741bf2329205433ad29414ce5f01b621c2c67452282b994605d4158777da1cdd5e0d8bcffe59d2f2a33d645cb342dec3ea6b153f55340f3d70cfe357a8ca74b238b250f690752c2ef9b14aa10aa677f1c2e59832f11ff4e4c57688bf32f6ad940bcc0b85ad1ed6e625049877da66e2dfbe48533dc8f24bfbcb1a65c750e526580edcd5a9b53d631baae9cb7437c4ebdb03ad71d4f4547f0534f30a00f74c5676bd671d2542c47fab7261b9cb04b5577dca41c36215d2942d9397bd78c8b0be3c6b75cc51b76d687f0d1e23fa1e32c73b1f2383314bd77085ac02de26dba5ddc59a65b3d9eed9bd40552ec27900cacfad9f5f3ac0588fed5a776810e63c5ce2390196f4e6d95edec4b2a24b5287e7ed5b33631c94c96a757b96e136e2e8ed03af4aceb2ac94ae52c99fa1937a12175df224e9fb53524f18bc19641ee442a423e697b16cc6952fc02a54bdfd87c67883c43bcc3d96433803d26450acbcde753ca2161ea09b26c6f171b3676d9f7daf326fcd534180239c5b5549ecb0ceb30bb2731f47f85c54cd919d37e99d5204730449fcb47b161456ad14978c827b4e3a772be7e33e34ece8abf0d8adcdbc772b928b7cf2fe971850ead26378bccb1fa36943b985c2c0feb7cdfa73696186eb8f14d0b6900d4387c5ef8d0eae1c945118c0b5e02cc452e6be6d12598cbc2d629a8b165d44a8a5ba4ae086f1021269fbd9db14d1c6e3aa889a782b01ece1f4614f673437aa96d7b3799f98fb79d0c683880997acb5697129de56e7e03abd6853f77d5422c9e7b59ff229cddff83a9feaa37484097c11d89c856a9677d215b9c2e2264e89e24f9433e73854ea842d03d4696207d02e0ecfab9672e676791efbce94a70f689a70d8b6b01cf755d8fee5798a7c806d59134fda068efe92be39640181df9cde24875d8063fb025d1b31362c89354cfc5dbb1b8b407596d5e23d8d21b63c4a0170263f54d1cd7177515d00a314cfae4778789ba5ef470fd6fbe097320283179c1cc38bb34ab39914d930c26c01d723bd8c49c280fae18a66ca1244694ce3c45361f1b8a765b39205639da379c911487d7a79eb7a39e652e8bacd271f4347a556a538f98d1cc80bc2cf65aaa51f7bc2a9f3fc5e352bf89ca72f63fef95ac318cb3ff6b558aa53f2eace51890e21bd07c9d6a3c68f4d428eeca2714b5aaa4103d3343c6a6879dfd1fe98c84206b51b37d57ed928e312bbeb0735e6b4fbc1c4a56afcc2c83a211219c7ad6c07e8c233f1ce2b3715871989bca8f95300fcc77c917a58ac658ef2c2a862a1a28c182578774e4aeb1c7d509e5fc05aa2f7aea05d611929e40e439f12e9f772af0c026e684258b20b4cf6565380d8e4f0daafe5849d019908ac27f14490fc87baa392e475926f9479285944d7eb72a23b4545705bc3d838926e193e1f8916e945507ee068dbb78196dea153569c4fd32004df1c448e3b7", 0x5ee}], 0x2}}], 0x1, 0x9200000000040000) bind$tipc(r3, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4201, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000180)) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xd8cf932b327f8a8b}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x170, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0xc}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x100}, @NL80211_ATTR_PEER_MEASUREMENTS={0x138, 0x111, 0x0, 0x1, {0x134, 0x5, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20d}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x217}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1eb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xb4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x119}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x3}]}, 0x170}}, 0x2000800) 2.15286522s ago: executing program 2 (id=1865): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc5, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000200)={[{@inlinecrypt}, {@abort}, {}]}, 0xff, 0x54a, &(0x7f0000000340)="$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") symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.14234806s ago: executing program 0 (id=1866): write$selinux_validatetrans(0xffffffffffffffff, 0x0, 0xff0f) 2.12846355s ago: executing program 3 (id=1867): syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x0, 0x8}]}}}}}}}}, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000a00)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4e23, 0x17c1, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "eeaf94564bb2497bdafc728d1327f450b18434db9b002300", "576bcd90e2854bd01d2391929d6f9339", {"495673b31957ba61cc787babf2d32fd6", "349001c1e2f302d34087a947eeef6833"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x2}, 0x1040, 0x80, 0x0, 0x6, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x40, &(0x7f00000025c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3fffffff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fb}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}]}, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000001}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) readlink(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x8a541) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x9873c93c0217f3b0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ppoll(&(0x7f0000001f00)=[{r4, 0x22c8}], 0x1, &(0x7f0000001f40)={0x77359400}, 0x0, 0x0) lseek(r0, 0x2, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xffffffff00000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) write$cgroup_devices(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) timer_gettime(0x0, &(0x7f0000000180)) io_setup(0x800, &(0x7f0000000440)) 1.974755005s ago: executing program 0 (id=1868): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[], 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x4, 0x8, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.875340608s ago: executing program 5 (id=1869): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f0000000140)='.\x00', 0x0, 0x112) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0xc, 0x5, 0x2, 0x9, 0x3, 0x3e, 0x7, 0x1d8, 0x40, 0xf9, 0x8d2f, 0x5, 0x38, 0x1, 0x78, 0x7, 0x4}, [{0x3, 0x7fffffff, 0x6, 0x7ff, 0x1, 0x0, 0x4, 0x6}]}, 0x78) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000004c0)={{0x3, 0xfff}, 0x100, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701000006feffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) close(r2) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x4, 0x2}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000f80), 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x6, 0x610, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x4}, 0x11feb0, 0x8, 0x20da, 0x7, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x18, 0x27, 0x107, 0x1, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x74}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 1.862972618s ago: executing program 4 (id=1870): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x92c9, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3010008, &(0x7f00000001c0), 0xff, 0x547, &(0x7f0000000b80)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb04143c, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0xfe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004800c000880"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) recvmsg$inet_nvme(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/192, 0xc0}, {&(0x7f0000000540)=""/180, 0xb4}], 0x2, &(0x7f0000000640)=""/186, 0xba}, 0x40002002) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") getsockname(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000200)=0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe57}], 0x1, 0x5405, 0x0, 0x0) 1.746648661s ago: executing program 0 (id=1871): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x10001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r6) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_dev$usbfs(0x0, 0xb, 0x103381) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x10009}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'hsr0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000100)={0x1, 0x0, 0x9, 0x10000000000000}) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f00000017c0)=@urb_type_control={0x2, {}, 0x2000006, 0xc1, &(0x7f00000002c0)={0x9a, 0x8, 0x9, 0x7}, 0x8, 0x1ec, 0xa, 0x0, 0x313, 0x3, 0x0}) 1.670054113s ago: executing program 5 (id=1872): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x4, 0x12ac, &(0x7f0000002000)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) time(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfd6d, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local, 'batadv0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x4, 0x0, 0x9, 0x12040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x401, 0x40}, 0x0, 0x1224, 0x0, 0x4, 0x8, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mount(0x0, 0x0, 0x0, 0x1000, 0x0) epoll_create(0x200) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r5, @ANYBLOB="14be33185a527083859a9fe4bf2b7ffd4779b4869d98ac658d90c662124f6e8af45b2b9cb6aa04381298b2381709000000e9cbf7862ea7e36bd6c15ec1a04ad9f733a86c2a8da9"], 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x10}, @timestamp], 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x7ff}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000004a00010200000000000000000a000403"], 0x14}, 0x1, 0x0, 0x0, 0x4040804}, 0x4) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, 0x0, &(0x7f00000004c0)=r3}, 0x20) madvise(&(0x7f0000515000/0x3000)=nil, 0x3000, 0x18) 752.178359ms ago: executing program 2 (id=1873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffeffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x2841, 0x0) ioctl$RTC_PLL_SET(r2, 0x40207012, 0x0) 738.238389ms ago: executing program 5 (id=1874): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe79) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000180)={[{@nodioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@norecovery}, {@quota}, {@resuid}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x50c, &(0x7f00000008c0)="$eJzs3V9rHGsZAPBnNtk2bRKTg14cD5zjwR5JgnaTGE9P8OJ4BNGrA+rxvsZkE0I22ZBs2iZUTfEDCCJW8KpX3gh+AEH6EUQo6L2o+Adt9aKg7crM7qZpOmm2dDdbs78fTOadd2b2eZ8s++68M8NsAH3r7Yi4FBGP6/X6VESMNesLzSn2G1O63YP7NxfTKYl6/aN/JBFJoy7dbPLQaw43d0t982sR30mejbu9u7e2UKmUt5rL07X1zent3b3Lq+sLK+WV8sbc3OyV+ffm352f6UieIxHx/lf+/JMf/vyr7//6c9f/cPWvk99LmvURT/LotEbqxRg6VDcYEVvdCNYjg1mGAAD8P2gd5386IqZiLAayozkAAADgLKl/aST+m0TU2zLU3mYAAADAK6WQ3QObFErN+wBG4s3bpVLjHt5PxMVCpbpd++xydWdjqXGv7HgUC8urlfJM817h8Sgm6fJsVj5YjoiHh5fLcxHxWkT8eOxCtlxarFaWen3yAwAAAPrE8JHx/7/HCoV0/H/If3rWOAAAAKBzxnvdAAAAAKDrjP8BAADg7DP+BwAAgDPt6x9+mE711u9fL13b3VmrXru8VN5eK63vLJYWq1ubpZVqdSV7Zt/6Sa9XqVY3vxAbOzema+W/jTbqqjsbtaurT/0ENgAAAHCKXvvU3d8nEbH/xQvZlDrX60YBp2LwRTb+U/faAZy+gV43AOiZF/r+B86UYq8bAPRccsL6oTvfzV/xm260BgAA6IaJT+Zf/z9/4rmB/cIpNRHoEuf/oH+5/g/9y/V/6F/FGAgDeehvxz0CdLg5P/bhHW1f/6/XX7hRAABAR41kU1IoRWTnAUaiUCiVIkazMUExWV6tlGci4mMR8bux4vl0eTbbM4nkpJuGAQAAAAAAAAAAAAAAAAAAAAAAAIBMvZ5EHQAAADjTIgp/SbKn+UdMjL0zcvT8wLnk4Vg2j4jrP/vo9o2FWm1rNq3/50F97afN+s/34gwGAAAAcFRrnN4axwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAJz24f3OxNZ1m3L9/OSLG8+IPxlA2H4piRFz8VxKDh/ZLImKgA/H3b0XE63nxk7RZMd5sRV78Cz2OP9yB+NDP7qb9zwd5n79CvJ3N8z9/V7Ie6uUd3/8VDvq/gZz4ad3oQen53rj3y+lj49+KeGMwv/9pxU9i9On4+43+51KbOX77W3t7x62r34mYyP3+SQ62SUvTtfXN6e3dvcur6wsr5ZXyxtzc7JX59+bfnZ+ZXl6tlJt/c2P86M1fPX5e/hePiT9+kH9+//tOm/k/unfj/scbxeLB7smT+JOX8t//14+JX2i+659pltP1E63yfqN82Fu/+O1brfIHOfkvHc1/Ko68//n5T7aZ/9Q3fvDHNjcFAE7B9u7e2kKlUt7q68JL/TfSw6JXIouXKpzrVhbp//VVSDCv8P0uvHJ6ZN7rvNopDJ2wTcT5nvZMAABApz07BgYAAAAAAAAAAAAAAAAAAABOW5efNPYoLRSPxNzP/nbi6fkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3zvwAAAP//eDnQjA==") bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) 657.778251ms ago: executing program 3 (id=1875): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2}, 0x38) 394.622198ms ago: executing program 2 (id=1876): syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 5) 352.01363ms ago: executing program 3 (id=1877): socket(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x10, 0xffffffffffffffff, 'id0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x7ffffe2, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f0000001480)="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", 0x5f1}], 0x2}}], 0x1, 0x9200000000040000) bind$tipc(r3, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4201, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000180)) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xd8cf932b327f8a8b}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x170, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0xc}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x100}, @NL80211_ATTR_PEER_MEASUREMENTS={0x138, 0x111, 0x0, 0x1, {0x134, 0x5, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20d}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x217}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1eb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xb4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x119}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x3}]}, 0x170}}, 0x2000800) 90.998707ms ago: executing program 2 (id=1878): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000000063113400000000006037090003fe2c38"], &(0x7f00000003c0)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000}, 0x0, 0x0, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="2d63707520cff4f40300167eeb70331599c5223e7529f8e0bae5a26ad430019480"], 0x5) r4 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000080), 0x9) 24.829739ms ago: executing program 2 (id=1879): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0xa, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_GETX(r4, 0x4018920a, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r6, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x3, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@fadd={0x58, 0x114, 0x6, {{0x83, 0x9}, &(0x7f00000003c0)=0xa0000000000000, 0x0, 0x8, 0x8000000000000002, 0x3, 0x4843, 0x74bd180309d768c, 0x5051}}], 0x58}, 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000000040)='cgroup2\x00', 0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e04, 0x18c, @dev={0xfe, 0x80, '\x00', 0x20}, 0x7}, 0x1c) 0s ago: executing program 0 (id=1880): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000200)={[{@inlinecrypt}, {@abort}, {}]}, 0xff, 0x54a, &(0x7f0000000340)="$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") symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): ), stripe is disabled [ 294.032899][ T8847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.047394][ T8847] EXT4-fs (loop5): shut down requested (0) [ 294.056079][ T8847] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 294.065700][ T8847] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 294.106663][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1460'. [ 294.178987][ T8863] netlink: 'syz.4.1472': attribute type 23 has an invalid length. [ 294.187076][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1472'. [ 294.247434][ T8859] loop2: detected capacity change from 0 to 1024 [ 294.269325][ T8859] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 294.279074][ T8859] System zones: 0-1, 3-36 [ 294.288259][ T8859] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1461: bad orphan inode 134217728 [ 294.300075][ T8859] loop2: lost filesystem error report for type 5 error -117 [ 294.300370][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 294.314834][ C0] EXT4-fs (loop2): initial error at time 1777771352: ext4_orphan_get:1423 [ 294.324268][ C0] EXT4-fs (loop2): last error at time 1777771352: ext4_orphan_get:1423 [ 294.339677][ T8859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.372200][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.437645][ T8866] loop4: detected capacity change from 0 to 1024 [ 294.463790][ T8866] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 294.477351][ T8866] System zones: 0-1, 3-36 [ 294.489242][ T8866] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1463: bad orphan inode 134217728 [ 294.502368][ T8866] loop4: lost filesystem error report for type 5 error -117 [ 294.506037][ T8866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.763982][ T8256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.805649][ T8874] loop5: detected capacity change from 0 to 512 [ 294.823161][ T8874] EXT4-fs: inline encryption not supported [ 294.857518][ T8874] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 294.875622][ T8874] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 294.891787][ T8874] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1464: bg 0: block 248: padding at end of block bitmap is not set [ 294.906462][ T8874] loop5: lost filesystem error report for type 5 error -117 [ 294.907371][ T8874] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.1464: Failed to acquire dquot type 1 [ 294.914864][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 294.914907][ C0] EXT4-fs (loop5): last error at time 1777771352: ext4_validate_block_bitmap:441 [ 294.942653][ T8874] loop5: lost filesystem error report for type 5 error -28 [ 294.945549][ T8874] EXT4-fs (loop5): 1 truncate cleaned up [ 294.961061][ T8874] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 295.092687][ T8256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 295.113163][ T308] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1 [ 295.124999][ T308] loop5: lost filesystem error report for type 5 error -117 [ 295.262371][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.376880][ T8879] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1465'. [ 295.431369][ T3606] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 295.500077][ T3703] Bluetooth: hci1: command 0x1003 tx timeout [ 295.500293][ T5444] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 295.536559][ T8883] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.596967][ T8883] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.682754][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 295.682780][ T28] audit: type=1400 audit(1777771353.725:1499): avc: denied { append } for pid=8889 comm="syz.5.1469" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 295.732236][ T8883] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.840243][ T28] audit: type=1400 audit(1777771353.866:1500): avc: denied { create } for pid=8889 comm="syz.5.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 295.884619][ T8883] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.061646][ T308] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.076763][ T308] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.112041][ T308] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.154114][ T308] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.281385][ T28] audit: type=1400 audit(1777771354.326:1501): avc: denied { read } for pid=8904 comm="syz.3.1476" path="socket:[22637]" dev="sockfs" ino=22637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 296.327681][ T8903] loop0: detected capacity change from 0 to 1024 [ 296.372451][ T8909] netlink: 'syz.5.1477': attribute type 1 has an invalid length. [ 296.379963][ T8903] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 296.389132][ T8903] System zones: 0-1, 3-36 [ 296.418067][ T8903] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1475: bad orphan inode 134217728 [ 296.430712][ T8903] loop0: lost filesystem error report for type 5 error -117 [ 296.559336][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1479'. [ 296.593982][ T28] audit: type=1400 audit(1777771354.636:1502): avc: denied { getopt } for pid=8912 comm="syz.5.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 296.646810][ T8903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.829923][ T8919] random: crng reseeded on system resumption [ 296.905297][ T28] audit: type=1326 audit(1777771354.946:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.2.1480" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd35ecdd9 code=0x7ffc0000 [ 296.952368][ T28] audit: type=1326 audit(1777771354.946:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.2.1480" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd35ecdd9 code=0x7ffc0000 [ 296.998203][ T28] audit: type=1326 audit(1777771354.946:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.2.1480" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd35ecdd9 code=0x7ffc0000 [ 297.047209][ T28] audit: type=1326 audit(1777771354.946:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.2.1480" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9cd35ecdd9 code=0x7ffc0000 [ 297.092193][ T28] audit: type=1326 audit(1777771354.946:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.2.1480" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd35ecdd9 code=0x7ffc0000 [ 297.137129][ T28] audit: type=1326 audit(1777771354.946:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.2.1480" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd35ecdd9 code=0x7ffc0000 [ 297.230820][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.461063][ T8948] netlink: 'syz.0.1488': attribute type 1 has an invalid length. [ 297.463886][ T8945] random: crng reseeded on system resumption [ 297.603126][ T8957] program syz.0.1496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.634411][ T8959] loop5: detected capacity change from 0 to 128 [ 297.679104][ T8961] program syz.2.1499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.000595][ T8972] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1504'. [ 298.037284][ T8972] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1504'. [ 298.098431][ T8977] loop3: detected capacity change from 0 to 512 [ 298.141262][ T8977] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 298.151968][ T8981] netlink: 'syz.2.1505': attribute type 1 has an invalid length. [ 298.202364][ T8979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1505'. [ 298.241370][ T8977] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 298.267755][ T8977] EXT4-fs (loop3): mount failed [ 298.419523][ T8986] netlink: 'syz.0.1506': attribute type 1 has an invalid length. [ 298.608773][ T8999] FAULT_INJECTION: forcing a failure. [ 298.608773][ T8999] name failslab, interval 1, probability 0, space 0, times 0 [ 298.632230][ T8999] CPU: 0 UID: 0 PID: 8999 Comm: syz.2.1512 Tainted: G W syzkaller #0 PREEMPT(full) [ 298.632299][ T8999] Tainted: [W]=WARN [ 298.632307][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 298.632326][ T8999] Call Trace: [ 298.632371][ T8999] [ 298.632382][ T8999] __dump_stack+0x1d/0x30 [ 298.632412][ T8999] dump_stack_lvl+0x95/0xd0 [ 298.632438][ T8999] dump_stack+0x15/0x1b [ 298.632468][ T8999] should_fail_ex+0x263/0x280 [ 298.632541][ T8999] should_failslab+0x8c/0xb0 [ 298.632583][ T8999] kmem_cache_alloc_noprof+0x66/0x3f0 [ 298.632626][ T8999] ? security_inode_alloc+0x37/0x100 [ 298.632725][ T8999] security_inode_alloc+0x37/0x100 [ 298.632772][ T8999] inode_init_always_gfp+0x4a0/0x4e0 [ 298.632825][ T8999] ? __pfx_proc_alloc_inode+0x10/0x10 [ 298.632947][ T8999] alloc_inode+0x58/0x170 [ 298.633068][ T8999] new_inode+0x1d/0xe0 [ 298.633312][ T8999] proc_pid_make_inode+0x1f/0xd0 [ 298.633341][ T8999] proc_map_files_instantiate+0x81/0x120 [ 298.633383][ T8999] proc_fill_cache+0x1e0/0x260 [ 298.633450][ T8999] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 298.633496][ T8999] proc_map_files_readdir+0x521/0x6a0 [ 298.633554][ T8999] iterate_dir+0x114/0x330 [ 298.633689][ T8999] __se_sys_getdents64+0xd2/0x230 [ 298.633726][ T8999] ? __pfx_filldir64+0x10/0x10 [ 298.633775][ T8999] __x64_sys_getdents64+0x43/0x50 [ 298.633807][ T8999] x64_sys_call+0x2408/0x3020 [ 298.633835][ T8999] do_syscall_64+0x12c/0x3b0 [ 298.633934][ T8999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.633964][ T8999] RIP: 0033:0x7f9cd35ecdd9 [ 298.634075][ T8999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.634095][ T8999] RSP: 002b:00007f9cd203f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 298.634118][ T8999] RAX: ffffffffffffffda RBX: 00007f9cd3865fa0 RCX: 00007f9cd35ecdd9 [ 298.634138][ T8999] RDX: 0000000000000fff RSI: 0000200000001900 RDI: 0000000000000005 [ 298.634180][ T8999] RBP: 00007f9cd203f090 R08: 0000000000000000 R09: 0000000000000000 [ 298.634194][ T8999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.634211][ T8999] R13: 00007f9cd3866038 R14: 00007f9cd3865fa0 R15: 00007ffedfb4fa08 [ 298.634238][ T8999] [ 298.635775][ T9001] program syz.3.1513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.680548][ T8997] random: crng reseeded on system resumption [ 299.056356][ T9016] loop5: detected capacity change from 0 to 512 [ 299.071431][ T9016] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 299.073269][ T9014] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1515'. [ 299.085555][ T9016] System zones: [ 299.093735][ T9014] netlink: zone id is out of range [ 299.098958][ T9016] 0-2 [ 299.105030][ T9014] netlink: zone id is out of range [ 299.108702][ T9016] , 18-18, 34-35 [ 299.114658][ T9016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.114852][ T9016] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 299.147902][ T9020] loop2: detected capacity change from 0 to 512 [ 299.149176][ T9014] FAULT_INJECTION: forcing a failure. [ 299.149176][ T9014] name failslab, interval 1, probability 0, space 0, times 0 [ 299.160389][ T9020] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 299.167932][ T9014] CPU: 0 UID: 0 PID: 9014 Comm: syz.2.1515 Tainted: G W syzkaller #0 PREEMPT(full) [ 299.168041][ T9014] Tainted: [W]=WARN [ 299.168072][ T9014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 299.168145][ T9014] Call Trace: [ 299.168169][ T9014] [ 299.168193][ T9014] __dump_stack+0x1d/0x30 [ 299.168277][ T9014] dump_stack_lvl+0x95/0xd0 [ 299.168402][ T9014] dump_stack+0x15/0x1b [ 299.168464][ T9014] should_fail_ex+0x263/0x280 [ 299.168566][ T9014] ? ovs_ct_limit_cmd_set+0x23c/0x5d0 [ 299.168663][ T9014] should_failslab+0x8c/0xb0 [ 299.168778][ T9014] __kmalloc_cache_noprof+0x5f/0x400 [ 299.168939][ T9014] ovs_ct_limit_cmd_set+0x23c/0x5d0 [ 299.169025][ T9014] genl_family_rcv_msg_doit+0x187/0x1f0 [ 299.169180][ T9014] genl_rcv_msg+0x432/0x470 [ 299.169279][ T9014] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 299.169369][ T9014] netlink_rcv_skb+0x123/0x220 [ 299.169536][ T9014] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.169626][ T9014] genl_rcv+0x28/0x40 [ 299.169755][ T9014] netlink_unicast+0x5a8/0x680 [ 299.169858][ T9014] netlink_sendmsg+0x5c8/0x6f0 [ 299.170046][ T9014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.170224][ T9014] ____sys_sendmsg+0x563/0x5b0 [ 299.170374][ T9014] ___sys_sendmsg+0x195/0x1e0 [ 299.170498][ T9014] __x64_sys_sendmsg+0xd4/0x160 [ 299.170625][ T9014] x64_sys_call+0x194c/0x3020 [ 299.170759][ T9014] do_syscall_64+0x12c/0x3b0 [ 299.170863][ T9014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.171014][ T9014] RIP: 0033:0x7f9cd35ecdd9 [ 299.171082][ T9014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.171154][ T9014] RSP: 002b:00007f9cd203f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.171225][ T9014] RAX: ffffffffffffffda RBX: 00007f9cd3865fa0 RCX: 00007f9cd35ecdd9 [ 299.171275][ T9014] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 299.171357][ T9014] RBP: 00007f9cd203f090 R08: 0000000000000000 R09: 0000000000000000 [ 299.171433][ T9014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 299.171489][ T9014] R13: 00007f9cd3866038 R14: 00007f9cd3865fa0 R15: 00007ffedfb4fa08 [ 299.171553][ T9014] [ 299.400190][ T9020] EXT4-fs (loop2): orphan cleanup on readonly fs [ 299.406777][ T9020] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.1515: Block bitmap for bg 0 marked uninitialized [ 299.420087][ T9020] loop2: lost filesystem error report for type 5 error -117 [ 299.420550][ T9020] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 299.436589][ T9023] ipvlan2: entered promiscuous mode [ 299.436670][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 299.436711][ C0] EXT4-fs (loop2): initial error at time 1777771357: ext4_read_block_bitmap_nowait:517 [ 299.436742][ C0] EXT4-fs (loop2): last error at time 1777771357: ext4_read_block_bitmap_nowait:517 [ 299.436746][ T9023] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 299.436767][ C0] [ 299.436775][ T9023] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 299.438681][ T9023] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 299.442202][ T9020] loop2: lost filesystem error report for type 5 error -117 [ 299.443107][ T9020] EXT4-fs (loop2): 1 orphan inode deleted [ 299.443707][ T9020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 299.457395][ T9016] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #18: comm syz.5.1517: corrupted inode contents [ 299.457450][ T9016] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 299.457608][ T9016] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #18: comm syz.5.1517: mark_inode_dirty error [ 299.457641][ T9016] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 299.457852][ T9016] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #18: comm syz.5.1517: corrupted inode contents [ 299.457883][ T9016] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 299.458060][ T9016] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #18: comm syz.5.1517: mark_inode_dirty error [ 299.458093][ T9016] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 299.458329][ T9016] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #18: comm syz.5.1517: mark inode dirty (error -117) [ 299.458363][ T9016] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 299.458543][ T9016] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 299.475348][ T9016] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1517'. [ 299.728729][ T9014] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 299.765146][ T9014] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 299.812873][ T8256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.950455][ T9030] netlink: 'syz.3.1521': attribute type 1 has an invalid length. [ 300.068885][ T405] Bluetooth: hci0: Frame reassembly failed (-84) [ 300.147001][ T9041] FAULT_INJECTION: forcing a failure. [ 300.147001][ T9041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.155659][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.169442][ T9041] CPU: 1 UID: 0 PID: 9041 Comm: syz.0.1525 Tainted: G W syzkaller #0 PREEMPT(full) [ 300.169486][ T9041] Tainted: [W]=WARN [ 300.169527][ T9041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 300.169544][ T9041] Call Trace: [ 300.169552][ T9041] [ 300.169559][ T9041] __dump_stack+0x1d/0x30 [ 300.169659][ T9041] dump_stack_lvl+0x95/0xd0 [ 300.169686][ T9041] dump_stack+0x15/0x1b [ 300.169787][ T9041] should_fail_ex+0x263/0x280 [ 300.169829][ T9041] should_fail+0xb/0x20 [ 300.169859][ T9041] should_fail_usercopy+0x1a/0x20 [ 300.169935][ T9041] _copy_from_user+0x1c/0xb0 [ 300.170046][ T9041] ___sys_sendmsg+0xc1/0x1e0 [ 300.170090][ T9041] __x64_sys_sendmsg+0xd4/0x160 [ 300.170124][ T9041] x64_sys_call+0x194c/0x3020 [ 300.170186][ T9041] do_syscall_64+0x12c/0x3b0 [ 300.170220][ T9041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.170246][ T9041] RIP: 0033:0x7fc99a21cdd9 [ 300.170269][ T9041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.170295][ T9041] RSP: 002b:00007fc998c77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.170374][ T9041] RAX: ffffffffffffffda RBX: 00007fc99a495fa0 RCX: 00007fc99a21cdd9 [ 300.170402][ T9041] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 300.170448][ T9041] RBP: 00007fc998c77090 R08: 0000000000000000 R09: 0000000000000000 [ 300.170463][ T9041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.170480][ T9041] R13: 00007fc99a496038 R14: 00007fc99a495fa0 R15: 00007ffee79fa4e8 [ 300.170507][ T9041] [ 300.172676][ T9039] loop5: detected capacity change from 0 to 128 [ 300.426290][ T9050] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1529'. [ 300.431565][ T9048] random: crng reseeded on system resumption [ 300.863058][ T9065] random: crng reseeded on system resumption [ 301.846523][ T9087] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1541'. [ 301.862586][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 301.862611][ T28] audit: type=1400 audit(1777771359.907:1535): avc: denied { ioctl } for pid=9086 comm="syz.2.1541" path="socket:[23635]" dev="sockfs" ino=23635 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 301.980097][ T9089] Restarting kernel threads ... [ 301.980143][ T28] audit: type=1400 audit(1777771360.027:1536): avc: denied { ioctl } for pid=9088 comm="syz.4.1542" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 301.986127][ T9089] Done restarting kernel threads. [ 302.130797][ T9094] loop2: detected capacity change from 0 to 512 [ 302.141147][ T5444] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 302.143138][ T3703] Bluetooth: hci0: command 0x1003 tx timeout [ 302.191370][ T9094] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 302.199829][ T9094] System zones: 0-2, 18-18, 34-35 [ 302.206928][ T9094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.234302][ T9094] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.265055][ T9092] loop4: detected capacity change from 0 to 1024 [ 302.293919][ T28] audit: type=1400 audit(1777771360.337:1537): avc: denied { write } for pid=9093 comm="syz.2.1545" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 302.340334][ T9094] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #18: comm syz.2.1545: corrupted inode contents [ 302.346118][ T9092] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 302.367171][ T9094] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 302.369857][ T9092] System zones: [ 302.383724][ T9094] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #18: comm syz.2.1545: mark_inode_dirty error [ 302.399208][ T9094] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 302.400532][ T9092] 0-1 [ 302.404334][ T9094] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #18: comm syz.2.1545: corrupted inode contents [ 302.428241][ T9094] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 302.429462][ T9094] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #18: comm syz.2.1545: mark_inode_dirty error [ 302.453577][ T9092] , 3-36 [ 302.557229][ T9092] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1543: bad orphan inode 134217728 [ 302.576622][ T9094] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 302.578752][ T9094] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #18: comm syz.2.1545: mark inode dirty (error -117) [ 302.601247][ T9092] loop4: lost filesystem error report for type 5 error -117 [ 302.656413][ T28] audit: type=1400 audit(1777771360.697:1538): avc: denied { mount } for pid=9101 comm="syz.5.1547" name="/" dev="hugetlbfs" ino=23003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 302.658806][ T9092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.678423][ T28] audit: type=1400 audit(1777771360.707:1539): avc: denied { setopt } for pid=9101 comm="syz.5.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 302.711933][ T9094] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 302.789088][ T9094] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 302.790341][ T28] audit: type=1400 audit(1777771360.777:1540): avc: denied { bind } for pid=9101 comm="syz.5.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 302.876329][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.984035][ T28] audit: type=1400 audit(1777771361.027:1541): avc: denied { append } for pid=9108 comm="syz.5.1552" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 303.010422][ T9116] program syz.5.1552 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.061042][ T9118] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9118 comm=syz.5.1552 [ 303.086671][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.152486][ T9122] loop4: detected capacity change from 0 to 512 [ 303.174461][ T9122] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002] [ 303.195406][ T9122] System zones: 1-12 [ 303.202892][ T9122] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.1554: missing EA_INODE flag [ 303.214906][ T9122] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1554: error while reading EA inode 12 err=-117 [ 303.227261][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 303.227291][ C0] EXT4-fs (loop4): initial error at time 1777771361: ext4_xattr_inode_iget:441: inode 12 [ 303.227320][ C0] EXT4-fs (loop4): last error at time 1777771361: ext4_xattr_inode_iget:441: inode 12 [ 303.253560][ T9122] loop4: lost filesystem error report for type 5 error -117 [ 303.253831][ T9122] EXT4-fs (loop4): 1 orphan inode deleted [ 303.267758][ T9122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.318250][ T9117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.379045][ T9117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.785823][ T9134] loop2: detected capacity change from 0 to 512 [ 303.795521][ T28] audit: type=1400 audit(1777771361.838:1542): avc: denied { unlink } for pid=8256 comm="syz-executor" name="file0" dev="tmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 303.830399][ T9138] loop0: detected capacity change from 0 to 256 [ 303.849380][ T9140] loop5: detected capacity change from 0 to 512 [ 303.885567][ T9140] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 303.908914][ T9134] EXT4-fs warning (device loop2): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 303.920918][ T9140] System zones: 0-2, 18-18, 34-35 [ 303.926977][ T9140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.939851][ T9140] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 303.951898][ T28] audit: type=1400 audit(1777771361.998:1543): avc: denied { write } for pid=9139 comm="syz.5.1560" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.995297][ T9140] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #18: comm syz.5.1560: corrupted inode contents [ 304.043995][ T9140] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #18: comm syz.5.1560: mark_inode_dirty error [ 304.070920][ T61] Bluetooth: hci0: Frame reassembly failed (-84) [ 304.090882][ T9140] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #18: comm syz.5.1560: corrupted inode contents [ 304.139758][ T9140] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #18: comm syz.5.1560: mark_inode_dirty error [ 304.165046][ T9134] loop2: detected capacity change from 0 to 512 [ 304.172183][ T9140] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #18: comm syz.5.1560: mark inode dirty (error -117) [ 304.191108][ T9140] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 304.235053][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.268083][ T9134] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1558: inode has both inline data and extents flags [ 304.286897][ T8256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.421446][ T9134] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1558: couldn't read orphan inode 15 (err -117) [ 304.433721][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 304.433800][ C1] EXT4-fs (loop2): initial error at time 1777771362: ext4_orphan_get:1397: inode 15 [ 304.433902][ C1] EXT4-fs (loop2): last error at time 1777771362: ext4_orphan_get:1397: inode 15 [ 304.493686][ T9134] loop2: lost filesystem error report for type 5 error -117 [ 304.498797][ T9134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.577833][ T28] audit: type=1400 audit(1777771362.618:1544): avc: denied { write } for pid=9133 comm="syz.2.1558" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 305.112398][ T9153] loop0: detected capacity change from 0 to 1024 [ 305.252378][ T9153] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 305.312353][ T9153] System zones: 0-1, 3-36 [ 305.393145][ T9153] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1564: bad orphan inode 134217728 [ 305.456479][ T9153] loop0: lost filesystem error report for type 5 error -117 [ 305.467781][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 305.484108][ C1] EXT4-fs (loop0): initial error at time 1777771363: ext4_orphan_get:1423 [ 305.494846][ C1] EXT4-fs (loop0): last error at time 1777771363: ext4_orphan_get:1423 [ 305.734946][ T9153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.150767][ T5444] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 306.189126][ T9162] loop4: detected capacity change from 0 to 256 [ 306.236366][ T9158] loop5: detected capacity change from 0 to 1024 [ 306.458810][ T9158] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 306.473906][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.496117][ T9158] System zones: 0-1, 3-36 [ 306.548574][ T9162] FAT-fs (loop4): Directory bread(block 64) failed [ 306.550517][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.568636][ T9162] FAT-fs (loop4): Directory bread(block 65) failed [ 306.586149][ T9158] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.1566: bad orphan inode 134217728 [ 306.609186][ T9162] FAT-fs (loop4): Directory bread(block 66) failed [ 306.646308][ T9162] FAT-fs (loop4): Directory bread(block 67) failed [ 306.665962][ T9158] loop5: lost filesystem error report for type 5 error -117 [ 306.667119][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 306.681048][ C0] EXT4-fs (loop5): initial error at time 1777771364: ext4_orphan_get:1423 [ 306.689619][ C0] EXT4-fs (loop5): last error at time 1777771364: ext4_orphan_get:1423 [ 306.704982][ T9158] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.728490][ T9162] FAT-fs (loop4): Directory bread(block 68) failed [ 306.750420][ T9162] FAT-fs (loop4): Directory bread(block 69) failed [ 306.767716][ T9162] FAT-fs (loop4): Directory bread(block 70) failed [ 306.788795][ T9162] FAT-fs (loop4): Directory bread(block 71) failed [ 306.801147][ T9166] netlink: 'syz.2.1568': attribute type 1 has an invalid length. [ 306.815162][ T9162] FAT-fs (loop4): Directory bread(block 72) failed [ 306.862474][ T9162] FAT-fs (loop4): Directory bread(block 73) failed [ 307.126904][ T9179] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 307.161947][ T9179] System zones: 0-2, 18-18, 34-35 [ 307.182596][ T9179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.218361][ T8256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.240388][ T9179] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 307.301460][ T28] audit: type=1400 audit(1777771365.348:1545): avc: denied { write } for pid=9178 comm="syz.0.1572" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 307.329089][ T9179] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #18: comm syz.0.1572: corrupted inode contents [ 307.346892][ T9183] program syz.5.1573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.378269][ T28] audit: type=1400 audit(1777771365.408:1546): avc: denied { validate_trans } for pid=9176 comm="syz.2.1571" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 307.380883][ T9179] fserror_report: 7 callbacks suppressed [ 307.380962][ T9179] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 307.410454][ T9179] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #18: comm syz.0.1572: mark_inode_dirty error [ 307.440872][ T9179] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 307.441180][ T9179] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #18: comm syz.0.1572: corrupted inode contents [ 307.463116][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'. [ 307.483303][ T28] audit: type=1400 audit(1777771365.519:1547): avc: denied { ioctl } for pid=9176 comm="syz.2.1571" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 307.515291][ T9179] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 307.518890][ T9179] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #18: comm syz.0.1572: mark_inode_dirty error [ 307.544155][ T9177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.549687][ T9179] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 307.553418][ T9177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.560879][ T9190] random: crng reseeded on system resumption [ 307.584049][ T9179] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #18: comm syz.0.1572: mark inode dirty (error -117) [ 307.597081][ T9179] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 307.855123][ T9179] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 308.535031][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.027599][ T9207] random: crng reseeded on system resumption [ 309.036988][ T28] audit: type=1400 audit(1777771367.089:1548): avc: denied { setopt } for pid=9197 comm="syz.0.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 309.194713][ T9205] set_capacity_and_notify: 2 callbacks suppressed [ 309.194737][ T9205] loop4: detected capacity change from 0 to 1024 [ 309.269839][ T9205] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 309.282636][ T9205] EXT4-fs (loop4): group descriptors corrupted! [ 309.908988][ T9209] netlink: 'syz.5.1581': attribute type 1 has an invalid length. [ 310.012743][ T28] audit: type=1400 audit(1777771367.919:1549): avc: denied { read } for pid=9197 comm="syz.0.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 310.041326][ T9216] random: crng reseeded on system resumption [ 310.133198][ T9214] loop3: detected capacity change from 0 to 4096 [ 310.141336][ T28] audit: type=1400 audit(1777771368.179:1550): avc: denied { create } for pid=9219 comm="syz.0.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 310.175761][ T9214] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 310.266643][ T28] audit: type=1400 audit(1777771368.308:1551): avc: denied { create } for pid=9212 comm="syz.3.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 310.342768][ T28] audit: type=1400 audit(1777771368.378:1552): avc: denied { create } for pid=9212 comm="syz.3.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 310.367096][ T9225] loop0: detected capacity change from 0 to 512 [ 310.407099][ T9225] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 310.425078][ T28] audit: type=1400 audit(1777771368.378:1553): avc: denied { lock } for pid=9212 comm="syz.3.1583" path="socket:[23193]" dev="sockfs" ino=23193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 310.509782][ T9225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.659753][ T9233] loop5: detected capacity change from 0 to 128 [ 310.672609][ T9225] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 310.723912][ T28] audit: type=1400 audit(1777771368.768:1554): avc: denied { read } for pid=9231 comm="syz.2.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 310.767725][ T9233] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 310.842916][ T9233] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.870662][ T9240] netlink: 'syz.2.1590': attribute type 1 has an invalid length. [ 310.898181][ T9240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 310.959376][ T9236] random: crng reseeded on system resumption [ 310.972663][ T9240] bond1: (slave veth3): Enslaving as an active interface with a down link [ 311.005703][ T9240] vlan2: entered allmulticast mode [ 311.014267][ T9240] veth0_to_bond: entered allmulticast mode [ 311.074861][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.088291][ T8256] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 311.147585][ T9252] netlink: 'syz.5.1594': attribute type 1 has an invalid length. [ 311.170112][ T9244] random: crng reseeded on system resumption [ 311.177987][ T9250] loop0: detected capacity change from 0 to 256 [ 311.225815][ T9246] random: crng reseeded on system resumption [ 311.227014][ T9255] bond0: entered promiscuous mode [ 311.247123][ T9255] bond_slave_0: entered promiscuous mode [ 311.269667][ T9255] bond_slave_1: entered promiscuous mode [ 311.283220][ T9255] batadv0: entered promiscuous mode [ 311.318466][ T9255] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 311.460568][ T9260] random: crng reseeded on system resumption [ 311.572993][ T3466] Bluetooth: hci0: Frame reassembly failed (-84) [ 311.589326][ T9250] FAT-fs (loop0): Directory bread(block 64) failed [ 311.597828][ T9250] FAT-fs (loop0): Directory bread(block 65) failed [ 311.610344][ T9250] FAT-fs (loop0): Directory bread(block 66) failed [ 311.627181][ T9250] FAT-fs (loop0): Directory bread(block 67) failed [ 311.645881][ T9278] loop4: detected capacity change from 0 to 128 [ 311.646524][ T9250] FAT-fs (loop0): Directory bread(block 68) failed [ 311.657474][ T9278] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 311.672564][ T9278] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.685720][ T9250] FAT-fs (loop0): Directory bread(block 69) failed [ 311.698828][ T9250] FAT-fs (loop0): Directory bread(block 70) failed [ 311.706632][ T9250] FAT-fs (loop0): Directory bread(block 71) failed [ 311.716871][ T9250] FAT-fs (loop0): Directory bread(block 72) failed [ 311.727183][ T9250] FAT-fs (loop0): Directory bread(block 73) failed [ 311.775443][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 311.862142][ T9286] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1606'. [ 311.873479][ T9286] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1606'. [ 311.909618][ T9286] loop4: detected capacity change from 0 to 512 [ 311.945370][ T9286] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 311.973142][ T9286] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 311.998119][ T9286] EXT4-fs (loop4): mount failed [ 312.051482][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1611'. [ 312.063279][ T9297] FAULT_INJECTION: forcing a failure. [ 312.063279][ T9297] name failslab, interval 1, probability 0, space 0, times 0 [ 312.078934][ T9297] CPU: 1 UID: 0 PID: 9297 Comm: syz.0.1611 Tainted: G W syzkaller #0 PREEMPT(full) [ 312.078967][ T9297] Tainted: [W]=WARN [ 312.079000][ T9297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 312.079017][ T9297] Call Trace: [ 312.079025][ T9297] [ 312.079034][ T9297] __dump_stack+0x1d/0x30 [ 312.079127][ T9297] dump_stack_lvl+0x95/0xd0 [ 312.079211][ T9297] dump_stack+0x15/0x1b [ 312.079233][ T9297] should_fail_ex+0x263/0x280 [ 312.079272][ T9297] should_failslab+0x8c/0xb0 [ 312.079343][ T9297] kmem_cache_alloc_noprof+0x66/0x3f0 [ 312.079414][ T9297] ? security_inode_alloc+0x37/0x100 [ 312.079455][ T9297] security_inode_alloc+0x37/0x100 [ 312.079533][ T9297] inode_init_always_gfp+0x4a0/0x4e0 [ 312.079573][ T9297] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 312.079605][ T9297] alloc_inode+0x58/0x170 [ 312.079736][ T9297] new_inode+0x1d/0xe0 [ 312.079762][ T9297] shmem_get_inode+0x25a/0x790 [ 312.079837][ T9297] __shmem_file_setup+0x14f/0x260 [ 312.079859][ T9297] shmem_file_setup+0x3b/0x50 [ 312.079880][ T9297] memfd_alloc_file+0x4e/0x300 [ 312.079943][ T9297] __se_sys_memfd_create+0x2e1/0x3b0 [ 312.079976][ T9297] __x64_sys_memfd_create+0x31/0x40 [ 312.080004][ T9297] x64_sys_call+0x1f22/0x3020 [ 312.080030][ T9297] do_syscall_64+0x12c/0x3b0 [ 312.080104][ T9297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.080134][ T9297] RIP: 0033:0x7fc99a21cdd9 [ 312.080152][ T9297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.080217][ T9297] RSP: 002b:00007fc998c76e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 312.080238][ T9297] RAX: ffffffffffffffda RBX: 000000000000046f RCX: 00007fc99a21cdd9 [ 312.080319][ T9297] RDX: 00007fc998c76ee0 RSI: 0000000000000000 RDI: 00007fc99a2b2f49 [ 312.080335][ T9297] RBP: 0000200000000bc0 R08: 00000000ffffffff R09: 0000000000000000 [ 312.080351][ T9297] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000001c0 [ 312.080370][ T9297] R13: 00007fc998c76ee0 R14: 00007fc998c76ea0 R15: 00002000000000c0 [ 312.080395][ T9297] [ 312.297807][ T9295] random: crng reseeded on system resumption [ 312.329700][ T9302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1613'. [ 312.333704][ T9300] bond0: entered promiscuous mode [ 312.351143][ T9300] bond_slave_0: entered promiscuous mode [ 312.363806][ T9300] bond_slave_1: entered promiscuous mode [ 312.380150][ T9300] batadv0: entered promiscuous mode [ 312.385905][ T9300] debugfs: 'hsr1' already exists in 'hsr' [ 312.392099][ T9300] Cannot create hsr debugfs directory [ 312.398111][ T9300] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 312.431872][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 312.431891][ T28] audit: type=1326 audit(1777771370.478:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9303 comm="syz.0.1614" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc99a21cdd9 code=0x0 [ 312.466664][ T9309] loop4: detected capacity change from 0 to 128 [ 312.475392][ T9306] random: crng reseeded on system resumption [ 312.488577][ T9309] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 312.501224][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1614'. [ 312.510719][ T9309] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.530003][ T28] audit: type=1400 audit(1777771370.578:1568): avc: denied { write } for pid=9308 comm="syz.4.1616" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 312.564955][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 312.601898][ T9314] loop4: detected capacity change from 0 to 256 [ 312.685781][ T9316] loop3: detected capacity change from 0 to 764 [ 312.686842][ T9314] FAT-fs (loop4): Directory bread(block 64) failed [ 312.693212][ T9316] iso9660: Unknown parameter 'fi2Â0x0000000000000000' [ 312.712937][ T9314] FAT-fs (loop4): Directory bread(block 65) failed [ 312.722911][ T9314] FAT-fs (loop4): Directory bread(block 66) failed [ 312.732643][ T9314] FAT-fs (loop4): Directory bread(block 67) failed [ 312.744847][ T9314] FAT-fs (loop4): Directory bread(block 68) failed [ 312.753646][ T9314] FAT-fs (loop4): Directory bread(block 69) failed [ 312.768496][ T9314] FAT-fs (loop4): Directory bread(block 70) failed [ 312.778126][ T9314] FAT-fs (loop4): Directory bread(block 71) failed [ 312.788458][ T9314] FAT-fs (loop4): Directory bread(block 72) failed [ 312.797744][ T9314] FAT-fs (loop4): Directory bread(block 73) failed [ 312.799692][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1619'. [ 312.912217][ T9321] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 312.931555][ T9321] System zones: 0-2, 18-18, 34-35 [ 312.938246][ T9321] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.952542][ T9321] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 312.984941][ T28] audit: type=1400 audit(1777771371.028:1569): avc: denied { write } for pid=9319 comm="syz.5.1621" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 313.058006][ T9326] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1622'. [ 313.068003][ T9326] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1622'. [ 313.090644][ T8256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.112361][ T9326] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 313.135401][ T9326] Quota error (device loop3): v2_read_file_info: Free block number 7 out of range (1, 6). [ 313.151690][ T9326] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 313.161623][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1626'. [ 313.176184][ T9332] random: crng reseeded on system resumption [ 313.183756][ T9326] EXT4-fs (loop3): mount failed [ 313.273198][ T9340] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1627'. [ 313.292370][ T9345] EXT4-fs: inline encryption not supported [ 313.321669][ T9345] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 313.353237][ T9345] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 313.357347][ T9342] random: crng reseeded on system resumption [ 313.381531][ T9345] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1630: bg 0: block 248: padding at end of block bitmap is not set [ 313.381577][ T9345] loop0: lost filesystem error report for type 5 error -117 [ 313.381990][ T9345] Quota error (device loop0): write_blk: dquota write failed [ 313.382035][ T9345] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 313.382065][ T9345] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.1630: Failed to acquire dquot type 1 [ 313.382097][ T9345] loop0: lost filesystem error report for type 5 error -28 [ 313.382659][ T9345] EXT4-fs (loop0): 1 truncate cleaned up [ 313.383309][ T9345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 313.498196][ T28] audit: type=1400 audit(1777771371.478:1570): avc: denied { write } for pid=9343 comm="syz.0.1630" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 313.498484][ T9346] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 313.535863][ T9346] System zones: 0-1, 3-36 [ 313.550198][ T9346] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1629: bad orphan inode 134217728 [ 313.562370][ T9346] loop4: lost filesystem error report for type 5 error -117 [ 313.563058][ T9346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.584455][ T5444] Bluetooth: hci0: command 0x1003 tx timeout [ 313.584529][ T3703] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 313.630940][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 313.640514][ T405] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 313.650089][ T405] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 313.662928][ T405] loop0: lost filesystem error report for type 5 error -117 [ 313.701625][ T9357] EXT4-fs: inline encryption not supported [ 313.720484][ T9357] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 313.752247][ T9357] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 313.767480][ T9357] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1631: bg 0: block 248: padding at end of block bitmap is not set [ 313.782632][ T9357] loop0: lost filesystem error report for type 5 error -117 [ 313.782877][ T9357] Quota error (device loop0): write_blk: dquota write failed [ 313.790309][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 313.790332][ C1] EXT4-fs (loop0): last error at time 1777771371: ext4_validate_block_bitmap:441 [ 313.821465][ T9357] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 313.831726][ T9357] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.1631: Failed to acquire dquot type 1 [ 313.843083][ T9357] loop0: lost filesystem error report for type 5 error -28 [ 313.843880][ T9357] EXT4-fs (loop0): 1 truncate cleaned up [ 313.861432][ T9357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 313.929873][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 313.939962][ T49] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 313.951728][ T49] loop0: lost filesystem error report for type 5 error -117 [ 314.024301][ T9366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2336 sclass=netlink_route_socket pid=9366 comm=syz.3.1635 [ 314.075880][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1637'. [ 314.153507][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.159708][ T9375] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1638'. [ 314.179201][ T9375] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1638'. [ 314.278380][ T9375] set_capacity_and_notify: 6 callbacks suppressed [ 314.278494][ T9375] loop3: detected capacity change from 0 to 512 [ 314.347385][ T9383] random: crng reseeded on system resumption [ 314.403073][ T9375] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 314.496886][ T9375] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 314.512947][ T9393] netlink: 'syz.4.1645': attribute type 1 has an invalid length. [ 314.566866][ T9375] EXT4-fs (loop3): mount failed [ 314.584405][ T9397] random: crng reseeded on system resumption [ 314.698699][ T9403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1649'. [ 314.993139][ T9399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2336 sclass=netlink_route_socket pid=9399 comm=syz.4.1647 [ 315.029282][ T9409] loop3: detected capacity change from 0 to 1024 [ 315.120469][ T9409] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 315.135503][ T9409] System zones: 0-1, 3-36 [ 315.142557][ T9409] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1651: bad orphan inode 134217728 [ 315.170942][ T9409] loop3: lost filesystem error report for type 5 error -117 [ 315.174445][ T9426] loop2: detected capacity change from 0 to 1024 [ 315.176522][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 315.194655][ C1] EXT4-fs (loop3): initial error at time 1777771373: ext4_orphan_get:1423 [ 315.203276][ C1] EXT4-fs (loop3): last error at time 1777771373: ext4_orphan_get:1423 [ 315.214813][ T9409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.235633][ T9419] random: crng reseeded on system resumption [ 315.267864][ T9426] rdma_rxe: rxe_newlink: failed to add syz_tun [ 315.361621][ T9429] netlink: 'syz.4.1657': attribute type 1 has an invalid length. [ 315.434803][ T9436] netlink: 'syz.5.1660': attribute type 1 has an invalid length. [ 315.481905][ T9436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 315.499609][ T9438] netlink: 'syz.4.1661': attribute type 1 has an invalid length. [ 315.536081][ T9436] vlan2: entered allmulticast mode [ 315.565416][ T9436] veth0_to_bond: entered allmulticast mode [ 315.589776][ T9434] loop2: detected capacity change from 0 to 512 [ 315.624253][ T9436] bond1: (slave vlan2): making interface the new active one [ 315.658278][ T9434] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 315.674706][ T9436] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 315.716935][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.750570][ T9434] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 315.780556][ T9434] EXT4-fs (loop2): mount failed [ 315.782949][ T9444] random: crng reseeded on system resumption [ 315.952866][ T9427] loop0: detected capacity change from 0 to 1024 [ 316.048765][ T9427] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 316.090012][ T9427] EXT4-fs (loop0): group descriptors corrupted! [ 316.244585][ T9461] loop4: detected capacity change from 0 to 512 [ 316.252335][ T9461] journal_path: Non-blockdev passed as './file1' [ 316.258801][ T9461] EXT4-fs: error: could not find journal device path [ 316.463719][ T9463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.635556][ T9463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.009368][ T9453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2336 sclass=netlink_route_socket pid=9453 comm=syz.2.1665 [ 317.610564][ T9467] program syz.3.1669 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.002377][ T9469] random: crng reseeded on system resumption [ 318.253910][ T9475] netlink: 'syz.3.1671': attribute type 1 has an invalid length. [ 318.445271][ T9478] loop5: detected capacity change from 0 to 512 [ 318.472740][ T9478] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.1672: inode has both inline data and extents flags [ 318.520430][ T9478] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 318.521311][ T9478] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1672: couldn't read orphan inode 15 (err -117) [ 318.530617][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 318.530640][ C0] EXT4-fs (loop5): initial error at time 1777771376: ext4_orphan_get:1397: inode 15 [ 318.530689][ C0] EXT4-fs (loop5): last error at time 1777771376: ext4_orphan_get:1397: inode 15 [ 318.540815][ T9484] netlink: 'syz.2.1674': attribute type 1 has an invalid length. [ 318.579892][ T9478] loop5: lost filesystem error report for type 5 error -117 [ 318.581395][ T9478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.624062][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 318.624081][ T28] audit: type=1400 audit(1777771376.668:1575): avc: denied { map } for pid=9476 comm="syz.5.1672" path="pipe:[19375]" dev="pipefs" ino=19375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 318.676466][ T9480] loop3: detected capacity change from 0 to 1024 [ 318.685468][ T9484] 8021q: adding VLAN 0 to HW filter on device bond2 [ 318.857921][ T9480] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 318.884156][ T9480] System zones: 0-1, 3-36 [ 318.900332][ T9489] __nla_validate_parse: 6 callbacks suppressed [ 318.900365][ T9489] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1675'. [ 318.925177][ T9480] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1673: bad orphan inode 134217728 [ 318.957328][ T9480] loop3: lost filesystem error report for type 5 error -117 [ 318.963769][ T9480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.988676][ T9489] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1675'. [ 319.019301][ T9491] loop2: detected capacity change from 0 to 512 [ 319.062662][ T9491] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 319.090431][ T9491] Quota error (device loop2): v2_read_file_info: Free block number 7 out of range (1, 6). [ 319.112438][ T9491] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 319.136958][ T9491] EXT4-fs (loop2): mount failed [ 319.207554][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1676'. [ 319.272247][ T8256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.364170][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.555945][ T28] audit: type=1400 audit(1777771377.598:1576): avc: denied { read } for pid=9504 comm="syz.3.1680" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 319.606399][ T28] audit: type=1400 audit(1777771377.598:1577): avc: denied { open } for pid=9504 comm="syz.3.1680" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 319.653577][ T9501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2336 sclass=netlink_route_socket pid=9501 comm=syz.5.1678 [ 319.789388][ T9519] netlink: 'syz.2.1683': attribute type 1 has an invalid length. [ 319.815733][ T9523] netlink: 'syz.5.1685': attribute type 1 has an invalid length. [ 319.943748][ T9532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1687'. [ 319.967666][ T9523] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.989361][ T9536] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 320.011385][ T9536] audit: out of memory in audit_log_start [ 320.018681][ T9534] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1688'. [ 320.046169][ T9534] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1688'. [ 320.149568][ T9534] loop4: detected capacity change from 0 to 512 [ 320.219382][ T9544] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1691'. [ 320.265666][ T9534] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 320.379302][ T9534] Quota error (device loop4): v2_read_file_info: Free block number 7 out of range (1, 6). [ 320.418213][ T9534] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 320.484892][ T9534] EXT4-fs (loop4): mount failed [ 320.829921][ T9546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2336 sclass=netlink_route_socket pid=9546 comm=syz.2.1692 [ 321.080078][ T9557] loop5: detected capacity change from 0 to 128 [ 321.125098][ T9557] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 321.218404][ T28] audit: type=1400 audit(1777771379.268:1578): avc: denied { bind } for pid=9554 comm="syz.2.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 321.952724][ T9569] netlink: 'syz.2.1699': attribute type 1 has an invalid length. [ 322.143353][ T9573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1701'. [ 322.354555][ T9586] loop0: detected capacity change from 0 to 1024 [ 322.365933][ T9586] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 322.410781][ T9586] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 322.429772][ T9586] EXT4-fs (loop0): orphan cleanup on readonly fs [ 322.442797][ T28] audit: type=1400 audit(1777771380.488:1579): avc: denied { getopt } for pid=9582 comm="syz.5.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 322.443751][ T9586] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.1708: Freeing blocks not in datazone - block = 0, count = 4096 [ 322.536033][ T9587] loop4: detected capacity change from 0 to 1024 [ 322.568756][ T9586] loop0: lost filesystem error report for type 5 error -117 [ 322.569160][ T9586] EXT4-fs (loop0): 1 orphan inode deleted [ 322.576620][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 322.576647][ C0] EXT4-fs (loop0): initial error at time 1777771380: ext4_free_blocks:6718 [ 322.576693][ C0] EXT4-fs (loop0): last error at time 1777771380: ext4_free_blocks:6718 [ 322.691430][ T9587] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 322.697891][ T9586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 322.706615][ T9587] System zones: 0-1, 3-36 [ 322.749093][ T9596] loop5: detected capacity change from 0 to 1024 [ 322.756161][ T9587] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1707: bad orphan inode 134217728 [ 322.756197][ T9586] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 16: comm syz.0.1708: path /357/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 322.799953][ T9587] loop4: lost filesystem error report for type 5 error -117 [ 322.805683][ T9596] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 322.822368][ T9587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.825101][ T9596] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 322.862524][ T9596] JBD2: no valid journal superblock found [ 322.868802][ T9596] EXT4-fs (loop5): Could not load journal inode [ 322.913701][ T9579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2336 sclass=netlink_route_socket pid=9579 comm=syz.2.1704 [ 322.952352][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.035123][ T9609] netlink: 'syz.5.1714': attribute type 1 has an invalid length. [ 323.215837][ T9618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1717'. [ 323.328747][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.588985][ T9624] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1721'. [ 324.105025][ T9621] loop5: detected capacity change from 0 to 1024 [ 324.155623][ T9627] loop2: detected capacity change from 0 to 512 [ 324.201035][ T9627] EXT4-fs: inline encryption not supported [ 324.213951][ T9621] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 324.245809][ T9627] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 324.263702][ T9621] System zones: 0-1, 3-36 [ 324.287440][ T9621] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.1720: bad orphan inode 134217728 [ 324.313549][ T9621] loop5: lost filesystem error report for type 5 error -117 [ 324.320536][ T9627] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 324.366302][ T9621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.487831][ T9634] loop3: detected capacity change from 0 to 1024 [ 324.510602][ T9634] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 324.524021][ T9634] EXT4-fs (loop3): group descriptors corrupted! [ 324.715201][ T9627] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1722: bg 0: block 248: padding at end of block bitmap is not set [ 324.737004][ T9627] loop2: lost filesystem error report for type 5 error -117 [ 324.738180][ T9627] Quota error (device loop2): write_blk: dquota write failed [ 324.753281][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 324.753309][ C0] EXT4-fs (loop2): last error at time 1777771382: ext4_validate_block_bitmap:441 [ 324.811105][ T9627] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 324.852014][ T9627] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.1722: Failed to acquire dquot type 1 [ 324.888316][ T9627] loop2: lost filesystem error report for type 5 error -28 [ 324.904231][ T9627] EXT4-fs (loop2): 1 truncate cleaned up [ 324.967819][ T9627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 325.086388][ T28] audit: type=1400 audit(1777771383.068:1580): avc: denied { write } for pid=9626 comm="syz.2.1722" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 325.118392][ T8256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.168617][ T9627] syz.2.1722 (9627) used greatest stack depth: 8184 bytes left [ 325.194484][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 325.208204][ T405] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 325.234772][ T405] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 325.274780][ T405] loop2: lost filesystem error report for type 5 error -117 [ 325.400464][ T9642] loop5: detected capacity change from 0 to 512 [ 325.450751][ T9642] EXT4-fs: inline encryption not supported [ 325.457944][ T28] audit: type=1400 audit(1777771383.508:1581): avc: denied { setopt } for pid=9645 comm="syz.0.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 325.479851][ T9644] loop2: detected capacity change from 0 to 256 [ 325.490865][ T9642] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 325.526510][ T9642] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 325.582987][ T9642] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1723: bg 0: block 248: padding at end of block bitmap is not set [ 325.659012][ T9642] loop5: lost filesystem error report for type 5 error -117 [ 325.659321][ T9642] Quota error (device loop5): write_blk: dquota write failed [ 325.666703][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 325.666723][ C1] EXT4-fs (loop5): last error at time 1777771383: ext4_validate_block_bitmap:441 [ 325.729910][ T9642] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 325.754822][ T9644] FAT-fs (loop2): Directory bread(block 64) failed [ 325.762455][ T9642] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.1723: Failed to acquire dquot type 1 [ 325.782058][ T9644] FAT-fs (loop2): Directory bread(block 65) failed [ 325.789944][ T9642] loop5: lost filesystem error report for type 5 error -28 [ 325.795390][ T9642] EXT4-fs (loop5): 1 truncate cleaned up [ 325.811355][ T9644] FAT-fs (loop2): Directory bread(block 66) failed [ 325.856757][ T9644] FAT-fs (loop2): Directory bread(block 67) failed [ 325.867958][ T9642] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 325.892426][ T9644] FAT-fs (loop2): Directory bread(block 68) failed [ 325.905076][ T9644] FAT-fs (loop2): Directory bread(block 69) failed [ 325.914803][ T9644] FAT-fs (loop2): Directory bread(block 70) failed [ 325.916409][ T28] audit: type=1400 audit(1777771383.968:1582): avc: denied { write } for pid=9641 comm="syz.5.1723" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 325.926024][ T9644] FAT-fs (loop2): Directory bread(block 71) failed [ 325.998621][ T8256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 326.002362][ T9644] FAT-fs (loop2): Directory bread(block 72) failed [ 326.016412][ T49] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 326.025748][ T49] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 326.044568][ T49] loop5: lost filesystem error report for type 5 error -117 [ 326.074643][ T9644] FAT-fs (loop2): Directory bread(block 73) failed [ 326.125297][ T9650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2336 sclass=netlink_route_socket pid=9650 comm=syz.0.1727 [ 326.141922][ T9658] netlink: 'syz.5.1730': attribute type 1 has an invalid length. [ 326.257900][ T9654] loop4: detected capacity change from 0 to 1024 [ 326.388914][ T9654] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 326.429550][ T9654] System zones: 0-1, 3-36 [ 326.437528][ T9664] random: crng reseeded on system resumption [ 326.532525][ T9674] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1736'. [ 326.574755][ T9654] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1729: bad orphan inode 134217728 [ 326.625644][ T9654] loop4: lost filesystem error report for type 5 error -117 [ 326.671022][ T9654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.715215][ T9673] SET target dimension over the limit! [ 327.093686][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.136879][ T9686] loop0: detected capacity change from 0 to 1024 [ 327.173392][ T9686] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 327.210668][ T9686] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 327.245399][ T9686] JBD2: no valid journal superblock found [ 327.277989][ T9686] EXT4-fs (loop0): Could not load journal inode [ 327.595530][ T9691] FAULT_INJECTION: forcing a failure. [ 327.595530][ T9691] name failslab, interval 1, probability 0, space 0, times 0 [ 327.651680][ T9691] CPU: 0 UID: 0 PID: 9691 Comm: syz.2.1743 Tainted: G W syzkaller #0 PREEMPT(full) [ 327.651716][ T9691] Tainted: [W]=WARN [ 327.651790][ T9691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 327.651872][ T9691] Call Trace: [ 327.651881][ T9691] [ 327.651889][ T9691] __dump_stack+0x1d/0x30 [ 327.651914][ T9691] dump_stack_lvl+0x95/0xd0 [ 327.651935][ T9691] dump_stack+0x15/0x1b [ 327.651957][ T9691] should_fail_ex+0x263/0x280 [ 327.651992][ T9691] should_failslab+0x8c/0xb0 [ 327.652032][ T9691] __kmalloc_noprof+0xb8/0x4d0 [ 327.652071][ T9691] ? sock_kmalloc+0x85/0xc0 [ 327.652175][ T9691] sock_kmalloc+0x85/0xc0 [ 327.652208][ T9691] ____sys_sendmsg+0xf9/0x5b0 [ 327.652260][ T9691] ___sys_sendmsg+0x195/0x1e0 [ 327.652286][ T9691] ? path_openat+0x1b01/0x2050 [ 327.652363][ T9691] __sys_sendmmsg+0x185/0x320 [ 327.652400][ T9691] __x64_sys_sendmmsg+0x57/0x70 [ 327.652496][ T9691] x64_sys_call+0x27aa/0x3020 [ 327.652529][ T9691] do_syscall_64+0x12c/0x3b0 [ 327.652557][ T9691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.652606][ T9691] RIP: 0033:0x7f9cd35ecdd9 [ 327.652717][ T9691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.652737][ T9691] RSP: 002b:00007f9cd203f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 327.652758][ T9691] RAX: ffffffffffffffda RBX: 00007f9cd3865fa0 RCX: 00007f9cd35ecdd9 [ 327.652772][ T9691] RDX: 0000000000000002 RSI: 0000200000003a40 RDI: 0000000000000003 [ 327.652785][ T9691] RBP: 00007f9cd203f090 R08: 0000000000000000 R09: 0000000000000000 [ 327.652809][ T9691] R10: 0000000004004845 R11: 0000000000000246 R12: 0000000000000001 [ 327.652873][ T9691] R13: 00007f9cd3866038 R14: 00007f9cd3865fa0 R15: 00007ffedfb4fa08 [ 327.652900][ T9691] [ 328.022160][ T9695] loop2: detected capacity change from 0 to 256 [ 328.354034][ T9704] random: crng reseeded on system resumption [ 328.442241][ T9706] atomic_op ffff88811e9ce928 conn xmit_atomic 0000000000000000 [ 328.518962][ T9711] loop5: detected capacity change from 0 to 128 [ 328.521657][ T9689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2336 sclass=netlink_route_socket pid=9689 comm=syz.4.1742 [ 328.544951][ T9711] vfat: Unknown parameter 'shoname' [ 328.605866][ T9695] FAT-fs (loop2): Directory bread(block 64) failed [ 328.631407][ T9695] FAT-fs (loop2): Directory bread(block 65) failed [ 328.667379][ T9695] FAT-fs (loop2): Directory bread(block 66) failed [ 328.688229][ T9695] FAT-fs (loop2): Directory bread(block 67) failed [ 328.709544][ T9695] FAT-fs (loop2): Directory bread(block 68) failed [ 328.726040][ T9715] loop5: detected capacity change from 0 to 512 [ 328.736592][ T9695] FAT-fs (loop2): Directory bread(block 69) failed [ 328.760331][ T9695] FAT-fs (loop2): Directory bread(block 70) failed [ 328.776710][ T9715] EXT4-fs warning (device loop5): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 328.784134][ T9695] FAT-fs (loop2): Directory bread(block 71) failed [ 328.830443][ T9695] FAT-fs (loop2): Directory bread(block 72) failed [ 328.850709][ T9695] FAT-fs (loop2): Directory bread(block 73) failed [ 328.865168][ T308] Bluetooth: hci0: Frame reassembly failed (-84) [ 328.897939][ T9717] random: crng reseeded on system resumption [ 328.985526][ T9715] loop5: detected capacity change from 0 to 512 [ 329.025120][ T9715] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.1750: inode has both inline data and extents flags [ 329.038821][ T9715] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 329.044391][ T9715] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1750: couldn't read orphan inode 15 (err -117) [ 329.053813][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 329.053874][ C1] EXT4-fs (loop5): initial error at time 1777771387: ext4_orphan_get:1397: inode 15 [ 329.053943][ C1] EXT4-fs (loop5): last error at time 1777771387: ext4_orphan_get:1397: inode 15 [ 329.092344][ T9715] loop5: lost filesystem error report for type 5 error -117 [ 329.098565][ T9715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.157726][ T9720] loop4: detected capacity change from 0 to 1024 [ 329.208749][ T9720] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 329.226973][ T9720] System zones: 0-1, 3-36 [ 329.234589][ T28] audit: type=1400 audit(1777771387.278:1583): avc: denied { write } for pid=9714 comm="syz.5.1750" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 329.378930][ T9720] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1752: bad orphan inode 134217728 [ 329.398604][ T9720] loop4: lost filesystem error report for type 5 error -117 [ 329.418539][ T9720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.966859][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.028749][ T9735] loop4: detected capacity change from 0 to 256 [ 330.183851][ T9737] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.1755: corrupted in-inode xattr: invalid ea_ino [ 330.203022][ T9737] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 330.206274][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 330.215448][ T9737] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1755: couldn't read orphan inode 15 (err -117) [ 330.215487][ T9737] loop2: lost filesystem error report for type 5 error -117 [ 330.221935][ C1] EXT4-fs (loop2): initial error at time 1777771388: ext4_iget_extra_inode:5128: inode 15 [ 330.221966][ C1] EXT4-fs (loop2): last error at time 1777771388: ext4_iget_extra_inode:5128: inode 15 [ 330.262712][ T9737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.341798][ T9737] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.1755: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 330.361879][ T28] audit: type=1400 audit(1777771388.388:1584): avc: denied { write } for pid=9736 comm="syz.2.1755" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.389602][ T28] audit: type=1400 audit(1777771388.388:1585): avc: denied { create } for pid=9736 comm="syz.2.1755" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 330.493172][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.533895][ T9750] random: crng reseeded on system resumption [ 330.542307][ T9747] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1758'. [ 330.552107][ T9747] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1758'. [ 330.557158][ T9735] FAT-fs (loop4): Directory bread(block 64) failed [ 330.578007][ T9747] set_capacity_and_notify: 2 callbacks suppressed [ 330.578043][ T9747] loop0: detected capacity change from 0 to 512 [ 330.579124][ T9735] FAT-fs (loop4): Directory bread(block 65) failed [ 330.601637][ T9735] FAT-fs (loop4): Directory bread(block 66) failed [ 330.622280][ T9747] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 330.632562][ T9735] FAT-fs (loop4): Directory bread(block 67) failed [ 330.642557][ T9735] FAT-fs (loop4): Directory bread(block 68) failed [ 330.653640][ T9747] Quota error (device loop0): v2_read_file_info: Free block number 7 out of range (1, 6). [ 330.666339][ T9735] FAT-fs (loop4): Directory bread(block 69) failed [ 330.672994][ T9747] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 330.673657][ T9747] EXT4-fs (loop0): mount failed [ 330.705889][ T9735] FAT-fs (loop4): Directory bread(block 70) failed [ 330.717276][ T9735] FAT-fs (loop4): Directory bread(block 71) failed [ 330.760478][ T9735] FAT-fs (loop4): Directory bread(block 72) failed [ 330.786469][ T9735] FAT-fs (loop4): Directory bread(block 73) failed [ 330.879085][ T28] audit: type=1400 audit(1777771388.928:1586): avc: denied { mount } for pid=9753 comm="syz.2.1760" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 330.920437][ T28] audit: type=1400 audit(1777771388.928:1587): avc: denied { remount } for pid=9753 comm="syz.2.1760" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 330.943839][ T5444] Bluetooth: hci0: command 0x1003 tx timeout [ 330.948102][ T3703] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 330.990389][ T8256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.035015][ T28] audit: type=1400 audit(1777771389.078:1588): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 331.156501][ T9759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2336 sclass=netlink_route_socket pid=9759 comm=syz.0.1761 [ 331.240883][ T9764] random: crng reseeded on system resumption [ 331.242923][ T9765] loop2: detected capacity change from 0 to 1024 [ 331.300743][ T9772] loop4: detected capacity change from 0 to 512 [ 331.304453][ T9765] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 331.341090][ T9765] System zones: 0-1, 3-36 [ 331.529522][ T9781] loop3: detected capacity change from 0 to 1024 [ 331.571907][ T9779] loop5: detected capacity change from 0 to 512 [ 331.601090][ T9781] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 331.616499][ T9781] EXT4-fs (loop3): group descriptors corrupted! [ 332.367078][ T9779] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 332.394151][ T9779] System zones: 0-2, 18-18, 34-35 [ 332.684654][ T9779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.699425][ T9765] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1765: bad orphan inode 134217728 [ 333.020891][ T9779] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 333.065375][ T9765] loop2: lost filesystem error report for type 5 error -117 [ 333.066344][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 333.081513][ C0] EXT4-fs (loop2): initial error at time 1777771391: ext4_orphan_get:1423 [ 333.091124][ C0] EXT4-fs (loop2): last error at time 1777771391: ext4_orphan_get:1423 [ 333.107804][ T28] audit: type=1400 audit(1777771391.148:1589): avc: denied { write } for pid=9778 comm="syz.5.1769" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 333.140035][ T9779] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #18: comm syz.5.1769: corrupted inode contents [ 333.152081][ T9779] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 333.153353][ T9779] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #18: comm syz.5.1769: mark_inode_dirty error [ 333.200129][ T9779] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 333.200385][ T9779] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #18: comm syz.5.1769: corrupted inode contents [ 333.230091][ T9779] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 333.230318][ T9779] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #18: comm syz.5.1769: mark_inode_dirty error [ 333.252034][ T9779] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 333.254412][ T9779] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #18: comm syz.5.1769: mark inode dirty (error -117) [ 333.276630][ T9779] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 333.278542][ T9779] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 333.315569][ T9765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.317884][ T9794] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1772'. [ 333.331738][ T9798] random: crng reseeded on system resumption [ 333.360677][ T9794] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1772'. [ 333.372297][ T8256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.385526][ T9801] loop0: detected capacity change from 0 to 512 [ 333.422852][ T9801] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 333.438526][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.451881][ T9801] Quota error (device loop0): v2_read_file_info: Free block number 7 out of range (1, 6). [ 333.466400][ T9801] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 333.493500][ T9801] EXT4-fs (loop0): mount failed [ 333.561669][ T9813] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1776'. [ 333.571419][ T3392] IPVS: starting estimator thread 0... [ 333.686514][ T9814] IPVS: using max 2256 ests per chain, 112800 per kthread [ 333.861958][ T9827] netlink: 'syz.5.1782': attribute type 1 has an invalid length. [ 333.918678][ T9819] random: crng reseeded on system resumption [ 334.239526][ T9818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2336 sclass=netlink_route_socket pid=9818 comm=syz.0.1778 [ 334.354666][ T9827] 8021q: adding VLAN 0 to HW filter on device bond3 [ 334.884511][ T9844] loop2: detected capacity change from 0 to 512 [ 334.999530][ T9844] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 335.123870][ T28] audit: type=1400 audit(1777771393.168:1590): avc: denied { map } for pid=9847 comm="syz.0.1786" path="socket:[26178]" dev="sockfs" ino=26178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 335.157414][ T9844] System zones: 0-2, 18-18, 34-35 [ 335.201349][ T9844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.222312][ T28] audit: type=1400 audit(1777771393.198:1591): avc: denied { read } for pid=9847 comm="syz.0.1786" path="socket:[26178]" dev="sockfs" ino=26178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 335.249068][ T9844] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 335.309696][ T9855] loop4: detected capacity change from 0 to 512 [ 335.392806][ T28] audit: type=1400 audit(1777771393.398:1592): avc: denied { bind } for pid=9848 comm="syz.4.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 335.464712][ T28] audit: type=1400 audit(1777771393.418:1593): avc: denied { write } for pid=9843 comm="syz.2.1785" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.495228][ T9857] loop0: detected capacity change from 0 to 512 [ 335.551682][ T9861] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1789'. [ 335.571130][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.591674][ T9857] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 335.629572][ T9857] Quota error (device loop0): v2_read_file_info: Free block number 7 out of range (1, 6). [ 335.640255][ T9857] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 336.077506][ T9866] loop4: detected capacity change from 0 to 512 [ 336.098133][ T9866] EXT4-fs: Ignoring removed nobh option [ 336.123850][ T9866] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.1791: corrupted in-inode xattr: overlapping e_value [ 336.140687][ T9866] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 336.141120][ T9866] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1791: couldn't read orphan inode 15 (err -117) [ 336.150427][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 336.150500][ C1] EXT4-fs (loop4): initial error at time 1777771394: ext4_iget_extra_inode:5128: inode 15 [ 336.150726][ C1] EXT4-fs (loop4): last error at time 1777771394: ext4_iget_extra_inode:5128: inode 15 [ 336.193098][ T9866] loop4: lost filesystem error report for type 5 error -117 [ 336.199134][ T9866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.460198][ T9857] EXT4-fs (loop0): mount failed [ 336.501262][ T9869] loop5: detected capacity change from 0 to 512 [ 336.516861][ T9869] EXT4-fs: inline encryption not supported [ 336.529389][ T9869] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 336.547754][ T9869] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 336.562687][ T9869] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1792: bg 0: block 248: padding at end of block bitmap is not set [ 336.577401][ T9869] loop5: lost filesystem error report for type 5 error -117 [ 336.577794][ T9869] Quota error (device loop5): write_blk: dquota write failed [ 336.592578][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 336.592615][ C1] EXT4-fs (loop5): last error at time 1777771394: ext4_validate_block_bitmap:441 [ 336.610367][ T9869] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 336.621403][ T9869] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.1792: Failed to acquire dquot type 1 [ 336.632984][ T9869] loop5: lost filesystem error report for type 5 error -28 [ 336.633617][ T9869] EXT4-fs (loop5): 1 truncate cleaned up [ 336.647563][ T9869] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 336.661828][ T28] audit: type=1400 audit(1777771394.708:1594): avc: denied { write } for pid=9868 comm="syz.5.1792" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 337.094760][ T8256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 337.117894][ T30] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 337.166645][ T30] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 337.190195][ T9873] loop2: detected capacity change from 0 to 512 [ 337.233926][ T9873] EXT4-fs: inline encryption not supported [ 337.242860][ T30] loop5: lost filesystem error report for type 5 error -117 [ 337.251702][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.283385][ T9877] netlink: 'syz.0.1795': attribute type 1 has an invalid length. [ 337.298705][ T9873] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1790: bad orphan inode 15 [ 337.320199][ T9873] loop2: lost filesystem error report for type 5 error -117 [ 337.320699][ T9875] loop3: detected capacity change from 0 to 256 [ 337.326348][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 337.342500][ C0] EXT4-fs (loop2): initial error at time 1777771395: ext4_orphan_get:1423 [ 337.351089][ C0] EXT4-fs (loop2): last error at time 1777771395: ext4_orphan_get:1423 [ 337.359860][ T9873] ext4_test_bit(bit=14, block=5) = 0 [ 337.380144][ T9873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.400319][ T9877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 337.413039][ T9884] loop4: detected capacity change from 0 to 128 [ 337.437260][ T9873] EXT4-fs error (device loop2): __ext4_new_inode:1079: comm syz.2.1790: reserved inode found cleared - inode=1 [ 337.452252][ T28] audit: type=1400 audit(1777771395.488:1595): avc: denied { write } for pid=9872 comm="syz.2.1790" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 337.491530][ T9884] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 337.492602][ T9879] loop5: detected capacity change from 0 to 512 [ 337.526021][ T28] audit: type=1400 audit(1777771395.488:1596): avc: denied { write } for pid=9872 comm="syz.2.1790" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 337.526067][ T28] audit: type=1400 audit(1777771395.488:1597): avc: denied { rename } for pid=9872 comm="syz.2.1790" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 337.583797][ T9884] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.624736][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.648397][ T9875] FAT-fs (loop3): Directory bread(block 64) failed [ 337.682222][ T9875] FAT-fs (loop3): Directory bread(block 65) failed [ 337.740358][ T9889] loop0: detected capacity change from 0 to 512 [ 337.758959][ T9875] FAT-fs (loop3): Directory bread(block 66) failed [ 337.776812][ T9889] EXT4-fs (loop0): 1 truncate cleaned up [ 337.786240][ T9887] loop2: detected capacity change from 0 to 256 [ 337.786758][ T9875] FAT-fs (loop3): Directory bread(block 67) failed [ 337.805514][ T9889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.842165][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 337.850127][ T9875] FAT-fs (loop3): Directory bread(block 68) failed [ 337.862988][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.863093][ T9875] FAT-fs (loop3): Directory bread(block 69) failed [ 337.919017][ T9879] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.919224][ T9879] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.969612][ T9895] loop0: detected capacity change from 0 to 512 [ 337.994843][ T9875] FAT-fs (loop3): Directory bread(block 70) failed [ 338.005413][ T9875] FAT-fs (loop3): Directory bread(block 71) failed [ 338.014347][ T9875] FAT-fs (loop3): Directory bread(block 72) failed [ 338.023830][ T9875] FAT-fs (loop3): Directory bread(block 73) failed [ 338.111099][ T9895] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 338.121951][ T9895] System zones: 0-2, 18-18, 34-35 [ 338.137867][ T9895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.145114][ T9879] netlink: 'syz.5.1793': attribute type 4 has an invalid length. [ 338.152235][ T9895] ext4 filesystem being mounted at /383/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 338.199939][ T9900] netlink: 'syz.5.1793': attribute type 4 has an invalid length. [ 338.243737][ T9887] FAT-fs (loop2): Directory bread(block 64) failed [ 338.254589][ T9887] FAT-fs (loop2): Directory bread(block 65) failed [ 338.311241][ T9895] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #18: comm syz.0.1800: corrupted inode contents [ 338.326347][ T9887] FAT-fs (loop2): Directory bread(block 66) failed [ 338.344787][ T9887] FAT-fs (loop2): Directory bread(block 67) failed [ 338.362512][ T9895] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 338.363432][ T9895] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #18: comm syz.0.1800: mark_inode_dirty error [ 338.428769][ T9887] FAT-fs (loop2): Directory bread(block 68) failed [ 338.463169][ T9895] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 338.463345][ T9887] FAT-fs (loop2): Directory bread(block 69) failed [ 338.504727][ T9895] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #18: comm syz.0.1800: corrupted inode contents [ 338.514550][ T9887] FAT-fs (loop2): Directory bread(block 70) failed [ 338.517181][ T9895] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 338.529494][ T9887] FAT-fs (loop2): Directory bread(block 71) failed [ 338.549807][ T9887] FAT-fs (loop2): Directory bread(block 72) failed [ 338.558590][ T9887] FAT-fs (loop2): Directory bread(block 73) failed [ 338.577012][ T9895] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #18: comm syz.0.1800: mark_inode_dirty error [ 338.589587][ T9895] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 338.590173][ T9895] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #18: comm syz.0.1800: mark inode dirty (error -117) [ 338.646741][ T9895] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 338.666892][ T9895] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 338.812476][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.899534][ T8256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.968418][ T9916] loop4: detected capacity change from 0 to 128 [ 339.057174][ T9916] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 339.083116][ T9916] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 339.102165][ T9919] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1804'. [ 339.122612][ T9920] tmpfs: Unknown parameter '00000000000000000000000' [ 339.139988][ T9920] netlink: 'syz.5.1803': attribute type 1 has an invalid length. [ 339.252063][ T9923] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 339.290751][ T9923] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 339.316114][ T9923] EXT4-fs (loop3): mount failed [ 339.753810][ T49] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 339.873071][ T9935] FAT-fs (loop0): Directory bread(block 64) failed [ 339.889485][ T9935] FAT-fs (loop0): Directory bread(block 65) failed [ 339.904671][ T9935] FAT-fs (loop0): Directory bread(block 66) failed [ 339.921733][ T9935] FAT-fs (loop0): Directory bread(block 67) failed [ 339.961345][ T9935] FAT-fs (loop0): Directory bread(block 68) failed [ 339.977593][ T9933] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 340.004946][ T9935] FAT-fs (loop0): Directory bread(block 69) failed [ 340.017095][ T9933] System zones: 0-1, 3-36 [ 340.034255][ T9935] FAT-fs (loop0): Directory bread(block 70) failed [ 340.052159][ T9935] FAT-fs (loop0): Directory bread(block 71) failed [ 340.065271][ T9935] FAT-fs (loop0): Directory bread(block 72) failed [ 340.076738][ T9933] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1807: bad orphan inode 134217728 [ 340.089562][ T9935] FAT-fs (loop0): Directory bread(block 73) failed [ 340.098128][ T9933] loop4: lost filesystem error report for type 5 error -117 [ 340.103968][ T9933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.230319][ T9945] syzkaller0: entered promiscuous mode [ 340.413301][ T9948] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 340.423625][ T9948] System zones: 0-2, 18-18, 34-35 [ 340.430739][ T9948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.443677][ T9948] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 340.456072][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 340.456086][ T28] audit: type=1400 audit(1777771398.498:1632): avc: denied { write } for pid=9947 comm="syz.5.1811" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 340.488688][ T9948] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #18: comm syz.5.1811: corrupted inode contents [ 340.501271][ T9948] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 340.501596][ T9948] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #18: comm syz.5.1811: mark_inode_dirty error [ 340.522631][ T9948] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 340.522842][ T9948] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #18: comm syz.5.1811: corrupted inode contents [ 340.548130][ T9948] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 340.548384][ T9948] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #18: comm syz.5.1811: mark_inode_dirty error [ 340.570167][ T9948] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 340.570454][ T9948] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #18: comm syz.5.1811: mark inode dirty (error -117) [ 340.594382][ T9948] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 340.619890][ T8256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.641327][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.132235][ T9963] set_capacity_and_notify: 5 callbacks suppressed [ 341.132314][ T9963] loop3: detected capacity change from 0 to 512 [ 341.440621][ T9963] EXT4-fs warning (device loop3): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 341.586005][ T9952] FAT-fs (loop2): Directory bread(block 64) failed [ 341.602962][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 341.651187][ T9963] loop3: detected capacity change from 0 to 512 [ 341.679383][ T9972] random: crng reseeded on system resumption [ 341.682057][ T9952] FAT-fs (loop2): Directory bread(block 65) failed [ 341.695788][ T9952] FAT-fs (loop2): Directory bread(block 66) failed [ 341.710429][ T9952] FAT-fs (loop2): Directory bread(block 67) failed [ 341.717654][ T9952] FAT-fs (loop2): Directory bread(block 68) failed [ 341.725187][ T9952] FAT-fs (loop2): Directory bread(block 69) failed [ 341.743346][ T9963] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1817: inode has both inline data and extents flags [ 341.761572][ T9963] fserror_report: 1 callbacks suppressed [ 341.761614][ T9963] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 341.768402][ T9963] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1817: couldn't read orphan inode 15 (err -117) [ 341.777807][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 341.777840][ C1] EXT4-fs (loop3): initial error at time 1777771399: ext4_orphan_get:1397: inode 15 [ 341.777986][ C1] EXT4-fs (loop3): last error at time 1777771399: ext4_orphan_get:1397: inode 15 [ 341.789713][ T9952] FAT-fs (loop2): Directory bread(block 70) failed [ 341.790738][ T9963] loop3: lost filesystem error report for type 5 error -117 [ 341.826839][ T9963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.832892][ T9952] FAT-fs (loop2): Directory bread(block 71) failed [ 341.882184][ T9977] loop5: detected capacity change from 0 to 512 [ 341.901528][ T9952] FAT-fs (loop2): Directory bread(block 72) failed [ 341.922874][ T9979] loop4: detected capacity change from 0 to 128 [ 341.927866][ T28] audit: type=1400 audit(1777771399.938:1633): avc: denied { write } for pid=9962 comm="syz.3.1817" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.958956][ T9977] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 341.970070][ T9952] FAT-fs (loop2): Directory bread(block 73) failed [ 342.021095][ T9977] Quota error (device loop5): v2_read_file_info: Free block number 7 out of range (1, 6). [ 342.073477][ T9977] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 342.117237][ T9983] random: crng reseeded on system resumption [ 342.137045][ T9977] EXT4-fs (loop5): mount failed [ 342.287210][ T9991] loop5: detected capacity change from 0 to 512 [ 342.318345][ T9988] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1824'. [ 342.400192][ T9991] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 342.420419][ T9991] System zones: 0-2, 18-18, 34-35 [ 342.427158][ T9991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.440045][ T9991] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 342.457030][ T28] audit: type=1400 audit(1777771400.508:1634): avc: denied { write } for pid=9987 comm="syz.5.1823" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 342.499724][ T9991] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #18: comm syz.5.1823: corrupted inode contents [ 342.505586][ T9998] loop0: detected capacity change from 0 to 128 [ 342.519741][ T9998] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 342.529711][ T9991] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 342.531585][ T9991] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #18: comm syz.5.1823: mark_inode_dirty error [ 342.552873][ T9991] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 342.554215][ T9991] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #18: comm syz.5.1823: corrupted inode contents [ 342.566358][ T9998] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 342.576194][ T9991] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 342.589928][ T9991] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #18: comm syz.5.1823: mark_inode_dirty error [ 342.611555][ T9991] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 342.611858][ T9991] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #18: comm syz.5.1823: mark inode dirty (error -117) [ 342.633848][ T9991] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 342.641667][ T9991] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 342.713813][T10000] atomic_op ffff88811b4d8d28 conn xmit_atomic 0000000000000000 [ 342.799403][ T8256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.847384][T10005] loop2: detected capacity change from 0 to 256 [ 343.238096][ T3298] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 343.357602][T10014] netlink: 'syz.0.1832': attribute type 1 has an invalid length. [ 343.400824][T10014] 8021q: adding VLAN 0 to HW filter on device bond3 [ 343.474163][T10017] loop0: detected capacity change from 0 to 512 [ 343.489686][T10005] FAT-fs (loop2): Directory bread(block 64) failed [ 343.490756][T10008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2336 sclass=netlink_route_socket pid=10008 comm=syz.5.1830 [ 343.520485][T10017] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 343.544109][T10005] FAT-fs (loop2): Directory bread(block 65) failed [ 343.556299][T10005] FAT-fs (loop2): Directory bread(block 66) failed [ 343.564435][T10005] FAT-fs (loop2): Directory bread(block 67) failed [ 343.578267][T10017] Quota error (device loop0): v2_read_file_info: Free block number 7 out of range (1, 6). [ 343.580532][T10005] FAT-fs (loop2): Directory bread(block 68) failed [ 343.603644][T10005] FAT-fs (loop2): Directory bread(block 69) failed [ 343.617192][T10005] FAT-fs (loop2): Directory bread(block 70) failed [ 343.637033][T10017] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 343.655338][T10005] FAT-fs (loop2): Directory bread(block 71) failed [ 343.664658][ T3703] Bluetooth: hci0: command 0x1003 tx timeout [ 343.670797][ T3606] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 343.691408][T10005] FAT-fs (loop2): Directory bread(block 72) failed [ 343.706902][T10017] EXT4-fs (loop0): mount failed [ 343.720008][T10005] FAT-fs (loop2): Directory bread(block 73) failed [ 343.745906][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.800871][T10025] random: crng reseeded on system resumption [ 343.898910][T10028] loop0: detected capacity change from 0 to 512 [ 343.915045][T10028] EXT4-fs warning (device loop0): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 343.936483][T10026] random: crng reseeded on system resumption [ 344.000465][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 344.040860][T10035] loop3: detected capacity change from 0 to 512 [ 344.079431][T10028] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1837: inode has both inline data and extents flags [ 344.096651][T10028] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 344.103846][T10028] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1837: couldn't read orphan inode 15 (err -117) [ 344.104415][T10035] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 344.113253][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 344.139811][ C0] EXT4-fs (loop0): initial error at time 1777771402: ext4_orphan_get:1397: inode 15 [ 344.149562][ C0] EXT4-fs (loop0): last error at time 1777771402: ext4_orphan_get:1397: inode 15 [ 344.160807][T10028] loop0: lost filesystem error report for type 5 error -117 [ 344.163688][T10028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.167256][T10035] System zones: 0-2, 18-18, 34-35 [ 344.222311][T10035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.237826][T10035] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 344.250469][ T28] audit: type=1326 audit(1777771402.298:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.2.1829" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd35ecdd9 code=0x7ffc0000 [ 344.282411][ T28] audit: type=1326 audit(1777771402.298:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.2.1829" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd35ecdd9 code=0x7ffc0000 [ 344.315761][ T28] audit: type=1326 audit(1777771402.298:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.2.1829" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd35ecdd9 code=0x7ffc0000 [ 344.319446][T10035] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #18: comm syz.3.1840: corrupted inode contents [ 344.341831][ T28] audit: type=1326 audit(1777771402.298:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.2.1829" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd35ecdd9 code=0x7ffc0000 [ 344.406376][T10035] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 344.414568][T10035] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #18: comm syz.3.1840: mark_inode_dirty error [ 344.424311][ T28] audit: type=1326 audit(1777771402.298:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.2.1829" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9cd35ecdd9 code=0x7ffc0000 [ 344.463369][T10035] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 344.492265][T10035] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #18: comm syz.3.1840: corrupted inode contents [ 344.545767][T10035] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 344.546072][T10035] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #18: comm syz.3.1840: mark_inode_dirty error [ 344.574118][T10045] netlink: 'syz.4.1843': attribute type 1 has an invalid length. [ 344.586449][T10035] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #18: comm syz.3.1840: mark inode dirty (error -117) [ 344.613958][T10045] 8021q: adding VLAN 0 to HW filter on device bond3 [ 344.623502][T10041] FAT-fs (loop5): Directory bread(block 64) failed [ 344.629114][T10035] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 344.633572][T10041] FAT-fs (loop5): Directory bread(block 65) failed [ 344.654061][T10041] FAT-fs (loop5): Directory bread(block 66) failed [ 344.662531][T10041] FAT-fs (loop5): Directory bread(block 67) failed [ 344.672498][T10045] vlan3: entered allmulticast mode [ 344.675790][T10041] FAT-fs (loop5): Directory bread(block 68) failed [ 344.688007][T10041] FAT-fs (loop5): Directory bread(block 69) failed [ 344.697689][T10041] FAT-fs (loop5): Directory bread(block 70) failed [ 344.706775][T10045] veth0_to_bond: entered allmulticast mode [ 344.707163][T10041] FAT-fs (loop5): Directory bread(block 71) failed [ 344.721178][T10041] FAT-fs (loop5): Directory bread(block 72) failed [ 344.729890][T10041] FAT-fs (loop5): Directory bread(block 73) failed [ 344.750924][T10045] bond3: (slave vlan3): making interface the new active one [ 344.779093][T10045] bond3: (slave vlan3): Enslaving as an active interface with an up link [ 344.792901][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.923397][T10054] vlan2: entered allmulticast mode [ 344.936294][T10054] veth0_to_bond: entered allmulticast mode [ 344.994974][T10056] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 345.029667][T10056] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 345.071705][T10056] EXT4-fs (loop4): mount failed [ 345.113645][T10060] random: crng reseeded on system resumption [ 345.258674][T10049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2336 sclass=netlink_route_socket pid=10049 comm=syz.2.1844 [ 345.431377][T10069] random: crng reseeded on system resumption [ 345.616920][T10067] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 345.626822][T10067] System zones: 0-1, 3-36 [ 345.639785][T10067] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1850: bad orphan inode 134217728 [ 345.653786][T10067] loop4: lost filesystem error report for type 5 error -117 [ 345.730705][T10082] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 345.742719][T10067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.764129][T10082] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.776214][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 345.782379][ T28] audit: type=1400 audit(1777771403.818:1687): avc: denied { write } for pid=10081 comm="syz.3.1856" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.872806][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 345.918342][T10085] atomic_op ffff888102799528 conn xmit_atomic 0000000000000000 [ 345.961417][T10088] tmpfs: Unknown parameter '00000000000000000000000' [ 345.982232][T10088] netlink: 'syz.3.1857': attribute type 1 has an invalid length. [ 346.056317][ T3703] Bluetooth: hci0: command 0x1003 tx timeout [ 346.062447][ T3606] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 346.103735][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.135365][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.220041][T10099] random: crng reseeded on system resumption [ 346.400068][T10105] set_capacity_and_notify: 5 callbacks suppressed [ 346.400106][T10105] loop3: detected capacity change from 0 to 512 [ 346.435060][T10107] loop2: detected capacity change from 0 to 1024 [ 346.453221][T10105] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 346.493798][T10107] EXT4-fs (loop2): unable to read superblock [ 346.503559][T10105] Quota error (device loop3): v2_read_file_info: Free block number 7 out of range (1, 6). [ 346.518800][T10105] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 346.547363][T10105] EXT4-fs (loop3): mount failed [ 346.568214][ T28] audit: type=1400 audit(1777771404.618:1688): avc: denied { getopt } for pid=10079 comm="syz.2.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 346.797242][T10111] random: crng reseeded on system resumption [ 346.803639][T10102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2336 sclass=netlink_route_socket pid=10102 comm=syz.0.1862 [ 346.940915][T10116] loop2: detected capacity change from 0 to 512 [ 346.951263][T10116] EXT4-fs: inline encryption not supported [ 346.960489][T10116] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 346.999695][T10116] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 347.043298][T10116] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1865: bg 0: block 248: padding at end of block bitmap is not set [ 347.079350][ T28] audit: type=1400 audit(1777771405.118:1689): avc: denied { append } for pid=10119 comm="syz.3.1867" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 347.107412][T10116] loop2: lost filesystem error report for type 5 error -117 [ 347.111573][T10116] Quota error (device loop2): write_blk: dquota write failed [ 347.119029][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 347.119046][ C0] EXT4-fs (loop2): last error at time 1777771405: ext4_validate_block_bitmap:441 [ 347.146572][T10116] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 347.162069][T10116] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.1865: Failed to acquire dquot type 1 [ 347.194863][T10116] loop2: lost filesystem error report for type 5 error -28 [ 347.195535][T10116] EXT4-fs (loop2): 1 truncate cleaned up [ 347.213929][T10125] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 347.233692][T10127] tmpfs: Unknown parameter '00000000000000000000000' [ 347.242113][T10127] netlink: 'syz.5.1869': attribute type 1 has an invalid length. [ 347.249821][T10116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 347.275884][ T28] audit: type=1400 audit(1777771405.318:1690): avc: denied { write } for pid=10115 comm="syz.2.1865" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 347.310057][T10129] loop4: detected capacity change from 0 to 512 [ 347.349600][T10129] EXT4-fs warning (device loop4): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 347.366410][T10133] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1871'. [ 347.439854][T10135] loop5: detected capacity change from 0 to 8192 [ 348.306421][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 348.327957][ T30] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 348.366780][ T30] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 348.403826][T10129] loop4: detected capacity change from 0 to 512 [ 348.416152][ T30] loop2: lost filesystem error report for type 5 error -117 [ 348.466886][T10129] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1870: inode has both inline data and extents flags [ 348.492200][T10139] loop5: detected capacity change from 0 to 512 [ 348.531577][ T28] audit: type=1400 audit(1777771406.558:1691): avc: denied { write } for pid=10142 comm="syz.2.1873" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 348.560084][T10139] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 348.605079][T10129] fserror_report: 2 callbacks suppressed [ 348.605141][T10129] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 348.639151][T10139] Quota error (device loop5): v2_read_file_info: Free block number 7 out of range (1, 6). [ 348.660856][T10129] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1870: couldn't read orphan inode 15 (err -117) [ 348.672900][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 348.672951][ C0] EXT4-fs (loop4): initial error at time 1777771406: ext4_orphan_get:1397: inode 15 [ 348.673066][ C0] EXT4-fs (loop4): last error at time 1777771406: ext4_orphan_get:1397: inode 15 [ 348.708029][T10149] FAULT_INJECTION: forcing a failure. [ 348.708029][T10149] name failslab, interval 1, probability 0, space 0, times 0 [ 348.726803][T10149] CPU: 0 UID: 0 PID: 10149 Comm: syz.2.1876 Tainted: G W syzkaller #0 PREEMPT(full) [ 348.726849][T10149] Tainted: [W]=WARN [ 348.726856][T10149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 348.726870][T10149] Call Trace: [ 348.726877][T10149] [ 348.726951][T10149] __dump_stack+0x1d/0x30 [ 348.726985][T10149] dump_stack_lvl+0x95/0xd0 [ 348.727071][T10149] dump_stack+0x15/0x1b [ 348.727098][T10149] should_fail_ex+0x263/0x280 [ 348.727197][T10149] should_failslab+0x8c/0xb0 [ 348.727257][T10149] __kmalloc_noprof+0xb8/0x4d0 [ 348.727302][T10149] ? io_cache_alloc_new+0x2a/0xb0 [ 348.727344][T10149] io_cache_alloc_new+0x2a/0xb0 [ 348.727389][T10149] __io_prep_rw+0x116/0x710 [ 348.727431][T10149] ? io_issue_sqe+0x48a/0xba0 [ 348.727543][T10149] io_prep_write+0x34/0xe0 [ 348.727585][T10149] io_submit_sqes+0x736/0x1170 [ 348.727705][T10149] __se_sys_io_uring_enter+0x25c/0xfc0 [ 348.727751][T10149] ? mutex_unlock+0x4e/0x90 [ 348.727819][T10149] ? fput+0x8f/0xc0 [ 348.727847][T10149] __x64_sys_io_uring_enter+0x78/0x90 [ 348.727891][T10149] x64_sys_call+0x1e16/0x3020 [ 348.727989][T10149] do_syscall_64+0x12c/0x3b0 [ 348.728022][T10149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.728050][T10149] RIP: 0033:0x7f9cd35ecdd9 [ 348.728094][T10149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.728119][T10149] RSP: 002b:00007f9cd203f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 348.728190][T10149] RAX: ffffffffffffffda RBX: 00007f9cd3865fa0 RCX: 00007f9cd35ecdd9 [ 348.728208][T10149] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 348.728225][T10149] RBP: 00007f9cd203f090 R08: 0000000000000000 R09: 0000000000000000 [ 348.728240][T10149] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 348.728255][T10149] R13: 00007f9cd3866038 R14: 00007f9cd3865fa0 R15: 00007ffedfb4fa08 [ 348.728300][T10149] [ 348.728591][T10139] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 348.951625][T10129] loop4: lost filesystem error report for type 5 error -117 [ 348.967955][T10129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.043597][T10151] random: crng reseeded on system resumption [ 349.051840][T10139] EXT4-fs (loop5): mount failed [ 349.094778][T10158] loop0: detected capacity change from 0 to 512 [ 349.125208][T10158] EXT4-fs: inline encryption not supported [ 349.177657][T10139] ================================================================== [ 349.185894][T10139] BUG: KCSAN: data-race in has_bh_in_lru / invalidate_bh_lru [ 349.193832][T10139] [ 349.196188][T10139] write to 0xffff888237c277a0 of 8 bytes by task 10158 on cpu 0: [ 349.203929][T10139] invalidate_bh_lru+0x89/0xe0 [ 349.208729][T10139] smp_call_function_many_cond+0x719/0xb70 [ 349.214581][T10139] on_each_cpu_cond_mask+0x3c/0x80 [ 349.219734][T10139] invalidate_bh_lrus+0x2a/0x30 [ 349.224705][T10139] set_blocksize+0x1e3/0x270 [ 349.229327][T10139] sb_set_blocksize+0x93/0x170 [ 349.234122][T10139] ext4_fill_super+0x1480/0x37c0 [ 349.239100][T10139] get_tree_bdev_flags+0x291/0x300 [ 349.244272][T10139] get_tree_bdev+0x1f/0x30 [ 349.248726][T10139] ext4_get_tree+0x1c/0x30 [ 349.253180][T10139] vfs_get_tree+0x57/0x1d0 [ 349.257634][T10139] do_new_mount+0x288/0x8d0 [ 349.262348][T10139] path_mount+0x4d0/0xbc0 [ 349.266819][T10139] __se_sys_mount+0x28c/0x2e0 [ 349.271541][T10139] __x64_sys_mount+0x67/0x80 [ 349.276183][T10139] x64_sys_call+0x2d61/0x3020 [ 349.280897][T10139] do_syscall_64+0x12c/0x3b0 [ 349.285522][T10139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.291448][T10139] [ 349.293827][T10139] read to 0xffff888237c277a0 of 8 bytes by task 10139 on cpu 1: [ 349.301493][T10139] has_bh_in_lru+0x35/0x1f0 [ 349.306032][T10139] smp_call_function_many_cond+0x2a7/0xb70 [ 349.311903][T10139] on_each_cpu_cond_mask+0x3c/0x80 [ 349.317059][T10139] invalidate_bh_lrus+0x2a/0x30 [ 349.321939][T10139] invalidate_bdev+0x42/0x70 [ 349.326563][T10139] ext4_fill_super+0x2cf6/0x37c0 [ 349.331571][T10139] get_tree_bdev_flags+0x291/0x300 [ 349.336722][T10139] get_tree_bdev+0x1f/0x30 [ 349.341180][T10139] ext4_get_tree+0x1c/0x30 [ 349.345628][T10139] vfs_get_tree+0x57/0x1d0 [ 349.350087][T10139] do_new_mount+0x288/0x8d0 [ 349.354630][T10139] path_mount+0x4d0/0xbc0 [ 349.359148][T10139] __se_sys_mount+0x28c/0x2e0 [ 349.363893][T10139] __x64_sys_mount+0x67/0x80 [ 349.368541][T10139] x64_sys_call+0x2d61/0x3020 [ 349.373272][T10139] do_syscall_64+0x12c/0x3b0 [ 349.377898][T10139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.383822][T10139] [ 349.386168][T10139] value changed: 0xffff88811b060c30 -> 0x0000000000000000 [ 349.393400][T10139] [ 349.395758][T10139] Reported by Kernel Concurrency Sanitizer on: [ 349.401945][T10139] CPU: 1 UID: 0 PID: 10139 Comm: syz.5.1874 Tainted: G W syzkaller #0 PREEMPT(full) [ 349.412914][T10139] Tainted: [W]=WARN [ 349.416742][T10139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 349.426826][T10139] ================================================================== [ 349.445613][T10158] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 349.502841][T10158] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 349.525744][T10158] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1880: bg 0: block 248: padding at end of block bitmap is not set [ 349.566716][T10158] loop0: lost filesystem error report for type 5 error -117 [ 349.576661][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 349.592760][ C1] EXT4-fs (loop0): last error at time 1777771407: ext4_validate_block_bitmap:441 [ 349.607150][T10158] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.1880: Failed to acquire dquot type 1 [ 349.621134][T10160] atomic_op ffff88811fb23128 conn xmit_atomic 0000000000000000 [ 349.629694][T10158] loop0: lost filesystem error report for type 5 error -28 [ 349.630250][T10158] EXT4-fs (loop0): 1 truncate cleaned up [ 349.645705][T10158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 349.705205][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 349.717719][ T3466] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 349.731480][ T3466] loop0: lost filesystem error report for type 5 error -117 [ 350.376351][ T3703] Bluetooth: hci0: command 0x1003 tx timeout [ 350.376348][ T3606] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 350.407946][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.