last executing test programs: 12m43.871582033s ago: executing program 32 (id=13): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x921, 0x0, 0x0, {0xa, 0x40}}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001a80)={[{@data_ordered}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@journal_async_commit}, {@nolazytime}, {@data_writeback, 0x2e}, {@journal_async_commit}, {@resuid}, {@commit={'commit', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x800}}], [], 0x2c}, 0x84, 0x4f6, &(0x7f00000022c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r4) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r5, 0x7}, 0x0, &(0x7f00000008c0)="eb2bcb44032c2a", 0x0) 12m15.071760131s ago: executing program 33 (id=57): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x4d, 0x2ba8}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) r3 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) membarrier(0x2, 0x0) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0xa, &(0x7f0000000000)=0x2, 0x4) listen(r6, 0x3) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r3, 0x6f2d, 0x7fffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 7m50.442334624s ago: executing program 34 (id=941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8=r0], 0x1, 0x122e, &(0x7f0000002580)="$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") r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) setuid(0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="0b56d94fb77a4d7d"], 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 7m45.792258254s ago: executing program 35 (id=954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x7}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 7m41.24607067s ago: executing program 36 (id=987): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f00000000c0)}) 7m29.683152108s ago: executing program 37 (id=1020): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4600, 0xffffffffffffffff) 7m13.467310298s ago: executing program 38 (id=1086): write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="04000000ffffffffffffa2aaaaaaaaaa86dd60"], 0x86) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x8100, r4, 0x1, 0x3, 0x6, @remote}, 0x14) 7m9.711576576s ago: executing program 39 (id=1059): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000280)=0x2) 7m6.741105167s ago: executing program 40 (id=1068): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_open_dev$video(&(0x7f0000001f80), 0x3, 0x20000) 7m3.176299336s ago: executing program 41 (id=1076): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x3, @remote, 0x6}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6m56.615014568s ago: executing program 42 (id=1095): r0 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000440)={0x0, 0x1b6c, 0x80, 0x1024002, 0x804d}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) 6m51.564168898s ago: executing program 43 (id=1101): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x2, 0x0, 0x1}, &(0x7f00000026c0)=[{}]) 6m3.139682546s ago: executing program 44 (id=1169): unshare(0x2c020400) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) 6m0.611897076s ago: executing program 45 (id=1182): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f000089f000/0x3000)=nil, 0x3000, 0x3000002, 0x28011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1d1c00, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/4097, 0xffffff99}], 0x2, 0x0, 0x0, 0x1b) 5m58.864580419s ago: executing program 46 (id=1191): socket$nl_audit(0x10, 0x3, 0x9) socket$inet6(0xa, 0x3, 0xff) socket(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 5m43.529160496s ago: executing program 47 (id=1200): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)="306663353a313232373a686385364cc293773d486170f855b7b6f03ca6312c", 0x1f) 4m51.892613357s ago: executing program 9 (id=1396): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) r0 = syz_io_uring_setup(0x7408, &(0x7f0000000400)={0x0, 0x2346, 0x100, 0x3, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x5, 0x0, &(0x7f0000003100)=[{&(0x7f0000000480)=""/92, 0x5c}], 0x1, 0x8, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 4m51.709053226s ago: executing program 9 (id=1398): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x29, 0x7, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4000000) r4 = socket$inet(0x2, 0x2, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f00000002c0)="2a00a0df167e6d22", 0xffdf}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f000001010e0000001c000000000000000000000008"], 0x40}, 0xee00) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000", @ANYRES16], 0x14}}, 0x200040c1) 4m50.388784758s ago: executing program 9 (id=1400): r0 = socket(0x40000000015, 0x5, 0x0) setns(0xc9, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x5, 0x7, 0x800077, 0x8, 0xfffffffbffffffff, 0x5c, 0x2000000000000, 0x1400000000000, 0xbe3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) mkdirat(r5, 0x0, 0x20) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r7 = socket$inet_icmp(0x2, 0x2, 0x1) recvmmsg(r7, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40002000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x95, 0x4, 0x9, 0x60044, r5, 0x6, '\x00', r4, r6, 0x0, 0x5, 0x4}, 0x50) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) 4m48.45095605s ago: executing program 9 (id=1405): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) inotify_rm_watch(0xffffffffffffffff, r5) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@loopback, @multicast2}, 0x50) syz_emit_ethernet(0xd6, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffffff0180c20000030800422100c8006500000811907864010100ac1414bb831f0664010100000000006401010100000000640101017f0000010a0101014441e2ac35d31644009733640101007fffffff440cbe00000000070000009e00004e244e21008090786200000100000000d8d1af53af925fe03adbce03e43e9ad1bf008d58e7fb0b37801b54d222bb019b78508923cb93f2ff7969b8141642a9f8d0d62e48efdad99017e341ead5030ff7fa999ef46bcd19a08fc1b8a7e84b94da381741d2e1fe785e728a5ce49b"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 4m43.638489399s ago: executing program 9 (id=1408): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x29, 0x7, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4000000) r4 = socket$inet(0x2, 0x2, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f00000002c0)="2a00a0df167e6d22", 0xffdf}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f000001010e0000001c000000000000000000000008"], 0x40}, 0xee00) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000", @ANYRES16], 0x14}}, 0x200040c1) 4m41.787479116s ago: executing program 9 (id=1412): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000480)=0x7, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f00000000c0)={0x0, 0x5, 0x2}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) sched_setparam(r1, &(0x7f0000000000)=0x1) 4m26.33872771s ago: executing program 48 (id=1412): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000480)=0x7, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f00000000c0)={0x0, 0x5, 0x2}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) sched_setparam(r1, &(0x7f0000000000)=0x1) 3m35.165851238s ago: executing program 7 (id=1612): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 3m34.801482096s ago: executing program 7 (id=1605): r0 = socket(0x40000000015, 0x5, 0x0) setns(0xc9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x5, 0x7, 0x800077, 0x8, 0xfffffffbffffffff, 0x5c, 0x2000000000000, 0x1400000000000, 0xbe3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) mkdirat(r1, 0x0, 0x20) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r3 = socket$inet_icmp(0x2, 0x2, 0x1) recvmmsg(r3, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40002000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x95, 0x4, 0x9, 0x60044, r1, 0x6, '\x00', 0x0, r2, 0x0, 0x5, 0x4}, 0x50) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) 3m34.635430533s ago: executing program 7 (id=1607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100060000000000002b00000008000300", @ANYRES32=r2], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 3m34.29268955s ago: executing program 7 (id=1609): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) inotify_rm_watch(0xffffffffffffffff, r5) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@loopback, @multicast2}, 0x50) syz_emit_ethernet(0xd6, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffffff0180c20000030800422100c8006500000811907864010100ac1414bb831f0664010100000000006401010100000000640101017f0000010a0101014441e2ac35d31644009733640101007fffffff440cbe00000000070000009e00004e244e21008090786200000100000000d8d1af53af925fe03adbce03e43e9ad1bf008d58e7fb0b37801b54d222bb019b78508923cb93f2ff7969b8141642a9f8d0d62e48efdad99017e341ead5030ff7fa999ef46bcd19a08fc1b8a7e84b94da381741d2e1fe785e728a5ce49b"], 0x0) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 3m32.101143574s ago: executing program 6 (id=1610): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x1, 0x8, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000002800038024000080100001800c0001000000e4ff0000000010000a800c"], 0x100}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4048044) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 3m32.053597456s ago: executing program 8 (id=1611): setns(0xc9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x84}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f00000000c0)={0x66}) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b007e0b"], 0x97) 3m31.795604648s ago: executing program 7 (id=1614): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f0000000440)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@nodelalloc}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chdir(&(0x7f0000000380)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x88) 3m31.554750799s ago: executing program 8 (id=1616): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) sendmmsg(r1, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000003c0)="a6", 0x1}], 0x1}}], 0x1, 0x200080c0) 3m31.354214539s ago: executing program 7 (id=1618): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv2(r0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/92, 0x5c}], 0x1, 0x3, 0x4, 0x1) 3m31.106203811s ago: executing program 8 (id=1619): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) io_setup(0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@bsdgroups}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x153) chdir(&(0x7f0000000240)='./bus\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, &(0x7f00000006c0), 0x0}, 0x20) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10a) getdents64(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) getdents64(r4, &(0x7f0000000180)=""/88, 0x58) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount(0x0, &(0x7f00000002c0)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) 3m28.17179559s ago: executing program 8 (id=1623): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x1000000010) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = semget$private(0x0, 0x6, 0x3b1) semop(r2, &(0x7f0000000000), 0x0) semctl$GETZCNT(r2, 0x0, 0xf, 0x0) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) tkill(r3, 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 3m27.728851081s ago: executing program 6 (id=1625): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04023c20"], 0x7) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 3m27.565393389s ago: executing program 8 (id=1626): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f0000000440)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@nodelalloc}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chdir(&(0x7f0000000380)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x88) 3m27.212415956s ago: executing program 8 (id=1629): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) r0 = syz_io_uring_setup(0x7408, &(0x7f0000000400)={0x0, 0x2346, 0x100, 0x3, 0x4e}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, 0x0, r2, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x5, 0x0, &(0x7f0000003100)=[{&(0x7f0000000480)=""/92, 0x5c}], 0x1, 0x8, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 3m27.069753702s ago: executing program 6 (id=1631): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) io_setup(0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@bsdgroups}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x153) chdir(&(0x7f0000000240)='./bus\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, &(0x7f00000006c0), 0x0}, 0x20) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10a) getdents64(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) getdents64(r4, &(0x7f0000000180)=""/88, 0x58) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount(0x0, &(0x7f00000002c0)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) 3m15.451006524s ago: executing program 49 (id=1618): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv2(r0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/92, 0x5c}], 0x1, 0x3, 0x4, 0x1) 3m15.408137456s ago: executing program 6 (id=1642): r0 = epoll_create1(0x0) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x4, 0x400) r2 = socket$netlink(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = syz_open_dev$vim2m(0x0, 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_fd={0x9, 0x1, 0x4, 0x800000, 0x5, {}, {0x3, 0x1, 0x9, 0x1c, 0xf, 0x0, "714401c6"}, 0x239e, 0x4, {0x0}, 0x1ff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$rds(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x80000010}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x70, 0x0, &(0x7f0000000500)=[@register_looper, @enter_looper, @release={0x40046306, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x40}, @flat=@handle={0x73682a85, 0x100, 0x3}}, 0x0}, 0x40}], 0x0, 0x0, &(0x7f0000000600)}) write(0xffffffffffffffff, &(0x7f00000002c0)='r', 0x1) 3m14.26956221s ago: executing program 6 (id=1637): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f0000000440)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@nodelalloc}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chdir(&(0x7f0000000380)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x88) 3m13.803428752s ago: executing program 6 (id=1639): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) 3m12.128187492s ago: executing program 50 (id=1629): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) r0 = syz_io_uring_setup(0x7408, &(0x7f0000000400)={0x0, 0x2346, 0x100, 0x3, 0x4e}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, 0x0, r2, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x5, 0x0, &(0x7f0000003100)=[{&(0x7f0000000480)=""/92, 0x5c}], 0x1, 0x8, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2m58.436715301s ago: executing program 51 (id=1639): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) 2m45.973541503s ago: executing program 0 (id=1682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r3, 0x6a98047402e98331, 0xa1}, 0x14}}, 0x40010) 2m41.113586534s ago: executing program 0 (id=1691): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x412, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) mount$fuseblk(&(0x7f0000000000), 0x0, &(0x7f0000000380), 0x0, &(0x7f00000006c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 2m40.719469262s ago: executing program 0 (id=1693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 2m39.197146705s ago: executing program 0 (id=1697): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100060000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000a0034000101010101010000080026006c090000080027"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 2m38.944107736s ago: executing program 0 (id=1699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r3, 0x6a98047402e98331, 0xa1}, 0x14}}, 0x40010) 2m34.23669203s ago: executing program 0 (id=1715): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000020603000000000000000000070000000c000780080012400000000d0500010006000000050005000200000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x2004c004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) 2m19.161933085s ago: executing program 52 (id=1715): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000020603000000000000000000070000000c000780080012400000000d0500010006000000050005000200000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x2004c004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) 1m37.220780646s ago: executing program 2 (id=1943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f00000000c0)={0x66}) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b007e0b"], 0x97) 1m36.565098907s ago: executing program 2 (id=1951): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) 1m36.300756889s ago: executing program 2 (id=1954): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x40000) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) mkdirat(r2, 0x0, 0x20) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r4 = socket$inet_icmp(0x2, 0x2, 0x1) recvmmsg(r4, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40002000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x95, 0x4, 0x9, 0x60044, r2, 0x6, '\x00', 0x0, r3, 0x0, 0x5, 0x4}, 0x50) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) 1m36.07682059s ago: executing program 2 (id=1958): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x80) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000180)='omfs\x00', 0x1010, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x58342, 0x0) 1m34.644848008s ago: executing program 2 (id=1966): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x40000) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) mkdirat(r2, 0x0, 0x20) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r4 = socket$inet_icmp(0x2, 0x2, 0x1) recvmmsg(r4, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40002000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x95, 0x4, 0x9, 0x60044, r2, 0x6, '\x00', 0x0, r3, 0x0, 0x5, 0x4}, 0x50) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) 1m33.359490409s ago: executing program 2 (id=1973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000140)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000200), 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x34, 0x3a, 0xff, @remote, @local, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x8, 0x6, 0xff, @local, @remote, [], '\x00P\x00P'}}}}}}}, 0x0) 1m32.658235872s ago: executing program 53 (id=1973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000140)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000200), 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x34, 0x3a, 0xff, @remote, @local, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x8, 0x6, 0xff, @local, @remote, [], '\x00P\x00P'}}}}}}}, 0x0) 7.862857877s ago: executing program 3 (id=2358): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 7.551680801s ago: executing program 3 (id=2361): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x153) chdir(&(0x7f0000000240)='./bus\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, &(0x7f00000006c0), 0x0}, 0x20) mount(0x0, &(0x7f00000002c0)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) 5.847687782s ago: executing program 3 (id=2365): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x90, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1, 0x282, &(0x7f0000000380)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 4.469530758s ago: executing program 5 (id=2369): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 4.196201811s ago: executing program 4 (id=2370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x662, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002001200ff19010005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000080), &(0x7f0000000340)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={r1, &(0x7f0000000300), &(0x7f0000000600)=""/86}, 0x20) 4.092961036s ago: executing program 3 (id=2372): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) io_setup(0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@bsdgroups}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x153) chdir(&(0x7f0000000240)='./bus\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000006c0), 0x0}, 0x20) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10a) getdents64(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) getdents64(r3, &(0x7f0000000180)=""/88, 0x58) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x31, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount(0x0, &(0x7f00000002c0)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) 3.690258525s ago: executing program 5 (id=2373): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x153) chdir(&(0x7f0000000240)='./bus\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, &(0x7f00000006c0), 0x0}, 0x20) mount(0x0, &(0x7f00000002c0)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) 3.683640235s ago: executing program 4 (id=2374): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x8000}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) 2.829928786s ago: executing program 1 (id=2375): r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 2.699589062s ago: executing program 4 (id=2376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x80) 2.586206287s ago: executing program 1 (id=2377): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000210001000000000004000000020100800c0001000200540000000000140003"], 0x114}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.414728145s ago: executing program 4 (id=2378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r4, 0x6a98047402e98331, 0xa1}, 0x14}}, 0x40010) 2.286446551s ago: executing program 1 (id=2379): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000000)='6', 0x32) fsopen(0x0, 0x0) 2.020241604s ago: executing program 5 (id=2380): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x2c, 0x10, 0x1, 0xfffffffd, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x1}, {0x4}, {0xe, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x10}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x403, &(0x7f0000000000)={0x0, 0x504}) 2.008303195s ago: executing program 3 (id=2381): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 1.770360135s ago: executing program 1 (id=2382): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, 0xffffffffffffffff, 0x100000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r4, 0x0, 0x8000000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) 1.664900821s ago: executing program 5 (id=2383): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x29, 0x7, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4000000) r4 = socket$inet(0x2, 0x2, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f00000002c0)="2a00a0df167e6d22", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f000001010e0000001c00"/44], 0x40}, 0xee00) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000", @ANYRES16], 0x14}}, 0x200040c1) 1.334781207s ago: executing program 4 (id=2384): syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) syz_open_dev$ublk_chdev(&(0x7f00000001c0), 0x0, 0x40000) 303.995255ms ago: executing program 5 (id=2385): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 293.598686ms ago: executing program 1 (id=2386): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) 170.066682ms ago: executing program 4 (id=2387): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200700, &(0x7f0000000680)={[{@data_err_ignore}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks}, {@nodelalloc}, {@debug}]}, 0x1, 0x488, &(0x7f00000001c0)="$eJzs3M9rHFUcAPDvTH60tT8Sa/3RWjVahKCYNGnVHrwoCiKKgh7qMW62JXTbSBPF1mJTEU+CFPQsHkX/Am8iiHoSvHryJIWivbT1FJnZmWaz3SSm2XSb7OcDu/vezNud982bH2/e200AXWsoe0oidkTEHxExUM8uLjBUf7l25Vzl+pVzlSTm59/8O8nLXb1yrlIWLd+3vcgMpxHpJ0mxkcVmzpw9MVGrVU8X+dHZk++Ozpw5+9T7JyeOV49XT40fOXL40Nizz4w/3ZY4s7iu7vtoev/el9+++Frl6MV3fvkuq++OYn1jHO0ylAX+z3yued3j7d5Yh+1sSCe9HawIq9ITEVlz9eXH/0D0xELjDcRLH3e0csC6yq5NW5ZePTcPbGJJdLoGQGeUF/rs/rd83Kauxx3h8vP1G6As7mvFo76mN9KiTF/T/W07DUXE0bl/v8oesU7jEAAAjT6rfPlq9vrh9W9fyfoeAxFRjgfdlz//mT/vKuZQBiPi7ojYHRH3RMSeiLi3KHt/RDywxvrc3P9JL63xI5eV9f+eK+a2Fvf/yt5fDPYUuZ15/H3Jsala9WDxNxmOvi1ZfmyZbfzw4u+fL7Wusf+XPbLtl33Boh6XepsG6CYnZifyTmkbXL4Qsa+3VfzJjZmAJCL2RsS+1X30rjIx9cQ3+5cqtHL8y2jDPNP811l4c1n8c9EUfylpnJ+cuml+cnRr1KoHR8u94ma//vbpG3miRZutKf42uFytvza0f3ORwaRxvnamvdu/xf0/7U/eyueZ+4tlH0zMzp4ei+hP8tPZ4uXjC+8t82X5bP8fPtD6+N9dvCeL/8GIyHbihyLi4Yh4pKj7oxHxWEQcWCbGn19YOf5IO9T+FyImW57/buz/Te2/+kTPiZ++X2r7/6/9D+ep4WJJfv5bQavqZKeL5gqu5W8HAAAAG0Wafwc+SUdupNN0ZKT+Hf49cVdam56ZffLY9HunJuvflR+MvrQc6RooxkNrU7XqWDJXfGJ9fHS8GCsux0sPFePGX/Rsy/MjlenaZIdjh263fYnjP/NXT6drB6yzbS2Xjvff9ooAHdA8j54uzp5/PZwMYLPye23oXisc/42/gwE2Gdd/6F6tjv/zTXlzAbA5uf5D93L8Q5dKf+x0DYAOWrj+u8uHLnJLv+vfWrz5lv4bQFNiW7RatbUNn7xhE2v6ZwvrkkgWlkTZXpHeARVbVSK9M6qxQRIdPjEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0yX8BAAD//10E4Wc=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000003c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x1, 0xffffffffffffffff, 0x0, 0x100000000000000}, {0xffffffff, 0x0, 0x9, 0xa, 0x0, 0x8ed4}]}) 132.903034ms ago: executing program 3 (id=2388): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x153) chdir(&(0x7f0000000240)='./bus\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, &(0x7f00000006c0), 0x0}, 0x20) mount(0x0, &(0x7f00000002c0)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) 90.733675ms ago: executing program 1 (id=2389): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) io_setup(0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@bsdgroups}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x153) chdir(&(0x7f0000000240)='./bus\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000006c0), 0x0}, 0x20) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10a) getdents64(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) getdents64(r3, &(0x7f0000000180)=""/88, 0x58) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x31, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount(0x0, &(0x7f00000002c0)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) 0s ago: executing program 5 (id=2390): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x29, 0x18, 0x0, 0x0) kernel console output (not intermixed with test programs): evsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.902135][T13320] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.913782][T13320] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.923220][T13320] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.329662][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.343716][T13445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.363259][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.464591][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.477224][T13445] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.496508][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.509356][T13613] loop2: detected capacity change from 0 to 512 [ 696.529453][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.536690][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.576543][T13613] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 696.596066][T13613] System zones: 1-12 [ 696.626656][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.633886][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.674292][T13613] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.1685: missing EA_INODE flag [ 696.736984][T13613] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1685: error while reading EA inode 12 err=-117 [ 696.755200][T13613] EXT4-fs (loop2): 1 orphan inode deleted [ 696.767249][T13613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.056562][T13633] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1687'. [ 699.182316][T13265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.342799][ T6009] hid-generic 0005:10CF:0002.0001: unknown main item tag 0x0 [ 699.386208][ T6009] hid-generic 0005:10CF:0002.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 699.461650][T13445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.654696][T13647] 9pnet_fd: Insufficient options for proto=fd [ 699.718750][T13445] veth0_vlan: entered promiscuous mode [ 699.811245][T13445] veth1_vlan: entered promiscuous mode [ 699.926164][T13445] veth0_macvtap: entered promiscuous mode [ 699.937089][T13445] veth1_macvtap: entered promiscuous mode [ 700.781246][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.873336][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.952474][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.013215][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.042325][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.068033][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.097158][T13445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.129670][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.162248][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.172128][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.206682][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.232229][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.254361][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.284005][T13445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.373339][T13445] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.397331][T13445] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.427573][T13445] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.451967][T13667] loop5: detected capacity change from 0 to 512 [ 701.477462][T13445] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.496116][T13667] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 701.512241][T13667] System zones: 1-12 [ 701.554924][T13667] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.1695: missing EA_INODE flag [ 701.624374][T13676] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1697'. [ 701.666768][T13667] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1695: error while reading EA inode 12 err=-117 [ 701.717150][T13667] EXT4-fs (loop5): 1 orphan inode deleted [ 701.774717][T13667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.717726][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.791958][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.061510][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.113533][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.178146][T13320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.280105][T13703] loop3: detected capacity change from 0 to 128 [ 704.415550][T13703] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 704.441378][T13715] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1707'. [ 704.497468][T13703] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 704.508646][T13716] ip_tables: iptables: counters copy to user failed while replacing table [ 704.862544][T13718] FAULT_INJECTION: forcing a failure. [ 704.862544][T13718] name fail_futex, interval 1, probability 0, space 0, times 0 [ 705.178983][T13718] CPU: 1 PID: 13718 Comm: syz.5.1708 Not tainted syzkaller #0 [ 705.186559][T13718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 705.196669][T13718] Call Trace: [ 705.199995][T13718] [ 705.202954][T13718] dump_stack_lvl+0x18c/0x250 [ 705.207697][T13718] ? show_regs_print_info+0x20/0x20 [ 705.212947][T13718] ? load_image+0x420/0x420 [ 705.217497][T13718] ? ____sys_sendmsg+0x779/0x980 [ 705.222485][T13718] ? __asan_memset+0x22/0x40 [ 705.227120][T13718] ? __sys_sendmsg_sock+0x30/0x30 [ 705.232232][T13718] should_fail_ex+0x394/0x4c0 [ 705.236970][T13718] get_futex_key+0x136/0x1030 [ 705.241686][T13718] ? rcu_is_watching+0x15/0xb0 [ 705.246499][T13718] ? ___sys_sendmsg+0x2b6/0x360 [ 705.251399][T13718] ? kfree+0x31/0x1a0 [ 705.255424][T13718] ? ___sys_sendmsg+0x2b6/0x360 [ 705.260322][T13718] ? futex_setup_timer+0xc0/0xc0 [ 705.265306][T13718] ? __sys_sendmsg+0x2b0/0x2b0 [ 705.270132][T13718] futex_wake+0x127/0x4f0 [ 705.274521][T13718] ? futex_wake_mark+0x150/0x150 [ 705.279504][T13718] ? __lock_acquire+0x7d80/0x7d80 [ 705.284671][T13718] do_futex+0x35d/0x3e0 [ 705.288874][T13718] ? __ia32_sys_get_robust_list+0x110/0x110 [ 705.294835][T13718] ? fput+0x154/0x1a0 [ 705.298870][T13718] __se_sys_futex+0x3a9/0x440 [ 705.303678][T13718] ? __x64_sys_futex+0xf0/0xf0 [ 705.308493][T13718] ? __x64_sys_futex+0x21/0xf0 [ 705.313313][T13718] do_syscall_64+0x55/0xb0 [ 705.317781][T13718] ? clear_bhb_loop+0x40/0x90 [ 705.322500][T13718] ? clear_bhb_loop+0x40/0x90 [ 705.327224][T13718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 705.333160][T13718] RIP: 0033:0x7fbfd4b9e159 [ 705.337619][T13718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.357282][T13718] RSP: 002b:00007fbfd5a4d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 705.365764][T13718] RAX: ffffffffffffffda RBX: 00007fbfd4e25fa8 RCX: 00007fbfd4b9e159 [ 705.373964][T13718] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbfd4e25fac [ 705.381989][T13718] RBP: 00007fbfd4e25fa0 R08: 0000000000746d7b R09: 0000000000000000 [ 705.390014][T13718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.398048][T13718] R13: 00007fbfd4e26038 R14: 00007ffd03185080 R15: 00007ffd03185168 [ 705.406094][T13718] [ 705.664977][T13445] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 706.339151][T13737] loop5: detected capacity change from 0 to 512 [ 706.388909][T13737] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 706.449767][T13737] System zones: 1-12 [ 706.485814][T13737] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.1713: missing EA_INODE flag [ 706.532245][T13737] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1713: error while reading EA inode 12 err=-117 [ 706.569838][T13737] EXT4-fs (loop5): 1 orphan inode deleted [ 706.590745][T13737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.325932][T13320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.647250][T13766] FAULT_INJECTION: forcing a failure. [ 709.647250][T13766] name failslab, interval 1, probability 0, space 0, times 0 [ 709.692071][T13766] CPU: 0 PID: 13766 Comm: syz.5.1718 Not tainted syzkaller #0 [ 709.699616][T13766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 709.709731][T13766] Call Trace: [ 709.713057][T13766] [ 709.716032][T13766] dump_stack_lvl+0x18c/0x250 [ 709.720801][T13766] ? show_regs_print_info+0x20/0x20 [ 709.726055][T13766] ? load_image+0x420/0x420 [ 709.730605][T13766] ? __lock_acquire+0x1336/0x7d80 [ 709.735719][T13766] should_fail_ex+0x394/0x4c0 [ 709.740469][T13766] should_failslab+0x9/0x20 [ 709.745039][T13766] slab_pre_alloc_hook+0x59/0x300 [ 709.750133][T13766] ? rds_message_alloc+0x47/0x1f0 [ 709.755213][T13766] ? rds_message_alloc+0x47/0x1f0 [ 709.760300][T13766] __kmem_cache_alloc_node+0x53/0x250 [ 709.765751][T13766] ? rds_message_alloc+0x47/0x1f0 [ 709.770844][T13766] __kmalloc+0xa7/0x240 [ 709.775070][T13766] rds_message_alloc+0x47/0x1f0 [ 709.779987][T13766] rds_send_probe+0x84/0x9c0 [ 709.784656][T13766] ? rds_send_pong+0x20/0x20 [ 709.789314][T13766] rds_recv_incoming+0x392/0x1470 [ 709.794390][T13766] ? rds_inc_put+0x160/0x160 [ 709.799101][T13766] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 709.805123][T13766] rds_loop_xmit+0xde/0x260 [ 709.809672][T13766] ? rds_loop_conn_path_shutdown+0x10/0x10 [ 709.815513][T13766] rds_send_xmit+0x1232/0x2590 [ 709.820344][T13766] ? rds_send_path_reset+0x370/0x370 [ 709.825663][T13766] ? rds_send_queue_rm+0x4d9/0x600 [ 709.830844][T13766] rds_sendmsg+0x17b1/0x1db0 [ 709.835479][T13766] ? rds_send_sndbuf_remove+0x230/0x230 [ 709.841060][T13766] ? aa_af_perm+0x330/0x330 [ 709.845596][T13766] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 709.852037][T13766] ? aa_sock_msg_perm+0x94/0x150 [ 709.857013][T13766] ? apparmor_socket_sendmsg+0x8e/0x330 [ 709.862588][T13766] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 709.867910][T13766] ? security_socket_sendmsg+0x80/0xa0 [ 709.873397][T13766] ? rds_send_sndbuf_remove+0x230/0x230 [ 709.878979][T13766] ____sys_sendmsg+0x61b/0x980 [ 709.883777][T13766] ? __asan_memset+0x22/0x40 [ 709.888402][T13766] ? __sys_sendmsg_sock+0x30/0x30 [ 709.893460][T13766] ? __import_iovec+0x3fa/0x850 [ 709.898361][T13766] ? import_iovec+0x73/0xa0 [ 709.902905][T13766] ___sys_sendmsg+0x2a6/0x360 [ 709.907620][T13766] ? __sys_sendmsg+0x2b0/0x2b0 [ 709.912449][T13766] ? __lock_acquire+0x7d80/0x7d80 [ 709.917518][T13766] __se_sys_sendmsg+0x1d0/0x2c0 [ 709.922401][T13766] ? __x64_sys_sendmsg+0x80/0x80 [ 709.927385][T13766] ? lockdep_hardirqs_on+0x98/0x150 [ 709.932620][T13766] do_syscall_64+0x55/0xb0 [ 709.937072][T13766] ? clear_bhb_loop+0x40/0x90 [ 709.941785][T13766] ? clear_bhb_loop+0x40/0x90 [ 709.946578][T13766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 709.952530][T13766] RIP: 0033:0x7fbfd4b9e159 [ 709.956971][T13766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.976611][T13766] RSP: 002b:00007fbfd5a4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.985062][T13766] RAX: ffffffffffffffda RBX: 00007fbfd4e25fa0 RCX: 00007fbfd4b9e159 [ 709.993095][T13766] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 710.001098][T13766] RBP: 00007fbfd4c3506b R08: 0000000000000000 R09: 0000000000000000 [ 710.009107][T13766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.017096][T13766] R13: 00007fbfd4e26038 R14: 00007fbfd4e25fa0 R15: 00007ffd03185168 [ 710.025106][T13766] [ 710.824005][T13788] loop2: detected capacity change from 0 to 512 [ 710.929088][T13788] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 710.940643][T13788] System zones: 1-12 [ 711.024441][T13788] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.1726: missing EA_INODE flag [ 711.147717][T13788] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1726: error while reading EA inode 12 err=-117 [ 711.200111][T13788] EXT4-fs (loop2): 1 orphan inode deleted [ 711.227506][T13788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 711.260959][T13794] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1727'. [ 711.971277][T13799] loop3: detected capacity change from 0 to 1024 [ 712.758072][T13682] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 713.519880][T13265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.760814][T13816] FAULT_INJECTION: forcing a failure. [ 713.760814][T13816] name fail_futex, interval 1, probability 0, space 0, times 0 [ 713.795638][T13816] CPU: 1 PID: 13816 Comm: syz.2.1729 Not tainted syzkaller #0 [ 713.803184][T13816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 713.813283][T13816] Call Trace: [ 713.816610][T13816] [ 713.819585][T13816] dump_stack_lvl+0x18c/0x250 [ 713.824322][T13816] ? show_regs_print_info+0x20/0x20 [ 713.829575][T13816] ? load_image+0x420/0x420 [ 713.834120][T13816] ? ____sys_sendmsg+0x779/0x980 [ 713.839153][T13816] ? __asan_memset+0x22/0x40 [ 713.843803][T13816] ? __sys_sendmsg_sock+0x30/0x30 [ 713.848888][T13816] should_fail_ex+0x394/0x4c0 [ 713.853637][T13816] get_futex_key+0x136/0x1030 [ 713.858380][T13816] ? rcu_is_watching+0x15/0xb0 [ 713.863219][T13816] ? ___sys_sendmsg+0x2b6/0x360 [ 713.868132][T13816] ? kfree+0x31/0x1a0 [ 713.872182][T13816] ? ___sys_sendmsg+0x2b6/0x360 [ 713.877095][T13816] ? futex_setup_timer+0xc0/0xc0 [ 713.882102][T13816] ? __sys_sendmsg+0x2b0/0x2b0 [ 713.886964][T13816] futex_wake+0x127/0x4f0 [ 713.891361][T13816] ? futex_wake_mark+0x150/0x150 [ 713.896349][T13816] ? __lock_acquire+0x7d80/0x7d80 [ 713.901460][T13816] do_futex+0x35d/0x3e0 [ 713.905677][T13816] ? __ia32_sys_get_robust_list+0x110/0x110 [ 713.911631][T13816] ? fput+0x154/0x1a0 [ 713.915674][T13816] __se_sys_futex+0x3a9/0x440 [ 713.920430][T13816] ? __x64_sys_futex+0xf0/0xf0 [ 713.925267][T13816] ? __x64_sys_futex+0x21/0xf0 [ 713.930103][T13816] do_syscall_64+0x55/0xb0 [ 713.934576][T13816] ? clear_bhb_loop+0x40/0x90 [ 713.939321][T13816] ? clear_bhb_loop+0x40/0x90 [ 713.944068][T13816] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 713.950018][T13816] RIP: 0033:0x7f6a95d9e159 [ 713.954486][T13816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.974146][T13816] RSP: 002b:00007f6a96cb00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 713.982738][T13816] RAX: ffffffffffffffda RBX: 00007f6a96025fa8 RCX: 00007f6a95d9e159 [ 713.990758][T13816] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6a96025fac [ 713.998805][T13816] RBP: 00007f6a96025fa0 R08: 0000000000746cd5 R09: 0000000000000000 [ 714.006846][T13816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.014874][T13816] R13: 00007f6a96026038 R14: 00007ffc0fb36a70 R15: 00007ffc0fb36b58 [ 714.022917][T13816] [ 714.375598][T13822] loop2: detected capacity change from 0 to 7 [ 714.414948][T13822] Dev loop2: unable to read RDB block 7 [ 714.438400][T13822] loop2: unable to read partition table [ 714.444449][T13822] loop2: partition table beyond EOD, truncated [ 714.475166][T13822] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 714.742639][T13831] loop2: detected capacity change from 0 to 512 [ 714.988581][T13831] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 715.005146][T13831] System zones: 1-12 [ 715.012754][T13831] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.1735: missing EA_INODE flag [ 715.073772][T13837] syz_tun: entered allmulticast mode [ 715.239001][T13831] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1735: error while reading EA inode 12 err=-117 [ 715.664672][T13831] EXT4-fs (loop2): 1 orphan inode deleted [ 715.671871][T13831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.397423][T13844] loop5: detected capacity change from 0 to 512 [ 716.653348][T13844] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 716.696316][T13844] System zones: 1-12 [ 716.700979][T13844] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.1738: missing EA_INODE flag [ 716.823908][T13844] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1738: error while reading EA inode 12 err=-117 [ 716.894160][T13844] EXT4-fs (loop5): 1 orphan inode deleted [ 716.941253][T13844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 718.368226][T13265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.967134][T13862] loop2: detected capacity change from 0 to 128 [ 719.053794][T13862] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 719.169044][T13862] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 720.117695][T13320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.298892][T13265] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 720.529323][T13872] FAULT_INJECTION: forcing a failure. [ 720.529323][T13872] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 720.586435][T13872] CPU: 0 PID: 13872 Comm: syz.5.1742 Not tainted syzkaller #0 [ 720.594071][T13872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 720.604170][T13872] Call Trace: [ 720.607492][T13872] [ 720.610468][T13872] dump_stack_lvl+0x18c/0x250 [ 720.615214][T13872] ? show_regs_print_info+0x20/0x20 [ 720.620474][T13872] ? load_image+0x420/0x420 [ 720.625034][T13872] ? __lock_acquire+0x7d80/0x7d80 [ 720.630114][T13872] should_fail_ex+0x394/0x4c0 [ 720.634856][T13872] prepare_alloc_pages+0x1e1/0x5b0 [ 720.640036][T13872] __alloc_pages+0x134/0x460 [ 720.644681][T13872] ? zone_statistics+0x170/0x170 [ 720.649671][T13872] ? alloc_pages+0x4e1/0x740 [ 720.654306][T13872] ? __init_waitqueue_head+0xa8/0x140 [ 720.659766][T13872] get_zeroed_page+0x17/0x40 [ 720.664438][T13872] rds_cong_from_addr+0x10f/0x360 [ 720.669518][T13872] ? rds_cong_get_maps+0x1f/0xb0 [ 720.674516][T13872] rds_cong_get_maps+0x28/0xb0 [ 720.679344][T13872] __rds_conn_create+0x987/0x1fe0 [ 720.684871][T13872] ? __rds_conn_create+0x2f3/0x1fe0 [ 720.690131][T13872] ? rds_conn_create+0x60/0x60 [ 720.694971][T13872] rds_conn_create_outgoing+0x43/0x60 [ 720.700413][T13872] rds_sendmsg+0xf98/0x1db0 [ 720.704999][T13872] ? rds_send_sndbuf_remove+0x230/0x230 [ 720.710602][T13872] ? aa_af_perm+0x330/0x330 [ 720.715166][T13872] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 720.721628][T13872] ? aa_sock_msg_perm+0x94/0x150 [ 720.726627][T13872] ? apparmor_socket_sendmsg+0x8e/0x330 [ 720.732239][T13872] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 720.737630][T13872] ? security_socket_sendmsg+0x80/0xa0 [ 720.743146][T13872] ? rds_send_sndbuf_remove+0x230/0x230 [ 720.748753][T13872] ____sys_sendmsg+0x61b/0x980 [ 720.753584][T13872] ? __asan_memset+0x22/0x40 [ 720.758240][T13872] ? __sys_sendmsg_sock+0x30/0x30 [ 720.763330][T13872] ? __import_iovec+0x3fa/0x850 [ 720.768248][T13872] ? import_iovec+0x73/0xa0 [ 720.772821][T13872] ___sys_sendmsg+0x2a6/0x360 [ 720.777555][T13872] ? __sys_sendmsg+0x2b0/0x2b0 [ 720.782424][T13872] __se_sys_sendmsg+0x1d0/0x2c0 [ 720.787358][T13872] ? __x64_sys_sendmsg+0x80/0x80 [ 720.792374][T13872] ? lockdep_hardirqs_on+0x98/0x150 [ 720.797628][T13872] do_syscall_64+0x55/0xb0 [ 720.802102][T13872] ? clear_bhb_loop+0x40/0x90 [ 720.806840][T13872] ? clear_bhb_loop+0x40/0x90 [ 720.811579][T13872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 720.817531][T13872] RIP: 0033:0x7fbfd4b9e159 [ 720.821995][T13872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.841660][T13872] RSP: 002b:00007fbfd5a4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 720.850129][T13872] RAX: ffffffffffffffda RBX: 00007fbfd4e25fa0 RCX: 00007fbfd4b9e159 [ 720.858161][T13872] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 720.866193][T13872] RBP: 00007fbfd4c3506b R08: 0000000000000000 R09: 0000000000000000 [ 720.874223][T13872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.882239][T13872] R13: 00007fbfd4e26038 R14: 00007fbfd4e25fa0 R15: 00007ffd03185168 [ 720.890272][T13872] [ 721.091124][T13878] loop2: detected capacity change from 0 to 1024 [ 722.704907][T13900] ieee802154 phy0 wpan0: encryption failed: -90 [ 722.931236][T11263] Bluetooth: hci0: command 0x0406 tx timeout [ 723.074419][T13905] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1751'. [ 723.196053][T13908] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1752'. [ 723.449032][T11263] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 723.479780][T11263] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 723.490213][T11263] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 723.497120][T13918] FAULT_INJECTION: forcing a failure. [ 723.497120][T13918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 723.531699][T13918] CPU: 1 PID: 13918 Comm: syz.5.1754 Not tainted syzkaller #0 [ 723.539248][T13918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 723.549349][T13918] Call Trace: [ 723.552667][T13918] [ 723.555631][T13918] dump_stack_lvl+0x18c/0x250 [ 723.560364][T13918] ? show_regs_print_info+0x20/0x20 [ 723.565609][T13918] ? load_image+0x420/0x420 [ 723.570158][T13918] ? __might_fault+0xaa/0x120 [ 723.574877][T13918] ? __lock_acquire+0x7d80/0x7d80 [ 723.579976][T13918] ? __kasan_slab_alloc+0x6c/0x80 [ 723.585079][T13918] should_fail_ex+0x394/0x4c0 [ 723.589806][T13918] strncpy_from_user+0x36/0x2f0 [ 723.594704][T13918] getname_flags+0xf6/0x500 [ 723.599268][T13918] __x64_sys_mkdirat+0x7c/0xa0 [ 723.604086][T13918] do_syscall_64+0x55/0xb0 [ 723.608559][T13918] ? clear_bhb_loop+0x40/0x90 [ 723.613294][T13918] ? clear_bhb_loop+0x40/0x90 [ 723.618032][T13918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 723.623978][T13918] RIP: 0033:0x7fbfd4b9e159 [ 723.628439][T13918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.648089][T13918] RSP: 002b:00007fbfd5a4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 723.656575][T13918] RAX: ffffffffffffffda RBX: 00007fbfd4e25fa0 RCX: 00007fbfd4b9e159 [ 723.664685][T13918] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000005 [ 723.672696][T13918] RBP: 00007fbfd4c3506b R08: 0000000000000000 R09: 0000000000000000 [ 723.680727][T13918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.688741][T13918] R13: 00007fbfd4e26038 R14: 00007fbfd4e25fa0 R15: 00007ffd03185168 [ 723.696776][T13918] [ 723.720600][T11263] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 723.799919][T11263] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 723.843390][T11263] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 724.067728][T13924] loop2: detected capacity change from 0 to 512 [ 724.119846][T13924] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 724.150133][T13924] System zones: 1-12 [ 724.172080][T13924] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.1763: missing EA_INODE flag [ 724.212426][T13928] loop5: detected capacity change from 0 to 1024 [ 724.306355][T13924] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1763: error while reading EA inode 12 err=-117 [ 724.400526][T13924] EXT4-fs (loop2): 1 orphan inode deleted [ 724.407704][T13924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 725.318686][T13745] Set syz1 is full, maxelem 65536 reached [ 725.516433][T13913] chnl_net:caif_netlink_parms(): no params data found [ 726.044501][T13945] loop5: detected capacity change from 0 to 2048 [ 726.079764][T11263] Bluetooth: hci2: command tx timeout [ 726.211638][T13945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.298997][T13913] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.309301][T13945] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 726.359155][T13913] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.366462][T13913] bridge_slave_0: entered allmulticast mode [ 726.492082][T13913] bridge_slave_0: entered promiscuous mode [ 726.585707][T13913] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.650785][T13913] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.739146][T13913] bridge_slave_1: entered allmulticast mode [ 726.800463][T13913] bridge_slave_1: entered promiscuous mode [ 726.914225][T13320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.946980][T13265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.035838][T13913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.253147][T13913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.407648][T13961] ieee802154 phy0 wpan0: encryption failed: -90 [ 727.519624][ T32] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.905089][T13913] team0: Port device team_slave_0 added [ 728.162330][ T5780] Bluetooth: hci2: command tx timeout [ 728.174673][T13913] team0: Port device team_slave_1 added [ 728.346535][ T32] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.562751][ T32] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.578362][T13971] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1764'. [ 728.636802][T13913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.665836][T13913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.768720][T13913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.810354][T13913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.833227][T13913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.873417][T13913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.957449][ T32] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.198810][T13989] loop2: detected capacity change from 0 to 512 [ 729.212104][T13913] hsr_slave_0: entered promiscuous mode [ 729.257938][T13913] hsr_slave_1: entered promiscuous mode [ 729.267813][T13913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 729.278200][T13989] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 729.286265][T13989] System zones: 1-12 [ 729.298317][T13913] Cannot create hsr debugfs directory [ 729.406504][T13989] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.1768: missing EA_INODE flag [ 729.529413][T13989] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1768: error while reading EA inode 12 err=-117 [ 729.544444][T13989] EXT4-fs (loop2): 1 orphan inode deleted [ 729.564582][T13989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.588380][T13999] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1769'. [ 730.279422][ T5780] Bluetooth: hci2: command tx timeout [ 730.825477][ T32] tipc: Left network mode [ 731.871555][T13265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.294236][ T5780] Bluetooth: hci2: command tx timeout [ 733.164518][T14041] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1779'. [ 735.380301][T13913] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 735.418855][T13913] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 735.462103][T13913] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 735.497720][T13913] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 735.530781][ T32] hsr_slave_0: left promiscuous mode [ 735.541633][ T32] hsr_slave_1: left promiscuous mode [ 735.549783][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.560852][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.569666][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.577453][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.587739][ T32] bridge_slave_1: left allmulticast mode [ 735.593444][ T32] bridge_slave_1: left promiscuous mode [ 735.600310][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.610773][ T32] bridge_slave_0: left allmulticast mode [ 735.622237][ T32] bridge_slave_0: left promiscuous mode [ 735.628485][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.667606][ T32] veth1_macvtap: left promiscuous mode [ 735.673233][ T32] veth0_macvtap: left promiscuous mode [ 735.680881][ T32] veth1_vlan: left promiscuous mode [ 735.686406][ T32] veth0_vlan: left promiscuous mode [ 736.663162][ T32] team0 (unregistering): Port device team_slave_1 removed [ 736.721961][ T32] team0 (unregistering): Port device team_slave_0 removed [ 736.777234][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.831119][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.259807][ T32] bond0 (unregistering): Released all slaves [ 737.512164][T13913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.580953][T13913] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.608361][T10460] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.615564][T10460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.636295][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.643550][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.110323][T13913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.560778][T13913] veth0_vlan: entered promiscuous mode [ 738.580355][T13913] veth1_vlan: entered promiscuous mode [ 738.625008][T13913] veth0_macvtap: entered promiscuous mode [ 738.643601][T13913] veth1_macvtap: entered promiscuous mode [ 738.671984][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.685478][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.696449][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.707767][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.718734][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.729765][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.749532][T13913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.771302][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.785531][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.801339][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.818429][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.828672][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.847382][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.863432][T13913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.884467][T13913] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.894033][T13913] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.911534][T13913] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.920756][T13913] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.070944][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.095969][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.141195][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.156213][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.712838][T14124] syz_tun: entered allmulticast mode [ 742.243648][T14149] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1789'. [ 742.293300][T14151] ieee802154 phy0 wpan0: encryption failed: -90 [ 744.613709][T14200] loop3: detected capacity change from 0 to 1024 [ 744.668248][T14200] EXT4-fs: Ignoring removed bh option [ 744.724010][T14200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 744.864604][T14200] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 744.992693][T13445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.106629][T14217] loop4: detected capacity change from 0 to 256 [ 745.123634][T14217] FAT-fs (loop4): Unrecognized mount option "jhortncme=lower" or missing value [ 746.444136][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.468207][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.576197][T14232] loop5: detected capacity change from 0 to 512 [ 747.065584][T14232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.084079][T14232] ext4 filesystem being mounted at /44/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 747.336748][T13320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.093099][T14272] 9pnet_fd: Insufficient options for proto=fd [ 748.105663][T14273] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 749.530584][T14304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1841'. [ 749.602384][T14305] loop3: detected capacity change from 0 to 512 [ 749.641466][T14305] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 749.894698][T14305] EXT4-fs (loop3): 1 truncate cleaned up [ 749.918526][T14305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 750.541329][T14322] 9pnet_fd: Insufficient options for proto=fd [ 751.397555][T13445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.226687][T14361] bridge: RTM_NEWNEIGH with invalid ether address [ 752.292107][T14363] 9pnet_fd: Insufficient options for proto=fd [ 754.055682][T14392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1869'. [ 754.142398][T14396] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1872'. [ 754.431139][T14406] 9pnet_fd: Insufficient options for proto=fd [ 755.771295][T14429] tipc: Started in network mode [ 755.784607][T14429] tipc: Node identity ac1414aa, cluster identity 4711 [ 755.800328][T14429] tipc: New replicast peer: 172.20.20.187 [ 755.812727][T14429] tipc: Enabled bearer , priority 10 [ 755.847466][T14432] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1882'. [ 755.982352][T14436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1883'. [ 756.375685][T14453] 9pnet_fd: Insufficient options for proto=fd [ 756.972446][ T23] tipc: Node number set to 2886997162 [ 757.844101][T14477] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1894'. [ 757.916692][T14480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1895'. [ 758.122606][T14486] FAULT_INJECTION: forcing a failure. [ 758.122606][T14486] name failslab, interval 1, probability 0, space 0, times 0 [ 758.157557][T14486] CPU: 1 PID: 14486 Comm: syz.4.1898 Not tainted syzkaller #0 [ 758.165116][T14486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 758.175226][T14486] Call Trace: [ 758.178556][T14486] [ 758.181531][T14486] dump_stack_lvl+0x18c/0x250 [ 758.186316][T14486] ? show_regs_print_info+0x20/0x20 [ 758.191576][T14486] ? load_image+0x420/0x420 [ 758.196134][T14486] ? __might_sleep+0xe0/0xe0 [ 758.200780][T14486] ? __lock_acquire+0x7d80/0x7d80 [ 758.205863][T14486] should_fail_ex+0x394/0x4c0 [ 758.210604][T14486] should_failslab+0x9/0x20 [ 758.215167][T14486] slab_pre_alloc_hook+0x59/0x300 [ 758.220259][T14486] kmem_cache_alloc+0x5a/0x2c0 [ 758.225092][T14486] ? __kernfs_new_node+0xe5/0x7f0 [ 758.230192][T14486] __kernfs_new_node+0xe5/0x7f0 [ 758.235118][T14486] ? unwind_get_return_address+0x91/0xc0 [ 758.240805][T14486] ? kernfs_new_node+0x260/0x260 [ 758.245810][T14486] ? arch_stack_walk+0x160/0x190 [ 758.250815][T14486] ? stack_trace_save+0xaa/0x100 [ 758.255852][T14486] kernfs_new_node+0x14c/0x260 [ 758.260685][T14486] kernfs_create_dir_ns+0x44/0x120 [ 758.265861][T14486] sysfs_create_dir_ns+0x130/0x2a0 [ 758.271028][T14486] ? __lock_acquire+0x7d80/0x7d80 [ 758.276108][T14486] ? sysfs_warn_dup+0xa0/0xa0 [ 758.280845][T14486] ? do_raw_spin_unlock+0x121/0x230 [ 758.286113][T14486] kobject_add_internal+0x617/0xc90 [ 758.291372][T14486] kobject_add+0x164/0x240 [ 758.295856][T14486] ? kobject_init+0x1d0/0x1d0 [ 758.300600][T14486] ? kobject_init+0x7f/0x1d0 [ 758.305261][T14486] get_device_parent+0x316/0x390 [ 758.310278][T14486] device_add+0x2d4/0xc40 [ 758.314673][T14486] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 758.320202][T14486] wakeup_source_register+0x163/0x240 [ 758.325635][T14486] ep_insert+0xeb2/0x1990 [ 758.330044][T14486] ? ep_loop_check+0x1b0/0x1b0 [ 758.334965][T14486] ? __lock_acquire+0x7d80/0x7d80 [ 758.340074][T14486] do_epoll_ctl+0x8bc/0xf40 [ 758.344663][T14486] __x64_sys_epoll_ctl+0x166/0x1b0 [ 758.349853][T14486] ? ep_modify+0xa80/0xa80 [ 758.354346][T14486] ? lockdep_hardirqs_on+0x98/0x150 [ 758.359609][T14486] do_syscall_64+0x55/0xb0 [ 758.364095][T14486] ? clear_bhb_loop+0x40/0x90 [ 758.368829][T14486] ? clear_bhb_loop+0x40/0x90 [ 758.373567][T14486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 758.379543][T14486] RIP: 0033:0x7fc53679e159 [ 758.384017][T14486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.403681][T14486] RSP: 002b:00007fc53767d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 758.412171][T14486] RAX: ffffffffffffffda RBX: 00007fc536a25fa0 RCX: 00007fc53679e159 [ 758.420471][T14486] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004 [ 758.428492][T14486] RBP: 00007fc53683506b R08: 0000000000000000 R09: 0000000000000000 [ 758.436516][T14486] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 758.444537][T14486] R13: 00007fc536a26038 R14: 00007fc536a25fa0 R15: 00007fff7f26d208 [ 758.452589][T14486] [ 758.505026][T14486] kobject: kobject_add_internal failed for wakeup (error: -12 parent: virtual) [ 758.560745][T14493] 9pnet_fd: Insufficient options for proto=fd [ 758.662742][T14495] loop5: detected capacity change from 0 to 1024 [ 758.842936][T13504] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 759.948512][T14516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1905'. [ 760.035466][T14519] netlink: 'syz.5.1906': attribute type 72 has an invalid length. [ 760.493457][T14537] loop2: detected capacity change from 0 to 128 [ 760.517128][T14537] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 760.616543][T14537] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 760.978758][T14555] netlink: 'syz.4.1919': attribute type 72 has an invalid length. [ 761.573787][T14573] team0: No ports can be present during mode change [ 762.609792][T14588] netlink: 'syz.4.1929': attribute type 72 has an invalid length. [ 763.479218][T14616] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1941'. [ 763.917182][T14632] binder: 14631:14632 ioctl 4018620d 0 returned -22 [ 764.382225][T14645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1952'. [ 764.391454][T14647] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1953'. [ 764.705866][T14661] loop4: detected capacity change from 0 to 128 [ 764.781272][T14660] loop2: detected capacity change from 0 to 1024 [ 764.822715][T14660] EXT4-fs: Ignoring removed bh option [ 764.852614][T14660] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 764.990448][T14660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 765.112771][T14674] loop3: detected capacity change from 0 to 8192 [ 765.131600][T14674] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 765.906586][T14685] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1964'. [ 766.101032][T13265] EXT4-fs error (device loop2): ext4_read_inline_dir:1600: inode #12: block 7: comm syz-executor: path /74/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 766.115715][T13265] EXT4-fs (loop2): Remounting filesystem read-only [ 766.142720][T14687] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1965'. [ 766.584240][T13265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.716736][T10460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.779233][T10460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.032624][T10460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.137020][T14722] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1977'. [ 768.220516][T10460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.349816][T11263] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 769.360873][T11263] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 769.370692][T11263] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 769.392282][T11263] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 769.418894][T11263] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 769.432945][T11263] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 769.766107][T14768] random: crng reseeded on system resumption [ 770.186132][T14776] loop4: detected capacity change from 0 to 256 [ 770.763786][T14749] chnl_net:caif_netlink_parms(): no params data found [ 771.077138][T14800] loop3: detected capacity change from 0 to 512 [ 771.178004][T14800] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 771.186124][T14800] System zones: 1-12 [ 771.223962][T14800] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.1998: missing EA_INODE flag [ 771.278227][T14800] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1998: error while reading EA inode 12 err=-117 [ 771.293875][T14800] EXT4-fs (loop3): 1 orphan inode deleted [ 771.304401][T14800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.588207][T11263] Bluetooth: hci0: command tx timeout [ 771.781399][T13445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.995046][T10460] hsr_slave_0: left promiscuous mode [ 772.036121][T10460] hsr_slave_1: left promiscuous mode [ 772.037497][T10460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.037546][T10460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.038384][T10460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.038413][T10460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.040208][T10460] bridge_slave_1: left allmulticast mode [ 772.040231][T10460] bridge_slave_1: left promiscuous mode [ 772.040426][T10460] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.043320][T10460] bridge_slave_0: left allmulticast mode [ 772.043343][T10460] bridge_slave_0: left promiscuous mode [ 772.043534][T10460] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.166723][T10460] veth1_macvtap: left promiscuous mode [ 772.166814][T10460] veth0_macvtap: left promiscuous mode [ 772.167006][T10460] veth1_vlan: left promiscuous mode [ 772.168943][T10460] veth0_vlan: left promiscuous mode [ 773.125073][T14857] loop4: detected capacity change from 0 to 512 [ 773.159241][T14857] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 773.174174][T14857] System zones: 1-12 [ 773.221675][T14857] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.2009: missing EA_INODE flag [ 773.264988][T14863] loop3: detected capacity change from 0 to 512 [ 773.275714][T14857] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2009: error while reading EA inode 12 err=-117 [ 773.283712][T14863] EXT4-fs: Ignoring removed nobh option [ 773.325677][T14863] EXT4-fs (loop3): 1 truncate cleaned up [ 773.337517][T14857] EXT4-fs (loop4): 1 orphan inode deleted [ 773.373403][T14863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 773.396927][T14857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 773.626290][T11263] Bluetooth: hci0: command tx timeout [ 774.063380][T13913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.115256][ T28] audit: type=1800 audit(1791441455.190:10): pid=14863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2010" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 774.195125][ T28] audit: type=1800 audit(1791441455.210:11): pid=14867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2010" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 774.373793][T13445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.917303][T10460] team0 (unregistering): Port device team_slave_1 removed [ 775.020062][T10460] team0 (unregistering): Port device team_slave_0 removed [ 775.110328][T10460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.204513][T10460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.400729][T14903] loop3: detected capacity change from 0 to 512 [ 775.420874][T14903] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 775.431652][T14903] System zones: 1-12 [ 775.448195][T14903] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.2018: missing EA_INODE flag [ 775.462618][T14903] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2018: error while reading EA inode 12 err=-117 [ 775.487561][T14903] EXT4-fs (loop3): 1 orphan inode deleted [ 775.495585][T14903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.721922][T11263] Bluetooth: hci0: command tx timeout [ 775.937399][T10460] bond0 (unregistering): Released all slaves [ 776.048195][T14749] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.056072][T14749] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.063334][T14749] bridge_slave_0: entered allmulticast mode [ 776.079852][T14749] bridge_slave_0: entered promiscuous mode [ 776.089120][T14749] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.096602][T14749] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.104008][T14749] bridge_slave_1: entered allmulticast mode [ 776.111757][T14749] bridge_slave_1: entered promiscuous mode [ 776.216322][T14749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.342009][T14749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.373451][T13445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.471134][T14749] team0: Port device team_slave_0 added [ 776.495412][T14749] team0: Port device team_slave_1 added [ 776.582433][T14749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.611941][T14749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.700728][T14749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.749245][T14749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.771129][T14749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.848039][T14749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.985009][T14749] hsr_slave_0: entered promiscuous mode [ 777.016019][T14749] hsr_slave_1: entered promiscuous mode [ 777.289584][T14930] loop4: detected capacity change from 0 to 512 [ 777.401688][T14930] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 777.443253][T14930] System zones: 1-12 [ 777.447863][T14930] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.2027: missing EA_INODE flag [ 777.598746][T14932] syz_tun: entered allmulticast mode [ 777.617861][T14930] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2027: error while reading EA inode 12 err=-117 [ 777.648987][T14930] EXT4-fs (loop4): 1 orphan inode deleted [ 777.675102][T14930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 777.798079][T11263] Bluetooth: hci0: command tx timeout [ 777.917728][T14931] syz_tun: left allmulticast mode [ 778.278945][T13913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.290095][T14978] syz_tun: entered allmulticast mode [ 779.299004][T14749] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 779.337247][T14982] loop5: detected capacity change from 0 to 512 [ 779.353074][T14749] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 779.371882][T14982] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 779.385890][T14749] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 779.400596][T14982] System zones: 1-12 [ 779.416080][T14976] syz_tun: left allmulticast mode [ 779.422045][T14749] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 779.565786][T14982] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.2040: missing EA_INODE flag [ 779.593018][T14982] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2040: error while reading EA inode 12 err=-117 [ 779.612978][T14982] EXT4-fs (loop5): 1 orphan inode deleted [ 779.620368][T14982] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.977599][T14749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.061906][T13320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.093949][T14749] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.148404][T10460] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.155645][T10460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.199723][T10460] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.206960][T10460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.399643][T14749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 781.104383][T15027] loop5: detected capacity change from 0 to 512 [ 781.148219][T14749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.237560][T15027] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 781.265574][T15027] System zones: 1-12 [ 781.270828][T15027] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.2052: missing EA_INODE flag [ 781.284732][T15027] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2052: error while reading EA inode 12 err=-117 [ 781.299918][T15027] EXT4-fs (loop5): 1 orphan inode deleted [ 781.318583][T15027] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.372625][T14749] veth0_vlan: entered promiscuous mode [ 781.459081][T14749] veth1_vlan: entered promiscuous mode [ 781.693612][T14749] veth0_macvtap: entered promiscuous mode [ 781.704857][T14749] veth1_macvtap: entered promiscuous mode [ 781.712927][T13320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.763672][T14749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.806594][T14749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.841000][T14749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.879020][T14749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.898383][T14749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.898406][T14749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.922150][T14749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.927017][T14749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.927039][T14749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.927054][T14749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.927070][T14749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.927085][T14749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.927100][T14749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.928511][T14749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.971731][T14749] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.971831][T14749] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.971865][T14749] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.971897][T14749] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.214317][T15051] syz_tun: entered allmulticast mode [ 782.223487][T15050] syz_tun: left allmulticast mode [ 782.241509][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.241575][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.380041][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.380064][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.858405][T15066] loop1: detected capacity change from 0 to 512 [ 782.903129][T15066] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 782.953265][T15066] System zones: 1-12 [ 783.002825][T15066] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.2064: missing EA_INODE flag [ 783.092750][T15066] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2064: error while reading EA inode 12 err=-117 [ 783.149982][T15066] EXT4-fs (loop1): 1 orphan inode deleted [ 783.208420][T15066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.666331][T14749] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.103735][T15107] syz_tun: entered allmulticast mode [ 784.111685][T15106] syz_tun: left allmulticast mode [ 784.359456][T15112] loop3: detected capacity change from 0 to 512 [ 784.402302][T15112] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 784.491051][T15112] System zones: 1-12 [ 784.508341][T15112] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.2080: missing EA_INODE flag [ 784.508760][T15112] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2080: error while reading EA inode 12 err=-117 [ 784.509084][T15112] EXT4-fs (loop3): 1 orphan inode deleted [ 784.510447][T15112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.612910][T13445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.775053][T15114] loop4: detected capacity change from 0 to 8192 [ 784.836702][T15114] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 785.518230][T15146] loop3: detected capacity change from 0 to 512 [ 785.600589][T15146] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 785.608732][T15146] System zones: 1-12 [ 785.620243][T15146] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.2090: missing EA_INODE flag [ 785.641724][T15146] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2090: error while reading EA inode 12 err=-117 [ 785.665463][T15146] EXT4-fs (loop3): 1 orphan inode deleted [ 785.710969][T15146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.912647][T13445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.313822][T15165] loop1: detected capacity change from 0 to 256 [ 787.335255][T15182] loop5: detected capacity change from 0 to 512 [ 787.343209][T15181] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2102'. [ 787.417549][T15182] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 787.483444][T15182] System zones: 1-12 [ 787.528185][T15182] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.2103: missing EA_INODE flag [ 787.588470][T15182] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2103: error while reading EA inode 12 err=-117 [ 787.653175][T15182] EXT4-fs (loop5): 1 orphan inode deleted [ 787.695018][T15182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.905565][T13320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.965763][T15213] loop1: detected capacity change from 0 to 512 [ 789.014795][T15213] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 789.047520][T15213] System zones: 1-12 [ 789.058528][T15213] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.2112: missing EA_INODE flag [ 789.113521][T15213] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2112: error while reading EA inode 12 err=-117 [ 789.195903][T15213] EXT4-fs (loop1): 1 orphan inode deleted [ 789.230223][T15224] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2114'. [ 789.241157][T15213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.476975][T14749] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.490910][T15230] loop3: detected capacity change from 0 to 512 [ 789.543745][T15230] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 789.586212][T15230] System zones: 1-12 [ 789.598443][T15230] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.2117: missing EA_INODE flag [ 789.647611][T15235] 9pnet_fd: Insufficient options for proto=fd [ 789.699688][T15230] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2117: error while reading EA inode 12 err=-117 [ 789.769635][T15230] EXT4-fs (loop3): 1 orphan inode deleted [ 789.825219][T15230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.939484][T15252] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2125'. [ 791.165662][T15260] loop4: detected capacity change from 0 to 512 [ 791.260154][T15260] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.2126: corrupted in-inode xattr: invalid ea_ino [ 791.293177][T13445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.305647][T15260] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.2126: couldn't read orphan inode 15 (err -117) [ 791.332790][T15260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 791.513306][T13913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.677974][T15274] FAULT_INJECTION: forcing a failure. [ 791.677974][T15274] name failslab, interval 1, probability 0, space 0, times 0 [ 791.695401][T15274] CPU: 0 PID: 15274 Comm: syz.1.2132 Not tainted syzkaller #0 [ 791.702925][T15274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 791.713063][T15274] Call Trace: [ 791.716385][T15274] [ 791.719370][T15274] dump_stack_lvl+0x18c/0x250 [ 791.724103][T15274] ? show_regs_print_info+0x20/0x20 [ 791.729356][T15274] ? load_image+0x420/0x420 [ 791.733950][T15274] should_fail_ex+0x394/0x4c0 [ 791.738702][T15274] should_failslab+0x9/0x20 [ 791.743267][T15274] slab_pre_alloc_hook+0x59/0x300 [ 791.748356][T15274] ? rds_loop_conn_alloc+0x7a/0x260 [ 791.753613][T15274] __kmem_cache_alloc_node+0x53/0x250 [ 791.759064][T15274] ? rds_loop_conn_alloc+0x7a/0x260 [ 791.764308][T15274] kmalloc_trace+0x2a/0xe0 [ 791.768792][T15274] rds_loop_conn_alloc+0x7a/0x260 [ 791.773870][T15274] __rds_conn_create+0x15fa/0x1fe0 [ 791.779052][T15274] ? __rds_conn_create+0x2f3/0x1fe0 [ 791.784311][T15274] ? rds_conn_create+0x60/0x60 [ 791.789145][T15274] rds_conn_create_outgoing+0x43/0x60 [ 791.794609][T15274] rds_sendmsg+0xf98/0x1db0 [ 791.799187][T15274] ? rds_send_sndbuf_remove+0x230/0x230 [ 791.804788][T15274] ? aa_af_perm+0x330/0x330 [ 791.809371][T15274] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 791.815840][T15274] ? aa_sock_msg_perm+0x94/0x150 [ 791.820831][T15274] ? apparmor_socket_sendmsg+0x8e/0x330 [ 791.826427][T15274] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 791.831772][T15274] ? security_socket_sendmsg+0x80/0xa0 [ 791.837304][T15274] ? rds_send_sndbuf_remove+0x230/0x230 [ 791.842916][T15274] ____sys_sendmsg+0x61b/0x980 [ 791.847741][T15274] ? __asan_memset+0x22/0x40 [ 791.852392][T15274] ? __sys_sendmsg_sock+0x30/0x30 [ 791.857474][T15274] ? __import_iovec+0x3fa/0x850 [ 791.862398][T15274] ? import_iovec+0x73/0xa0 [ 791.866964][T15274] ___sys_sendmsg+0x2a6/0x360 [ 791.871706][T15274] ? __sys_sendmsg+0x2b0/0x2b0 [ 791.876595][T15274] __se_sys_sendmsg+0x1d0/0x2c0 [ 791.881504][T15274] ? __x64_sys_sendmsg+0x80/0x80 [ 791.886517][T15274] ? lockdep_hardirqs_on+0x98/0x150 [ 791.891775][T15274] do_syscall_64+0x55/0xb0 [ 791.896292][T15274] ? clear_bhb_loop+0x40/0x90 [ 791.901037][T15274] ? clear_bhb_loop+0x40/0x90 [ 791.905776][T15274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 791.911727][T15274] RIP: 0033:0x7efc51f9e159 [ 791.916246][T15274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.936018][T15274] RSP: 002b:00007efc52e56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 791.944483][T15274] RAX: ffffffffffffffda RBX: 00007efc52225fa0 RCX: 00007efc51f9e159 [ 791.952523][T15274] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 791.960555][T15274] RBP: 00007efc5203506b R08: 0000000000000000 R09: 0000000000000000 [ 791.968579][T15274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 791.976592][T15274] R13: 00007efc52226038 R14: 00007efc52225fa0 R15: 00007ffcd15515b8 [ 791.984636][T15274] [ 792.719944][T15283] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2134'. [ 792.745940][T15281] 9pnet_fd: Insufficient options for proto=fd [ 793.330781][T15293] loop3: detected capacity change from 0 to 512 [ 793.418970][T15293] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 793.445560][T15293] System zones: 1-12 [ 793.453310][T15293] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.2137: missing EA_INODE flag [ 793.468052][T15296] Bluetooth: MGMT ver 1.22 [ 793.495466][T15293] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2137: error while reading EA inode 12 err=-117 [ 793.548897][T15293] EXT4-fs (loop3): 1 orphan inode deleted [ 793.576982][T15293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 794.203552][T15314] FAULT_INJECTION: forcing a failure. [ 794.203552][T15314] name fail_futex, interval 1, probability 0, space 0, times 0 [ 794.257297][T15314] CPU: 0 PID: 15314 Comm: syz.5.2141 Not tainted syzkaller #0 [ 794.264841][T15314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 794.274948][T15314] Call Trace: [ 794.278272][T15314] [ 794.281245][T15314] dump_stack_lvl+0x18c/0x250 [ 794.285989][T15314] ? show_regs_print_info+0x20/0x20 [ 794.291245][T15314] ? load_image+0x420/0x420 [ 794.295797][T15314] ? ____sys_sendmsg+0x779/0x980 [ 794.300800][T15314] ? __asan_memset+0x22/0x40 [ 794.305453][T15314] ? __sys_sendmsg_sock+0x30/0x30 [ 794.310535][T15314] should_fail_ex+0x394/0x4c0 [ 794.315279][T15314] get_futex_key+0x136/0x1030 [ 794.320004][T15314] ? rcu_is_watching+0x15/0xb0 [ 794.324823][T15314] ? ___sys_sendmsg+0x2b6/0x360 [ 794.329723][T15314] ? kfree+0x31/0x1a0 [ 794.333767][T15314] ? ___sys_sendmsg+0x2b6/0x360 [ 794.338683][T15314] ? futex_setup_timer+0xc0/0xc0 [ 794.343672][T15314] ? __sys_sendmsg+0x2b0/0x2b0 [ 794.348500][T15314] futex_wake+0x127/0x4f0 [ 794.352889][T15314] ? futex_wake_mark+0x150/0x150 [ 794.357892][T15314] ? __lock_acquire+0x7d80/0x7d80 [ 794.362985][T15314] do_futex+0x35d/0x3e0 [ 794.367200][T15314] ? __ia32_sys_get_robust_list+0x110/0x110 [ 794.373140][T15314] ? fput+0x154/0x1a0 [ 794.377182][T15314] __se_sys_futex+0x3a9/0x440 [ 794.381914][T15314] ? __x64_sys_futex+0xf0/0xf0 [ 794.386736][T15314] ? __x64_sys_futex+0x21/0xf0 [ 794.391552][T15314] do_syscall_64+0x55/0xb0 [ 794.396027][T15314] ? clear_bhb_loop+0x40/0x90 [ 794.400769][T15314] ? clear_bhb_loop+0x40/0x90 [ 794.405519][T15314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 794.411488][T15314] RIP: 0033:0x7fbfd4b9e159 [ 794.415958][T15314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.435616][T15314] RSP: 002b:00007fbfd5a4d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 794.444089][T15314] RAX: ffffffffffffffda RBX: 00007fbfd4e25fa8 RCX: 00007fbfd4b9e159 [ 794.452115][T15314] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbfd4e25fac [ 794.460139][T15314] RBP: 00007fbfd4e25fa0 R08: 0000000000746c05 R09: 0000000000000000 [ 794.468169][T15314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.476200][T15314] R13: 00007fbfd4e26038 R14: 00007ffd03185080 R15: 00007ffd03185168 [ 794.484254][T15314] [ 794.583431][T11263] Bluetooth: hci4: command 0x0406 tx timeout [ 794.718392][T13445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.860591][T15326] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2144'. [ 795.384333][T15341] 9pnet_fd: Insufficient options for proto=fd [ 795.467746][T15346] loop1: detected capacity change from 0 to 512 [ 795.487183][T15345] FAULT_INJECTION: forcing a failure. [ 795.487183][T15345] name failslab, interval 1, probability 0, space 0, times 0 [ 795.535609][T15345] CPU: 1 PID: 15345 Comm: syz.5.2152 Not tainted syzkaller #0 [ 795.543162][T15345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 795.553267][T15345] Call Trace: [ 795.556590][T15345] [ 795.559557][T15345] dump_stack_lvl+0x18c/0x250 [ 795.564300][T15345] ? show_regs_print_info+0x20/0x20 [ 795.569557][T15345] ? load_image+0x420/0x420 [ 795.574123][T15345] should_fail_ex+0x394/0x4c0 [ 795.578863][T15345] should_failslab+0x9/0x20 [ 795.583422][T15345] slab_pre_alloc_hook+0x59/0x300 [ 795.588513][T15345] ? rds_loop_conn_alloc+0x7a/0x260 [ 795.593762][T15345] __kmem_cache_alloc_node+0x53/0x250 [ 795.599214][T15345] ? rds_loop_conn_alloc+0x7a/0x260 [ 795.604469][T15345] kmalloc_trace+0x2a/0xe0 [ 795.608945][T15345] rds_loop_conn_alloc+0x7a/0x260 [ 795.614018][T15345] __rds_conn_create+0x15fa/0x1fe0 [ 795.619195][T15345] ? __rds_conn_create+0x2f3/0x1fe0 [ 795.624459][T15345] ? rds_conn_create+0x60/0x60 [ 795.629287][T15345] rds_conn_create_outgoing+0x43/0x60 [ 795.634725][T15345] rds_sendmsg+0xf98/0x1db0 [ 795.639298][T15345] ? rds_send_sndbuf_remove+0x230/0x230 [ 795.644906][T15345] ? aa_af_perm+0x330/0x330 [ 795.649467][T15345] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 795.655928][T15345] ? aa_sock_msg_perm+0x94/0x150 [ 795.660920][T15345] ? apparmor_socket_sendmsg+0x8e/0x330 [ 795.666516][T15345] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 795.671856][T15345] ? security_socket_sendmsg+0x80/0xa0 [ 795.677365][T15345] ? rds_send_sndbuf_remove+0x230/0x230 [ 795.682973][T15345] ____sys_sendmsg+0x61b/0x980 [ 795.687800][T15345] ? __asan_memset+0x22/0x40 [ 795.692444][T15345] ? __sys_sendmsg_sock+0x30/0x30 [ 795.697516][T15345] ? __import_iovec+0x3fa/0x850 [ 795.702455][T15345] ? import_iovec+0x73/0xa0 [ 795.707019][T15345] ___sys_sendmsg+0x2a6/0x360 [ 795.711760][T15345] ? __sys_sendmsg+0x2b0/0x2b0 [ 795.716604][T15345] ? __lock_acquire+0x7d80/0x7d80 [ 795.721709][T15345] __se_sys_sendmsg+0x1d0/0x2c0 [ 795.726794][T15345] ? __x64_sys_sendmsg+0x80/0x80 [ 795.731797][T15345] ? lockdep_hardirqs_on+0x98/0x150 [ 795.737070][T15345] do_syscall_64+0x55/0xb0 [ 795.741545][T15345] ? clear_bhb_loop+0x40/0x90 [ 795.746277][T15345] ? clear_bhb_loop+0x40/0x90 [ 795.751029][T15345] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 795.756984][T15345] RIP: 0033:0x7fbfd4b9e159 [ 795.761442][T15345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.781098][T15345] RSP: 002b:00007fbfd5a4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 795.789559][T15345] RAX: ffffffffffffffda RBX: 00007fbfd4e25fa0 RCX: 00007fbfd4b9e159 [ 795.797575][T15345] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 795.805600][T15345] RBP: 00007fbfd4c3506b R08: 0000000000000000 R09: 0000000000000000 [ 795.813619][T15345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.821640][T15345] R13: 00007fbfd4e26038 R14: 00007fbfd4e25fa0 R15: 00007ffd03185168 [ 795.829682][T15345] [ 795.928858][T15346] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 796.097389][T15346] System zones: 1-12 [ 796.293562][T15346] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.2153: missing EA_INODE flag [ 796.404702][T15346] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2153: error while reading EA inode 12 err=-117 [ 796.487446][T15346] EXT4-fs (loop1): 1 orphan inode deleted [ 796.519735][T15346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 796.821508][T15360] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2156'. [ 797.081612][T15373] loop3: detected capacity change from 0 to 512 [ 797.127348][T15373] EXT4-fs: Ignoring removed oldalloc option [ 797.153402][T15373] EXT4-fs: Conflicting test_dummy_encryption options [ 797.502353][T14749] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.799150][T15392] FAULT_INJECTION: forcing a failure. [ 797.799150][T15392] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 797.863792][T15392] CPU: 0 PID: 15392 Comm: syz.3.2165 Not tainted syzkaller #0 [ 797.871339][T15392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 797.881443][T15392] Call Trace: [ 797.884778][T15392] [ 797.887752][T15392] dump_stack_lvl+0x18c/0x250 [ 797.892491][T15392] ? show_regs_print_info+0x20/0x20 [ 797.897830][T15392] ? load_image+0x420/0x420 [ 797.902395][T15392] ? __lock_acquire+0x7d80/0x7d80 [ 797.907491][T15392] ? rds_conn_create_outgoing+0x43/0x60 [ 797.913091][T15392] ? ____sys_sendmsg+0x61b/0x980 [ 797.918104][T15392] ? ___sys_sendmsg+0x2a6/0x360 [ 797.923006][T15392] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 797.928091][T15392] should_fail_ex+0x394/0x4c0 [ 797.932829][T15392] prepare_alloc_pages+0x1e1/0x5b0 [ 797.938001][T15392] __alloc_pages+0x134/0x460 [ 797.942665][T15392] ? zone_statistics+0x170/0x170 [ 797.947657][T15392] ? alloc_pages+0x4e1/0x740 [ 797.952315][T15392] ? __init_waitqueue_head+0xa8/0x140 [ 797.957744][T15392] get_zeroed_page+0x17/0x40 [ 797.962381][T15392] rds_cong_from_addr+0xd5/0x360 [ 797.967382][T15392] rds_cong_get_maps+0x53/0xb0 [ 797.972205][T15392] __rds_conn_create+0x987/0x1fe0 [ 797.977314][T15392] ? __rds_conn_create+0x2f3/0x1fe0 [ 797.982574][T15392] ? rds_conn_create+0x60/0x60 [ 797.987408][T15392] rds_conn_create_outgoing+0x43/0x60 [ 797.992905][T15392] rds_sendmsg+0xf98/0x1db0 [ 797.997489][T15392] ? rds_send_sndbuf_remove+0x230/0x230 [ 798.003127][T15392] ? aa_af_perm+0x330/0x330 [ 798.007700][T15392] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 798.014169][T15392] ? aa_sock_msg_perm+0x94/0x150 [ 798.019171][T15392] ? apparmor_socket_sendmsg+0x8e/0x330 [ 798.024766][T15392] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 798.030106][T15392] ? security_socket_sendmsg+0x80/0xa0 [ 798.035613][T15392] ? rds_send_sndbuf_remove+0x230/0x230 [ 798.041223][T15392] ____sys_sendmsg+0x61b/0x980 [ 798.046042][T15392] ? __asan_memset+0x22/0x40 [ 798.050687][T15392] ? __sys_sendmsg_sock+0x30/0x30 [ 798.055768][T15392] ? __import_iovec+0x3fa/0x850 [ 798.060699][T15392] ? import_iovec+0x73/0xa0 [ 798.065262][T15392] ___sys_sendmsg+0x2a6/0x360 [ 798.069997][T15392] ? __sys_sendmsg+0x2b0/0x2b0 [ 798.074837][T15392] ? __lock_acquire+0x7d80/0x7d80 [ 798.079943][T15392] __se_sys_sendmsg+0x1d0/0x2c0 [ 798.084851][T15392] ? __x64_sys_sendmsg+0x80/0x80 [ 798.089859][T15392] ? lockdep_hardirqs_on+0x98/0x150 [ 798.095119][T15392] do_syscall_64+0x55/0xb0 [ 798.099593][T15392] ? clear_bhb_loop+0x40/0x90 [ 798.104329][T15392] ? clear_bhb_loop+0x40/0x90 [ 798.109067][T15392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 798.115016][T15392] RIP: 0033:0x7fd19d39e159 [ 798.119506][T15392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.139166][T15392] RSP: 002b:00007fd19e181028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.147651][T15392] RAX: ffffffffffffffda RBX: 00007fd19d625fa0 RCX: 00007fd19d39e159 [ 798.155675][T15392] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 798.163700][T15392] RBP: 00007fd19d43506b R08: 0000000000000000 R09: 0000000000000000 [ 798.171733][T15392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.179762][T15392] R13: 00007fd19d626038 R14: 00007fd19d625fa0 R15: 00007ffef9fd4368 [ 798.187804][T15392] [ 798.982517][T15404] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2168'. [ 799.421149][T15418] loop3: detected capacity change from 0 to 512 [ 799.514583][T15418] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 799.657838][T15418] System zones: 1-12 [ 799.667502][T15418] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.2172: missing EA_INODE flag [ 799.716552][T15418] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2172: error while reading EA inode 12 err=-117 [ 799.790491][T15418] EXT4-fs (loop3): 1 orphan inode deleted [ 799.799662][T15418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.347982][T15446] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2178'. [ 800.848505][T13445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.390637][T15481] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2187'. [ 801.634310][T15495] loop3: detected capacity change from 0 to 512 [ 801.760579][T15495] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 801.771526][T15495] System zones: 1-12 [ 801.792125][T15495] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.2192: missing EA_INODE flag [ 801.867733][T15495] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2192: error while reading EA inode 12 err=-117 [ 801.910042][T15495] EXT4-fs (loop3): 1 orphan inode deleted [ 801.929498][T15495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 803.454563][T15526] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2201'. [ 803.475128][T13445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.674105][T15533] loop4: detected capacity change from 0 to 512 [ 803.717135][T15533] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 803.750716][T15533] System zones: 1-12 [ 803.790381][T15533] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.2204: missing EA_INODE flag [ 803.904877][T15533] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2204: error while reading EA inode 12 err=-117 [ 803.950502][T15533] EXT4-fs (loop4): 1 orphan inode deleted [ 803.957640][T15533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.259840][T15547] veth1_to_hsr: entered allmulticast mode [ 805.567966][T15560] loop5: detected capacity change from 0 to 512 [ 805.671545][T15560] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 805.715452][T15560] System zones: 1-12 [ 805.756870][T15560] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.2211: missing EA_INODE flag [ 805.869015][T15560] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2211: error while reading EA inode 12 err=-117 [ 805.956551][T15560] EXT4-fs (loop5): 1 orphan inode deleted [ 805.974861][T15567] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2213'. [ 805.976397][T15560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 806.625179][T13913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.705377][T15575] loop1: detected capacity change from 0 to 512 [ 806.787808][T15575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 806.834665][T15575] ext4 filesystem being mounted at /39/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 806.878183][T15575] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.2217: corrupted xattr block 33: overlapping e_value [ 806.982628][T14749] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.048697][T15581] loop3: detected capacity change from 0 to 4096 [ 807.056568][T15581] EXT4-fs: inline encryption not supported [ 807.065036][T13320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.173536][T15581] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 807.214239][T15581] EXT4-fs (loop3): Test dummy encryption mode enabled [ 807.246152][T15585] loop4: detected capacity change from 0 to 512 [ 807.257706][T15581] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 807.271028][T15581] System zones: 0-5 [ 807.296757][T15581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.310489][T15585] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 807.421858][T15585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.458788][T15585] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 807.861316][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.867713][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 807.893448][T13913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.947370][T15603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2223'. [ 807.957203][ T969] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 808.084138][T15607] loop4: detected capacity change from 0 to 512 [ 808.127879][ T969] usb 4-1: device descriptor read/64, error -71 [ 808.247247][T15607] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 808.293459][T15607] System zones: 1-12 [ 808.334191][T15607] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.2224: missing EA_INODE flag [ 808.388153][T15607] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2224: error while reading EA inode 12 err=-117 [ 808.414042][T15607] EXT4-fs (loop4): 1 orphan inode deleted [ 808.425459][T15607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.447715][ T969] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 808.644610][ T969] usb 4-1: device descriptor read/64, error -71 [ 808.861980][ T969] usb usb4-port1: attempt power cycle [ 809.880489][T15627] loop5: detected capacity change from 0 to 512 [ 809.930915][ T969] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 809.979776][T15627] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 809.998732][T13445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.032651][T15627] System zones: 1-12 [ 810.068736][T15627] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.2228: missing EA_INODE flag [ 810.154561][T15627] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2228: error while reading EA inode 12 err=-117 [ 810.206848][ T969] usb 4-1: device not accepting address 11, error -71 [ 810.258744][T15627] EXT4-fs (loop5): 1 orphan inode deleted [ 810.283491][T15627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.804905][T15636] loop1: detected capacity change from 0 to 256 [ 810.965294][T13504] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 811.135300][T13913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.313535][T15643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2233'. [ 811.602930][T13320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.761862][T15652] loop3: detected capacity change from 0 to 512 [ 811.840253][T15652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.926573][T15652] ext4 filesystem being mounted at /144/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 812.182638][T15652] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.2235: corrupted xattr block 33: overlapping e_value [ 812.964549][T15672] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2242'. [ 813.002935][T13445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.043605][T15674] loop1: detected capacity change from 0 to 512 [ 813.071103][T15674] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 813.122596][T15674] System zones: 1-12 [ 813.144700][T15674] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.2241: missing EA_INODE flag [ 813.170026][T15677] loop4: detected capacity change from 0 to 512 [ 813.213924][T15674] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2241: error while reading EA inode 12 err=-117 [ 813.256164][T15674] EXT4-fs (loop1): 1 orphan inode deleted [ 813.263439][T15674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.296637][T15677] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 813.317580][T15677] System zones: 1-12 [ 813.322467][T15677] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.2244: missing EA_INODE flag [ 813.434225][T15677] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2244: error while reading EA inode 12 err=-117 [ 813.540457][T15677] EXT4-fs (loop4): 1 orphan inode deleted [ 813.577322][T15677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.363104][T15693] FAULT_INJECTION: forcing a failure. [ 814.363104][T15693] name failslab, interval 1, probability 0, space 0, times 0 [ 814.441129][T15693] CPU: 1 PID: 15693 Comm: syz.3.2247 Not tainted syzkaller #0 [ 814.448678][T15693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 814.458803][T15693] Call Trace: [ 814.462128][T15693] [ 814.465098][T15693] dump_stack_lvl+0x18c/0x250 [ 814.469844][T15693] ? show_regs_print_info+0x20/0x20 [ 814.475094][T15693] ? load_image+0x420/0x420 [ 814.479651][T15693] ? __might_sleep+0xe0/0xe0 [ 814.484291][T15693] ? __lock_acquire+0x7d80/0x7d80 [ 814.489363][T15693] should_fail_ex+0x394/0x4c0 [ 814.494093][T15693] should_failslab+0x9/0x20 [ 814.498648][T15693] slab_pre_alloc_hook+0x59/0x300 [ 814.503725][T15693] ? __register_sysctl_table+0xa15/0x1210 [ 814.509490][T15693] ? __register_sysctl_table+0xa2c/0x1210 [ 814.515255][T15693] ? __register_sysctl_table+0xa2c/0x1210 [ 814.521037][T15693] __kmem_cache_alloc_node+0x53/0x250 [ 814.526458][T15693] ? __rwlock_init+0x150/0x150 [ 814.531277][T15693] ? __register_sysctl_table+0xa2c/0x1210 [ 814.537040][T15693] __kmalloc+0xa7/0x240 [ 814.541258][T15693] __register_sysctl_table+0xa2c/0x1210 [ 814.546859][T15693] setup_mq_sysctls+0x4da/0x570 [ 814.551773][T15693] copy_ipcs+0x327/0x500 [ 814.556074][T15693] create_new_namespaces+0x212/0x700 [ 814.561429][T15693] unshare_nsproxy_namespaces+0x11a/0x160 [ 814.567206][T15693] ksys_unshare+0x4fa/0x8f0 [ 814.571766][T15693] ? sighand_ctor+0x50/0x50 [ 814.576315][T15693] ? lock_chain_count+0x20/0x20 [ 814.581213][T15693] ? syscall_enter_from_user_mode+0x25/0x80 [ 814.587152][T15693] __x64_sys_unshare+0x38/0x40 [ 814.591969][T15693] do_syscall_64+0x55/0xb0 [ 814.596440][T15693] ? clear_bhb_loop+0x40/0x90 [ 814.601163][T15693] ? clear_bhb_loop+0x40/0x90 [ 814.605887][T15693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 814.611848][T15693] RIP: 0033:0x7fd19d39e159 [ 814.616310][T15693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.635981][T15693] RSP: 002b:00007fd19e181028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 814.644436][T15693] RAX: ffffffffffffffda RBX: 00007fd19d625fa0 RCX: 00007fd19d39e159 [ 814.652448][T15693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600 [ 814.660486][T15693] RBP: 00007fd19d43506b R08: 0000000000000000 R09: 0000000000000000 [ 814.668494][T15693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.676504][T15693] R13: 00007fd19d626038 R14: 00007fd19d625fa0 R15: 00007ffef9fd4368 [ 814.684531][T15693] [ 814.708184][T15696] loop5: detected capacity change from 0 to 128 [ 814.984572][T15693] sysctl could not get directory: /fs -12 [ 815.728480][T14749] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.781120][T13913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.933664][T15712] loop3: detected capacity change from 0 to 512 [ 816.055239][T15712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 816.069311][T15712] ext4 filesystem being mounted at /148/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 816.125263][T15719] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2253'. [ 816.135646][T15712] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.2254: corrupted xattr block 33: overlapping e_value [ 816.330730][T13445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.666788][T15726] FAULT_INJECTION: forcing a failure. [ 816.666788][T15726] name failslab, interval 1, probability 0, space 0, times 0 [ 816.703670][T15726] CPU: 0 PID: 15726 Comm: syz.1.2258 Not tainted syzkaller #0 [ 816.711213][T15726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 816.721322][T15726] Call Trace: [ 816.724651][T15726] [ 816.727623][T15726] dump_stack_lvl+0x18c/0x250 [ 816.732370][T15726] ? show_regs_print_info+0x20/0x20 [ 816.737627][T15726] ? load_image+0x420/0x420 [ 816.742186][T15726] ? __might_sleep+0xe0/0xe0 [ 816.746833][T15726] ? __lock_acquire+0x7d80/0x7d80 [ 816.751915][T15726] should_fail_ex+0x394/0x4c0 [ 816.756669][T15726] should_failslab+0x9/0x20 [ 816.761250][T15726] slab_pre_alloc_hook+0x59/0x300 [ 816.766344][T15726] ? call_usermodehelper_setup+0x8e/0x260 [ 816.772123][T15726] __kmem_cache_alloc_node+0x53/0x250 [ 816.777561][T15726] ? call_usermodehelper_setup+0x8e/0x260 [ 816.783336][T15726] kmalloc_trace+0x2a/0xe0 [ 816.787827][T15726] call_usermodehelper_setup+0x8e/0x260 [ 816.793429][T15726] ? __request_module+0x600/0x600 [ 816.798504][T15726] __request_module+0x3bb/0x600 [ 816.803401][T15726] ? module_enforce_rwx_sections+0x150/0x150 [ 816.809431][T15726] ? __lock_acquire+0x7d80/0x7d80 [ 816.814500][T15726] ? __virt_addr_valid+0x10c/0x380 [ 816.819659][T15726] get_fs_type+0x180/0x480 [ 816.824115][T15726] __se_sys_fsopen+0x86/0x2c0 [ 816.828833][T15726] do_syscall_64+0x55/0xb0 [ 816.833282][T15726] ? clear_bhb_loop+0x40/0x90 [ 816.837996][T15726] ? clear_bhb_loop+0x40/0x90 [ 816.842709][T15726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 816.848636][T15726] RIP: 0033:0x7efc51f9e159 [ 816.853076][T15726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.872813][T15726] RSP: 002b:00007efc52e56028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 816.881261][T15726] RAX: ffffffffffffffda RBX: 00007efc52225fa0 RCX: 00007efc51f9e159 [ 816.889306][T15726] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 816.897325][T15726] RBP: 00007efc5203506b R08: 0000000000000000 R09: 0000000000000000 [ 816.905334][T15726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 816.913355][T15726] R13: 00007efc52226038 R14: 00007efc52225fa0 R15: 00007ffcd15515b8 [ 816.921386][T15726] [ 817.050512][T15734] loop4: detected capacity change from 0 to 512 [ 817.101964][T15734] syz.4.2259: attempt to access beyond end of device [ 817.101964][T15734] loop4: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 817.158704][T15738] loop3: detected capacity change from 0 to 512 [ 817.165827][T15734] syz.4.2259: attempt to access beyond end of device [ 817.165827][T15734] loop4: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 817.221391][T15738] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 817.225518][ T28] audit: type=1800 audit(1791441498.322:12): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2259" name="file2" dev="loop4" ino=1048779 res=0 errno=0 [ 817.251225][T15738] System zones: 1-12 [ 817.261980][T15742] loop1: detected capacity change from 0 to 512 [ 817.285107][T15738] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.2260: missing EA_INODE flag [ 817.297539][T15738] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2260: error while reading EA inode 12 err=-117 [ 817.310534][T15738] EXT4-fs (loop3): 1 orphan inode deleted [ 817.318091][T15738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.426813][T15742] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 817.448673][T15742] System zones: 1-12 [ 817.487280][T15742] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.2262: missing EA_INODE flag [ 817.624585][T15742] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2262: error while reading EA inode 12 err=-117 [ 817.655909][T15742] EXT4-fs (loop1): 1 orphan inode deleted [ 817.928357][T15742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.165286][T13445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.417990][T14749] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.711916][T15772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2268'. [ 820.773070][T15776] loop4: detected capacity change from 0 to 8 [ 820.822084][T15776] unable to read fragment index table [ 821.048951][T15782] loop3: detected capacity change from 0 to 512 [ 821.128762][T15782] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 821.173768][T15782] System zones: 1-12 [ 821.444840][T15782] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.2274: missing EA_INODE flag [ 821.726659][T15782] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2274: error while reading EA inode 12 err=-117 [ 821.826665][T15782] EXT4-fs (loop3): 1 orphan inode deleted [ 821.864265][T15782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 821.948346][T15792] loop1: detected capacity change from 0 to 512 [ 822.044710][T15792] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 822.096358][T15792] System zones: 1-12 [ 822.156013][T15792] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.2276: missing EA_INODE flag [ 822.275263][T15792] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2276: error while reading EA inode 12 err=-117 [ 822.697779][T15792] EXT4-fs (loop1): 1 orphan inode deleted [ 822.805710][T15792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 824.340488][T13445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.519276][T15821] X25: received unknown 00 with LCI 000 [ 825.921253][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 825.965780][T14749] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.175671][T15851] loop4: detected capacity change from 0 to 512 [ 827.278513][T15851] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 827.320077][T15851] System zones: 1-12 [ 827.368493][T15851] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.2292: missing EA_INODE flag [ 827.423798][T15851] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2292: error while reading EA inode 12 err=-117 [ 827.456154][T15851] EXT4-fs (loop4): 1 orphan inode deleted [ 827.490662][T15851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.691226][T15866] X25: received unknown 00 with LCI 000 [ 828.324135][T15871] FAULT_INJECTION: forcing a failure. [ 828.324135][T15871] name failslab, interval 1, probability 0, space 0, times 0 [ 828.397872][T15871] CPU: 0 PID: 15871 Comm: syz.1.2297 Not tainted syzkaller #0 [ 828.405424][T15871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 828.415547][T15871] Call Trace: [ 828.418869][T15871] [ 828.421834][T15871] dump_stack_lvl+0x18c/0x250 [ 828.426608][T15871] ? show_regs_print_info+0x20/0x20 [ 828.431867][T15871] ? load_image+0x420/0x420 [ 828.436422][T15871] ? __might_sleep+0xe0/0xe0 [ 828.441092][T15871] ? __lock_acquire+0x7d80/0x7d80 [ 828.446178][T15871] should_fail_ex+0x394/0x4c0 [ 828.450929][T15871] should_failslab+0x9/0x20 [ 828.455497][T15871] slab_pre_alloc_hook+0x59/0x300 [ 828.460616][T15871] kmem_cache_alloc+0x5a/0x2c0 [ 828.465440][T15871] ? vm_area_dup+0x27/0x270 [ 828.470002][T15871] vm_area_dup+0x27/0x270 [ 828.474400][T15871] copy_mm+0x11a6/0x1e30 [ 828.478726][T15871] ? copy_signal+0x640/0x640 [ 828.483392][T15871] ? lockdep_init_map_type+0x9c/0x8e0 [ 828.488938][T15871] ? __init_rwsem+0x122/0x160 [ 828.493715][T15871] ? copy_signal+0x51f/0x640 [ 828.498364][T15871] copy_process+0x16c9/0x3da0 [ 828.503101][T15871] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 828.509049][T15871] ? copy_process+0x98e/0x3da0 [ 828.513890][T15871] ? __pidfd_prepare+0x140/0x140 [ 828.518880][T15871] ? wake_up_q+0xca/0x100 [ 828.523276][T15871] kernel_clone+0x24b/0x8a0 [ 828.527834][T15871] ? futex_wake_mark+0x150/0x150 [ 828.532826][T15871] ? create_io_thread+0x190/0x190 [ 828.537911][T15871] ? __mutex_lock+0x30d/0xc80 [ 828.542643][T15871] ? do_futex+0x35d/0x3e0 [ 828.547019][T15871] __x64_sys_clone+0x1b7/0x230 [ 828.551842][T15871] ? __ia32_sys_vfork+0x140/0x140 [ 828.556932][T15871] ? lock_chain_count+0x20/0x20 [ 828.561867][T15871] ? lockdep_hardirqs_on+0x98/0x150 [ 828.567120][T15871] do_syscall_64+0x55/0xb0 [ 828.571590][T15871] ? clear_bhb_loop+0x40/0x90 [ 828.576321][T15871] ? clear_bhb_loop+0x40/0x90 [ 828.581053][T15871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 828.587015][T15871] RIP: 0033:0x7efc51f9e159 [ 828.591473][T15871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.611211][T15871] RSP: 002b:00007efc52e55fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 828.619676][T15871] RAX: ffffffffffffffda RBX: 00007efc52225fa0 RCX: 00007efc51f9e159 [ 828.627686][T15871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 828.635693][T15871] RBP: 00007efc5203506b R08: 0000000000000000 R09: 0000000000000000 [ 828.643707][T15871] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 828.651714][T15871] R13: 00007efc52226038 R14: 00007efc52225fa0 R15: 00007ffcd15515b8 [ 828.659747][T15871] [ 830.000285][T13913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.086377][T15882] loop3: detected capacity change from 0 to 512 [ 830.177782][T15882] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 830.185885][T15882] System zones: 1-12 [ 830.230196][T15888] loop1: detected capacity change from 0 to 128 [ 830.315306][T15882] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.2299: missing EA_INODE flag [ 830.348167][T15892] 9pnet_fd: Insufficient options for proto=fd [ 830.401049][T15882] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2299: error while reading EA inode 12 err=-117 [ 830.501651][T15882] EXT4-fs (loop3): 1 orphan inode deleted [ 830.540602][T15882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.661632][T15915] X25: received unknown 00 with LCI 000 [ 832.851850][T15921] loop5: detected capacity change from 0 to 512 [ 833.048988][T15921] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 833.068551][T15921] System zones: 1-12 [ 833.106021][T15921] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.2308: missing EA_INODE flag [ 833.311699][T15921] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2308: error while reading EA inode 12 err=-117 [ 833.613279][T15921] EXT4-fs (loop5): 1 orphan inode deleted [ 833.683352][T15921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 834.620739][T13445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.314326][T15942] 9pnet_fd: Insufficient options for proto=fd [ 836.306115][T13320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.413637][T15967] loop4: detected capacity change from 0 to 512 [ 838.618309][T15967] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 838.676549][T15967] System zones: 1-12 [ 838.699336][T15967] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.2321: missing EA_INODE flag [ 838.882123][T15967] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2321: error while reading EA inode 12 err=-117 [ 839.163780][T15967] EXT4-fs (loop4): 1 orphan inode deleted [ 839.299576][T15967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 839.390049][T15981] loop1: detected capacity change from 0 to 512 [ 839.433932][T15983] 9pnet_fd: Insufficient options for proto=fd [ 839.511827][T15981] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 839.624999][T15981] System zones: 1-12 [ 839.629874][T15981] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.2325: missing EA_INODE flag [ 839.747711][T15981] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2325: error while reading EA inode 12 err=-117 [ 839.812565][T15981] EXT4-fs (loop1): 1 orphan inode deleted [ 839.844667][T15981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 843.301688][T13913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.312331][T14749] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.404680][T16035] FAULT_INJECTION: forcing a failure. [ 844.404680][T16035] name failslab, interval 1, probability 0, space 0, times 0 [ 844.748712][T16035] CPU: 0 PID: 16035 Comm: syz.3.2336 Not tainted syzkaller #0 [ 844.756262][T16035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 844.766359][T16035] Call Trace: [ 844.769676][T16035] [ 844.772646][T16035] dump_stack_lvl+0x18c/0x250 [ 844.777381][T16035] ? show_regs_print_info+0x20/0x20 [ 844.782629][T16035] ? load_image+0x420/0x420 [ 844.787188][T16035] ? __lock_acquire+0x7d80/0x7d80 [ 844.792262][T16035] ? asan.module_dtor+0x20/0x20 [ 844.797165][T16035] should_fail_ex+0x394/0x4c0 [ 844.801901][T16035] should_failslab+0x9/0x20 [ 844.806447][T16035] slab_pre_alloc_hook+0x59/0x300 [ 844.811515][T16035] ? lock_chain_count+0x20/0x20 [ 844.816404][T16035] ? sk_prot_alloc+0xe7/0x210 [ 844.821128][T16035] ? sk_prot_alloc+0xe7/0x210 [ 844.825853][T16035] __kmem_cache_alloc_node+0x53/0x250 [ 844.831300][T16035] ? sk_prot_alloc+0xe7/0x210 [ 844.836038][T16035] __kmalloc+0xa7/0x240 [ 844.840246][T16035] sk_prot_alloc+0xe7/0x210 [ 844.844788][T16035] ? sk_alloc+0x24/0x350 [ 844.849077][T16035] sk_alloc+0x3a/0x350 [ 844.853200][T16035] alg_create+0xa4/0x140 [ 844.857494][T16035] __sock_create+0x49e/0x940 [ 844.862134][T16035] __sys_socket+0xd7/0x1b0 [ 844.866594][T16035] __x64_sys_socket+0x7a/0x90 [ 844.871309][T16035] do_syscall_64+0x55/0xb0 [ 844.875774][T16035] ? clear_bhb_loop+0x40/0x90 [ 844.880498][T16035] ? clear_bhb_loop+0x40/0x90 [ 844.885229][T16035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 844.891167][T16035] RIP: 0033:0x7fd19d39e159 [ 844.895630][T16035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.915278][T16035] RSP: 002b:00007fd19e181028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 844.923734][T16035] RAX: ffffffffffffffda RBX: 00007fd19d625fa0 RCX: 00007fd19d39e159 [ 844.931745][T16035] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 844.939762][T16035] RBP: 00007fd19d43506b R08: 0000000000000000 R09: 0000000000000000 [ 844.947771][T16035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.956668][T16035] R13: 00007fd19d626038 R14: 00007fd19d625fa0 R15: 00007ffef9fd4368 [ 844.964714][T16035] [ 845.032551][T16038] 9pnet_fd: Insufficient options for proto=fd [ 845.940739][T16045] loop5: detected capacity change from 0 to 512 [ 845.963981][T16046] loop1: detected capacity change from 0 to 512 [ 846.020990][T16048] FAULT_INJECTION: forcing a failure. [ 846.020990][T16048] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 846.059649][T16045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 846.085130][T16046] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 846.120436][T16045] System zones: 1-12 [ 846.138883][T16046] System zones: 1-12 [ 846.162283][T16048] CPU: 0 PID: 16048 Comm: syz.3.2340 Not tainted syzkaller #0 [ 846.169839][T16048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 846.179935][T16048] Call Trace: [ 846.180079][T16048] [ 846.180090][T16048] dump_stack_lvl+0x18c/0x250 [ 846.180131][T16048] ? show_regs_print_info+0x20/0x20 [ 846.180160][T16048] ? load_image+0x420/0x420 [ 846.180191][T16048] ? __lock_acquire+0x7d80/0x7d80 [ 846.180233][T16048] should_fail_ex+0x394/0x4c0 [ 846.180270][T16048] prepare_alloc_pages+0x1e1/0x5b0 [ 846.180302][T16048] __alloc_pages+0x134/0x460 [ 846.180329][T16048] ? zone_statistics+0x170/0x170 [ 846.180370][T16048] __folio_alloc+0x10/0x20 [ 846.180392][T16048] vma_alloc_folio+0x474/0x8f0 [ 846.180437][T16048] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 846.180466][T16048] shmem_alloc_folio+0x1a9/0x2a0 [ 846.180497][T16048] ? folio_put+0xd0/0xd0 [ 846.180544][T16048] ? __vm_enough_memory+0x11a/0x370 [ 846.180580][T16048] ? shmem_inode_acct_block+0x324/0x460 [ 846.180610][T16048] shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 846.180642][T16048] ? put_swap_device+0x230/0x230 [ 846.180668][T16048] ? filemap_get_entry+0xce/0x3f0 [ 846.180695][T16048] ? xas_load+0x11d/0x140 [ 846.180721][T16048] ? filemap_get_entry+0xce/0x3f0 [ 846.180745][T16048] ? filemap_get_entry+0xce/0x3f0 [ 846.191706][T16048] ? filemap_get_entry+0x375/0x3f0 [ 846.197393][T16045] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.2339: missing EA_INODE flag [ 846.201432][T16048] ? __lock_acquire+0x1262/0x7d80 [ 846.201476][T16048] ? page_cache_prev_miss+0x390/0x390 [ 846.201518][T16048] shmem_get_folio_gfp+0xe1d/0x2b40 [ 846.201573][T16048] shmem_fault+0x1b8/0x820 [ 846.201611][T16048] ? zero_pipe_buf_get+0x10/0x10 [ 846.201639][T16048] ? handle_mm_fault+0xe6/0x4a50 [ 846.201664][T16048] ? __lock_acquire+0x7d80/0x7d80 [ 846.201696][T16048] __do_fault+0x13b/0x4d0 [ 846.292180][T16046] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.2338: missing EA_INODE flag [ 846.296530][T16048] ? handle_mm_fault+0x3929/0x4a50 [ 846.364292][T16048] ? handle_mm_fault+0xe6/0x4a50 [ 846.369292][T16048] handle_mm_fault+0x3945/0x4a50 [ 846.374290][T16048] ? handle_mm_fault+0xe6/0x4a50 [ 846.379821][T16048] ? numa_migrate_prep+0x350/0x350 [ 846.385001][T16048] ? lock_chain_count+0x20/0x20 [ 846.389924][T16048] ? futex_wake_mark+0x150/0x150 [ 846.394921][T16048] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 846.400261][T16048] do_user_addr_fault+0x736/0x12d0 [ 846.405469][T16048] exc_page_fault+0x64/0x100 [ 846.410109][T16048] asm_exc_page_fault+0x26/0x30 [ 846.415019][T16048] RIP: 0010:strnlen_user+0x8e/0x1c0 [ 846.419011][T16045] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2339: error while reading EA inode 12 err=-117 [ 846.420246][T16048] Code: e8 a0 20 fd 4c 89 f8 4c 01 f0 0f 88 24 01 00 00 4c 39 f0 0f 82 1b 01 00 00 48 89 1c 24 0f 01 cb 0f ae e8 4c 89 f0 48 83 e0 f8 <4c> 8b 28 45 89 f4 41 83 e4 07 42 8d 0c e5 00 00 00 00 48 c7 c0 ff [ 846.450153][T16046] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2338: error while reading EA inode 12 err=-117 [ 846.452104][T16048] RSP: 0018:ffffc900035d7e80 EFLAGS: 00050246 [ 846.470530][T16048] RAX: 0000000000000000 RBX: 0000000000001000 RCX: ffff88802a8f5a00 [ 846.478560][T16048] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000001000 [ 846.485443][T16045] EXT4-fs (loop5): 1 orphan inode deleted [ 846.486556][T16048] RBP: ffffc900035d7f48 R08: ffff88801a25c103 R09: 1ffff1100344b820 [ 846.500337][T16048] R10: dffffc0000000000 R11: ffffed100344b821 R12: 0000000000001000 [ 846.508386][T16048] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000001000 [ 846.516443][T16048] strndup_user+0x1f/0x150 [ 846.520930][T16048] __se_sys_fsopen+0x3d/0x2c0 [ 846.525677][T16048] do_syscall_64+0x55/0xb0 [ 846.530177][T16048] ? clear_bhb_loop+0x40/0x90 [ 846.534908][T16048] ? clear_bhb_loop+0x40/0x90 [ 846.539646][T16048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 846.542447][T16045] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 846.545572][T16048] RIP: 0033:0x7fd19d39e159 [ 846.562462][T16048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.582118][T16048] RSP: 002b:00007fd19e181028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 846.590594][T16048] RAX: ffffffffffffffda RBX: 00007fd19d625fa0 RCX: 00007fd19d39e159 [ 846.598619][T16048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 846.606642][T16048] RBP: 00007fd19d43506b R08: 0000000000000000 R09: 0000000000000000 [ 846.609286][T16046] EXT4-fs (loop1): 1 orphan inode deleted [ 846.614641][T16048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.628422][T16048] R13: 00007fd19d626038 R14: 00007fd19d625fa0 R15: 00007ffef9fd4368 [ 846.636459][T16048] [ 846.678303][T16046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 848.130699][T14749] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.283043][T13320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.566910][T16081] loop3: detected capacity change from 0 to 512 [ 849.771205][T16081] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 850.002835][T16081] System zones: 1-12 [ 850.171793][T16081] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.2350: missing EA_INODE flag [ 850.246877][T16081] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2350: error while reading EA inode 12 err=-117 [ 850.423618][T16081] EXT4-fs (loop3): 1 orphan inode deleted [ 850.476867][T16081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 850.866912][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 851.080080][T16096] FAULT_INJECTION: forcing a failure. [ 851.080080][T16096] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 851.100295][T16090] 9pnet_fd: Insufficient options for proto=fd [ 851.215346][T16096] CPU: 0 PID: 16096 Comm: syz.1.2352 Not tainted syzkaller #0 [ 851.222891][T16096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 851.233027][T16096] Call Trace: [ 851.236353][T16096] [ 851.239358][T16096] dump_stack_lvl+0x18c/0x250 [ 851.244108][T16096] ? show_regs_print_info+0x20/0x20 [ 851.249365][T16096] ? load_image+0x420/0x420 [ 851.253923][T16096] ? __lock_acquire+0x7d80/0x7d80 [ 851.259027][T16096] should_fail_ex+0x394/0x4c0 [ 851.263783][T16096] prepare_alloc_pages+0x1e1/0x5b0 [ 851.268962][T16096] __alloc_pages+0x134/0x460 [ 851.273605][T16096] ? zone_statistics+0x170/0x170 [ 851.278610][T16096] __folio_alloc+0x10/0x20 [ 851.283099][T16096] vma_alloc_folio+0x474/0x8f0 [ 851.287912][T16096] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 851.293772][T16096] shmem_alloc_folio+0x1a9/0x2a0 [ 851.298774][T16096] ? folio_put+0xd0/0xd0 [ 851.303097][T16096] ? __vm_enough_memory+0x11a/0x370 [ 851.308358][T16096] ? shmem_inode_acct_block+0x324/0x460 [ 851.313960][T16096] shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 851.319753][T16096] ? put_swap_device+0x230/0x230 [ 851.324748][T16096] ? filemap_get_entry+0xce/0x3f0 [ 851.329868][T16096] ? xas_load+0x11d/0x140 [ 851.334249][T16096] ? filemap_get_entry+0xce/0x3f0 [ 851.339320][T16096] ? filemap_get_entry+0xce/0x3f0 [ 851.344413][T16096] ? filemap_get_entry+0x375/0x3f0 [ 851.349577][T16096] ? __lock_acquire+0x1262/0x7d80 [ 851.354652][T16096] ? page_cache_prev_miss+0x390/0x390 [ 851.360096][T16096] shmem_get_folio_gfp+0xe1d/0x2b40 [ 851.365388][T16096] shmem_fault+0x1b8/0x820 [ 851.369869][T16096] ? zero_pipe_buf_get+0x10/0x10 [ 851.374864][T16096] ? handle_mm_fault+0xe6/0x4a50 [ 851.379847][T16096] ? __lock_acquire+0x7d80/0x7d80 [ 851.384926][T16096] __do_fault+0x13b/0x4d0 [ 851.389303][T16096] ? handle_mm_fault+0x3929/0x4a50 [ 851.394472][T16096] ? handle_mm_fault+0xe6/0x4a50 [ 851.399462][T16096] handle_mm_fault+0x3945/0x4a50 [ 851.404455][T16096] ? handle_mm_fault+0xe6/0x4a50 [ 851.409463][T16096] ? numa_migrate_prep+0x350/0x350 [ 851.414633][T16096] ? lock_chain_count+0x20/0x20 [ 851.419534][T16096] ? futex_wake_mark+0x150/0x150 [ 851.424548][T16096] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 851.429925][T16096] do_user_addr_fault+0x736/0x12d0 [ 851.435107][T16096] exc_page_fault+0x64/0x100 [ 851.439767][T16096] asm_exc_page_fault+0x26/0x30 [ 851.444681][T16096] RIP: 0010:strnlen_user+0x8e/0x1c0 [ 851.449946][T16096] Code: e8 a0 20 fd 4c 89 f8 4c 01 f0 0f 88 24 01 00 00 4c 39 f0 0f 82 1b 01 00 00 48 89 1c 24 0f 01 cb 0f ae e8 4c 89 f0 48 83 e0 f8 <4c> 8b 28 45 89 f4 41 83 e4 07 42 8d 0c e5 00 00 00 00 48 c7 c0 ff [ 851.469605][T16096] RSP: 0018:ffffc90003a4fe80 EFLAGS: 00050246 [ 851.475718][T16096] RAX: 0000000000000000 RBX: 0000000000001000 RCX: ffff88802a389e00 [ 851.483738][T16096] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000001000 [ 851.491753][T16096] RBP: ffffc90003a4ff48 R08: ffff88801a25c103 R09: 1ffff1100344b820 [ 851.499777][T16096] R10: dffffc0000000000 R11: ffffed100344b821 R12: 0000000000001000 [ 851.507796][T16096] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000001000 [ 851.515852][T16096] strndup_user+0x1f/0x150 [ 851.520339][T16096] __se_sys_fsopen+0x3d/0x2c0 [ 851.525072][T16096] do_syscall_64+0x55/0xb0 [ 851.529539][T16096] ? clear_bhb_loop+0x40/0x90 [ 851.534271][T16096] ? clear_bhb_loop+0x40/0x90 [ 851.539004][T16096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 851.545038][T16096] RIP: 0033:0x7efc51f9e159 [ 851.549498][T16096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.569147][T16096] RSP: 002b:00007efc52e56028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 851.577620][T16096] RAX: ffffffffffffffda RBX: 00007efc52225fa0 RCX: 00007efc51f9e159 [ 851.585649][T16096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 851.593671][T16096] RBP: 00007efc5203506b R08: 0000000000000000 R09: 0000000000000000 [ 851.601720][T16096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.609737][T16096] R13: 00007efc52226038 R14: 00007efc52225fa0 R15: 00007ffcd15515b8 [ 851.617788][T16096] [ 851.640471][T13445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.154927][T16128] loop1: detected capacity change from 0 to 512 [ 853.222113][T16131] loop3: detected capacity change from 0 to 512 [ 853.357619][T16128] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 853.366085][T16131] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 853.374165][T16131] System zones: 1-12 [ 853.385462][T16128] System zones: 1-12 [ 853.413211][T16128] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.2357: missing EA_INODE flag [ 853.442231][T16128] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2357: error while reading EA inode 12 err=-117 [ 853.547328][T16131] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.2361: missing EA_INODE flag [ 853.848860][T16128] EXT4-fs (loop1): 1 orphan inode deleted [ 853.882501][T16131] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2361: error while reading EA inode 12 err=-117 [ 854.000647][T16128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 854.026334][T16137] loop4: detected capacity change from 0 to 1024 [ 854.051925][T16131] EXT4-fs (loop3): 1 orphan inode deleted [ 854.106032][T16137] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 854.118416][T16131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 854.168553][T16137] JBD2: no valid journal superblock found [ 854.540571][T16137] EXT4-fs (loop4): Could not load journal inode [ 854.866986][T14749] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.878946][T13445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.971046][T16147] ip_tables: iptables: counters copy to user failed while replacing table [ 855.833316][T16162] loop3: detected capacity change from 0 to 256 [ 855.857307][T16164] FAULT_INJECTION: forcing a failure. [ 855.857307][T16164] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 855.944079][T16164] CPU: 1 PID: 16164 Comm: syz.1.2364 Not tainted syzkaller #0 [ 855.951641][T16164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 855.961745][T16164] Call Trace: [ 855.965065][T16164] [ 855.968042][T16164] dump_stack_lvl+0x18c/0x250 [ 855.972788][T16164] ? show_regs_print_info+0x20/0x20 [ 855.978060][T16164] ? load_image+0x420/0x420 [ 855.982667][T16164] ? __lock_acquire+0x7d80/0x7d80 [ 855.987770][T16164] should_fail_ex+0x394/0x4c0 [ 855.992518][T16164] prepare_alloc_pages+0x1e1/0x5b0 [ 855.998149][T16164] __alloc_pages+0x134/0x460 [ 856.002799][T16164] ? zone_statistics+0x170/0x170 [ 856.007803][T16164] __folio_alloc+0x10/0x20 [ 856.012266][T16164] vma_alloc_folio+0x474/0x8f0 [ 856.017080][T16164] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 856.022944][T16164] shmem_alloc_folio+0x1a9/0x2a0 [ 856.027949][T16164] ? folio_put+0xd0/0xd0 [ 856.032270][T16164] ? __vm_enough_memory+0x11a/0x370 [ 856.037541][T16164] ? shmem_inode_acct_block+0x324/0x460 [ 856.043150][T16164] shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 856.048931][T16164] ? put_swap_device+0x230/0x230 [ 856.053926][T16164] ? filemap_get_entry+0xce/0x3f0 [ 856.059011][T16164] ? xas_load+0x11d/0x140 [ 856.063403][T16164] ? filemap_get_entry+0xce/0x3f0 [ 856.068460][T16164] ? filemap_get_entry+0xce/0x3f0 [ 856.073518][T16164] ? filemap_get_entry+0x375/0x3f0 [ 856.078656][T16164] ? __lock_acquire+0x1262/0x7d80 [ 856.083717][T16164] ? page_cache_prev_miss+0x390/0x390 [ 856.089139][T16164] shmem_get_folio_gfp+0xe1d/0x2b40 [ 856.094404][T16164] shmem_fault+0x1b8/0x820 [ 856.098857][T16164] ? zero_pipe_buf_get+0x10/0x10 [ 856.103833][T16164] ? handle_mm_fault+0xe6/0x4a50 [ 856.108812][T16164] ? __lock_acquire+0x7d80/0x7d80 [ 856.113879][T16164] __do_fault+0x13b/0x4d0 [ 856.118241][T16164] ? handle_mm_fault+0x3929/0x4a50 [ 856.123395][T16164] ? handle_mm_fault+0xe6/0x4a50 [ 856.128364][T16164] handle_mm_fault+0x3945/0x4a50 [ 856.133343][T16164] ? handle_mm_fault+0xe6/0x4a50 [ 856.138327][T16164] ? numa_migrate_prep+0x350/0x350 [ 856.143473][T16164] ? lock_chain_count+0x20/0x20 [ 856.148356][T16164] ? futex_wake_mark+0x150/0x150 [ 856.153329][T16164] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 856.158653][T16164] do_user_addr_fault+0x736/0x12d0 [ 856.163817][T16164] exc_page_fault+0x64/0x100 [ 856.168443][T16164] asm_exc_page_fault+0x26/0x30 [ 856.173324][T16164] RIP: 0010:strnlen_user+0x8e/0x1c0 [ 856.178557][T16164] Code: e8 a0 20 fd 4c 89 f8 4c 01 f0 0f 88 24 01 00 00 4c 39 f0 0f 82 1b 01 00 00 48 89 1c 24 0f 01 cb 0f ae e8 4c 89 f0 48 83 e0 f8 <4c> 8b 28 45 89 f4 41 83 e4 07 42 8d 0c e5 00 00 00 00 48 c7 c0 ff [ 856.198195][T16164] RSP: 0018:ffffc900045ffe80 EFLAGS: 00050246 [ 856.204296][T16164] RAX: 0000000000000000 RBX: 0000000000001000 RCX: ffff888060cf0000 [ 856.212292][T16164] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000001000 [ 856.220302][T16164] RBP: ffffc900045fff48 R08: ffff88801a25c103 R09: 1ffff1100344b820 [ 856.228316][T16164] R10: dffffc0000000000 R11: ffffed100344b821 R12: 0000000000001000 [ 856.236331][T16164] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000001000 [ 856.244380][T16164] strndup_user+0x1f/0x150 [ 856.248851][T16164] __se_sys_fsopen+0x3d/0x2c0 [ 856.253570][T16164] do_syscall_64+0x55/0xb0 [ 856.258025][T16164] ? clear_bhb_loop+0x40/0x90 [ 856.262734][T16164] ? clear_bhb_loop+0x40/0x90 [ 856.267447][T16164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 856.273390][T16164] RIP: 0033:0x7efc51f9e159 [ 856.277827][T16164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.297465][T16164] RSP: 002b:00007efc52e56028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 856.305912][T16164] RAX: ffffffffffffffda RBX: 00007efc52225fa0 RCX: 00007efc51f9e159 [ 856.313908][T16164] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 856.321920][T16164] RBP: 00007efc5203506b R08: 0000000000000000 R09: 0000000000000000 [ 856.329912][T16164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 856.337903][T16164] R13: 00007efc52226038 R14: 00007efc52225fa0 R15: 00007ffcd15515b8 [ 856.345928][T16164] [ 856.999711][T16178] loop3: detected capacity change from 0 to 512 [ 857.281393][T16178] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 857.487763][T16178] System zones: 1-12 [ 857.579327][T16178] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.2372: missing EA_INODE flag [ 857.820385][T16178] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2372: error while reading EA inode 12 err=-117 [ 857.916308][T16178] EXT4-fs (loop3): 1 orphan inode deleted [ 857.928205][T16178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 858.265440][T16196] netlink: 'syz.1.2377': attribute type 1 has an invalid length. [ 858.284743][T16196] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2377'. [ 859.084438][T13445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.627976][T16235] loop4: detected capacity change from 0 to 512 [ 860.680314][T16235] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a026c018, mo2=0002] [ 860.730310][T16242] loop1: detected capacity change from 0 to 512 [ 860.771721][T16235] System zones: 1-12 [ 860.802744][T16235] ------------[ cut here ]------------ [ 860.809288][T16235] EA inode 11 i_nlink=0 [ 860.809658][T16235] WARNING: CPU: 1 PID: 16235 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x572/0x5d0 [ 860.825293][T16235] Modules linked in: [ 860.829239][T16235] CPU: 1 PID: 16235 Comm: syz.4.2387 Not tainted syzkaller #0 [ 860.836827][T16235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 860.846990][T16235] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 860.853726][T16235] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 91 f5 98 ff 49 8b 34 24 48 c7 c7 60 df de 8a 44 89 fa e8 5e 2d 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 d8 27 4a 08 [ 860.874052][T16235] RSP: 0018:ffffc90004a0f360 EFLAGS: 00010246 [ 860.880182][T16235] RAX: f5c8d16a000c3000 RBX: ffff8880742484a8 RCX: 0000000000080000 [ 860.888510][T16235] RDX: ffffc9000e09e000 RSI: 00000000000165be RDI: 00000000000165bf [ 860.896710][T16235] RBP: ffffc90004a0f450 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 860.904805][T16235] R10: dffffc0000000000 R11: ffffed10171e518b R12: ffff888074248300 [ 860.912876][T16235] R13: ffffc90004a0f3c0 R14: dffffc0000000000 R15: 0000000000000000 [ 860.921868][T16235] FS: 00007fc53767d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 860.930855][T16235] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 860.937938][T16235] CR2: 00007efc5204df3c CR3: 00000000238b3000 CR4: 00000000003506e0 [ 860.946163][T16235] Call Trace: [ 860.949494][T16235] [ 860.952550][T16235] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 860.958258][T16235] ? __ext4_journal_ensure_credits+0x30/0x450 [ 860.964479][T16235] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 860.970542][T16235] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 860.976306][T16235] ? __ext4_journal_ensure_credits+0x450/0x450 [ 860.982601][T16235] ext4_xattr_delete_inode+0xb3b/0xd00 [ 860.988144][T16235] ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0 [ 860.994356][T16235] ? __ext4_mark_inode_dirty+0x50d/0x720 [ 861.000063][T16235] ext4_evict_inode+0xa88/0xe70 [ 861.005065][T16235] ? evict+0x482/0x8a0 [ 861.009220][T16235] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 861.015248][T16235] ? do_raw_spin_unlock+0x121/0x230 [ 861.021398][T16235] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 861.027371][T16235] evict+0x4b7/0x8a0 [ 861.031556][T16235] ? __lock_acquire+0x7d80/0x7d80 [ 861.036646][T16235] ? proc_nr_inodes+0x230/0x230 [ 861.041596][T16235] ? do_raw_spin_unlock+0x121/0x230 [ 861.046861][T16235] ? _raw_spin_unlock+0x28/0x40 [ 861.051834][T16235] ext4_orphan_cleanup+0xdff/0x1650 [ 861.057091][T16235] ? ext4_orphan_file_block_trigger+0x440/0x440 [ 861.063442][T16235] ? ext4_orphan_del+0xc90/0xc90 [ 861.068445][T16235] ? ext4_register_li_request+0x182/0x930 [ 861.074313][T16235] ? errseq_check_and_advance+0x66/0x120 [ 861.080009][T16235] ext4_fill_super+0x5fb5/0x6870 [ 861.085068][T16235] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 861.091468][T16235] ? __might_sleep+0xe0/0xe0 [ 861.096123][T16235] ? read_lock_is_recursive+0x20/0x20 [ 861.101587][T16235] ? snprintf+0xe9/0x140 [ 861.105903][T16235] ? down_read_killable+0x340/0x340 [ 861.111157][T16235] ? setup_bdev_super+0x56b/0x660 [ 861.116318][T16235] get_tree_bdev+0x3e5/0x520 [ 861.121888][T16235] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 861.128194][T16235] ? setup_bdev_super+0x660/0x660 [ 861.133459][T16235] ? apparmor_capable+0x137/0x1a0 [ 861.138537][T16235] ? bpf_lsm_capable+0x9/0x10 [ 861.143309][T16235] ? security_capable+0x89/0xb0 [ 861.148222][T16235] vfs_get_tree+0x8c/0x280 [ 861.152747][T16235] do_new_mount+0x24a/0xa40 [ 861.157314][T16235] __se_sys_mount+0x2e7/0x3d0 [ 861.162108][T16235] ? __x64_sys_mount+0xc0/0xc0 [ 861.166902][T16235] ? lockdep_hardirqs_on+0x98/0x150 [ 861.172181][T16235] ? __x64_sys_mount+0x20/0xc0 [ 861.177005][T16235] do_syscall_64+0x55/0xb0 [ 861.181569][T16235] ? clear_bhb_loop+0x40/0x90 [ 861.186306][T16235] ? clear_bhb_loop+0x40/0x90 [ 861.191062][T16235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 861.197094][T16235] RIP: 0033:0x7fc53679f3ca [ 861.201630][T16235] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.222682][T16235] RSP: 002b:00007fc53767ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 861.231787][T16235] RAX: ffffffffffffffda RBX: 00007fc53767cee0 RCX: 00007fc53679f3ca [ 861.239836][T16235] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 00007fc53767cea0 [ 861.248295][T16235] RBP: 0000200000000180 R08: 00007fc53767cee0 R09: 0000000000200700 [ 861.256712][T16235] R10: 0000000000200700 R11: 0000000000000246 R12: 00002000000000c0 [ 861.265266][T16235] R13: 00007fc53767cea0 R14: 0000000000000488 R15: 0000200000000680 [ 861.273774][T16235] [ 861.276881][T16235] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 861.284186][T16235] CPU: 1 PID: 16235 Comm: syz.4.2387 Not tainted syzkaller #0 [ 861.291661][T16235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 861.301740][T16235] Call Trace: [ 861.305041][T16235] [ 861.307994][T16235] dump_stack_lvl+0x18c/0x250 [ 861.312717][T16235] ? show_regs_print_info+0x20/0x20 [ 861.317942][T16235] ? load_image+0x420/0x420 [ 861.322482][T16235] panic+0x2ca/0x720 [ 861.326418][T16235] ? bpf_jit_dump+0xd0/0xd0 [ 861.330961][T16235] __warn+0x2e0/0x470 [ 861.334965][T16235] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 861.340969][T16235] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 861.346972][T16235] report_bug+0x2be/0x4f0 [ 861.351340][T16235] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 861.357376][T16235] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 861.363391][T16235] ? ext4_xattr_inode_update_ref+0x574/0x5d0 [ 861.369418][T16235] handle_bug+0xcf/0x120 [ 861.373700][T16235] exc_invalid_op+0x1a/0x50 [ 861.378242][T16235] asm_exc_invalid_op+0x1a/0x20 [ 861.383123][T16235] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 861.389735][T16235] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 91 f5 98 ff 49 8b 34 24 48 c7 c7 60 df de 8a 44 89 fa e8 5e 2d 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 d8 27 4a 08 [ 861.409367][T16235] RSP: 0018:ffffc90004a0f360 EFLAGS: 00010246 [ 861.415464][T16235] RAX: f5c8d16a000c3000 RBX: ffff8880742484a8 RCX: 0000000000080000 [ 861.423481][T16235] RDX: ffffc9000e09e000 RSI: 00000000000165be RDI: 00000000000165bf [ 861.431499][T16235] RBP: ffffc90004a0f450 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 861.439518][T16235] R10: dffffc0000000000 R11: ffffed10171e518b R12: ffff888074248300 [ 861.447517][T16235] R13: ffffc90004a0f3c0 R14: dffffc0000000000 R15: 0000000000000000 [ 861.455530][T16235] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 861.461223][T16235] ? __ext4_journal_ensure_credits+0x30/0x450 [ 861.467323][T16235] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 861.473368][T16235] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 861.479058][T16235] ? __ext4_journal_ensure_credits+0x450/0x450 [ 861.485252][T16235] ext4_xattr_delete_inode+0xb3b/0xd00 [ 861.490758][T16235] ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0 [ 861.496870][T16235] ? __ext4_mark_inode_dirty+0x50d/0x720 [ 861.502551][T16235] ext4_evict_inode+0xa88/0xe70 [ 861.507442][T16235] ? evict+0x482/0x8a0 [ 861.511551][T16235] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 861.517494][T16235] ? do_raw_spin_unlock+0x121/0x230 [ 861.522728][T16235] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 861.528658][T16235] evict+0x4b7/0x8a0 [ 861.532609][T16235] ? __lock_acquire+0x7d80/0x7d80 [ 861.537674][T16235] ? proc_nr_inodes+0x230/0x230 [ 861.542568][T16235] ? do_raw_spin_unlock+0x121/0x230 [ 861.547814][T16235] ? _raw_spin_unlock+0x28/0x40 [ 861.552712][T16235] ext4_orphan_cleanup+0xdff/0x1650 [ 861.557962][T16235] ? ext4_orphan_file_block_trigger+0x440/0x440 [ 861.564242][T16235] ? ext4_orphan_del+0xc90/0xc90 [ 861.569202][T16235] ? ext4_register_li_request+0x182/0x930 [ 861.574944][T16235] ? errseq_check_and_advance+0x66/0x120 [ 861.580609][T16235] ext4_fill_super+0x5fb5/0x6870 [ 861.585604][T16235] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 861.591875][T16235] ? __might_sleep+0xe0/0xe0 [ 861.596500][T16235] ? read_lock_is_recursive+0x20/0x20 [ 861.601902][T16235] ? snprintf+0xe9/0x140 [ 861.606179][T16235] ? down_read_killable+0x340/0x340 [ 861.611404][T16235] ? setup_bdev_super+0x56b/0x660 [ 861.616465][T16235] get_tree_bdev+0x3e5/0x520 [ 861.621076][T16235] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 861.627362][T16235] ? setup_bdev_super+0x660/0x660 [ 861.632421][T16235] ? apparmor_capable+0x137/0x1a0 [ 861.637479][T16235] ? bpf_lsm_capable+0x9/0x10 [ 861.642175][T16235] ? security_capable+0x89/0xb0 [ 861.647049][T16235] vfs_get_tree+0x8c/0x280 [ 861.651500][T16235] do_new_mount+0x24a/0xa40 [ 861.656037][T16235] __se_sys_mount+0x2e7/0x3d0 [ 861.660760][T16235] ? __x64_sys_mount+0xc0/0xc0 [ 861.665547][T16235] ? lockdep_hardirqs_on+0x98/0x150 [ 861.670767][T16235] ? __x64_sys_mount+0x20/0xc0 [ 861.675556][T16235] do_syscall_64+0x55/0xb0 [ 861.680006][T16235] ? clear_bhb_loop+0x40/0x90 [ 861.684732][T16235] ? clear_bhb_loop+0x40/0x90 [ 861.689466][T16235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 861.695392][T16235] RIP: 0033:0x7fc53679f3ca [ 861.699859][T16235] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.719485][T16235] RSP: 002b:00007fc53767ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 861.727927][T16235] RAX: ffffffffffffffda RBX: 00007fc53767cee0 RCX: 00007fc53679f3ca [ 861.735933][T16235] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 00007fc53767cea0 [ 861.743950][T16235] RBP: 0000200000000180 R08: 00007fc53767cee0 R09: 0000000000200700 [ 861.751945][T16235] R10: 0000000000200700 R11: 0000000000000246 R12: 00002000000000c0 [ 861.759935][T16235] R13: 00007fc53767cea0 R14: 0000000000000488 R15: 0000200000000680 [ 861.767943][T16235] [ 861.771130][T16235] Kernel Offset: disabled [ 861.775561][T16235] Rebooting in 86400 seconds..