last executing test programs: 12m15.228287732s ago: executing program 32 (id=173): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x11, 0x1, 0x0, 0x40, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xc}, 0x8887, 0x10000, 0x8, 0x1, 0x80d, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r9, 0x545c, 0x200000000000000) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000640)=r0, 0x4) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x40) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xabca, 0x5, 0xa, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10m20.95965207s ago: executing program 33 (id=392): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="500100000202010100000000000000000a00000508000540000000802400038006000340000400000c00028005000100000000000c000280050001008400000006000740000400000800094000000004440002800c00028005000100110000001400018008000100ac1414bb050002"], 0x150}, 0x1, 0x0, 0x0, 0x400c080}, 0x40000) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r2, 0x13, 0x0, 0xea66d49, &(0x7f0000000240)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0]}, 0x40) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r6, 0xffffffffffffffff, 0x1e, 0x0, @val=@perf_event={0x400}}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 8m31.599168189s ago: executing program 4 (id=820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m31.237653042s ago: executing program 4 (id=832): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m30.977733403s ago: executing program 4 (id=842): open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9) socketpair$unix(0x1, 0x3, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f00000003c0)='./file1\x00', 0x0) 8m30.699296982s ago: executing program 4 (id=853): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2200054, &(0x7f00000101c0)={[{@dioread_lock}, {@nodelalloc}]}, 0x1, 0x236, &(0x7f0000010240)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8004, 0x0, 0x0, 0x19, 0xd, "ef35100000003852f7bda4ae6dddfbd1ee09e737e60edf110f5bcb050000004b78c6df701905b9aafab4afa38155a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000c700e6d602000000000000080000000001", [0xa, 0x1]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 8m30.508412006s ago: executing program 4 (id=856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 8m30.355007148s ago: executing program 4 (id=861): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$unix(0x1, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/154, 0x9a, 0xe4) 8m30.354713048s ago: executing program 34 (id=861): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$unix(0x1, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/154, 0x9a, 0xe4) 8m25.844794132s ago: executing program 6 (id=916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200088a1}, 0x20040004) 8m25.316556273s ago: executing program 6 (id=919): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r7, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b90", 0x17b, 0x805, 0x0, 0x0) 8m24.341246782s ago: executing program 6 (id=929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 8m24.319599519s ago: executing program 6 (id=931): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2200054, &(0x7f00000101c0)={[{@dioread_lock}, {@nodelalloc}]}, 0x1, 0x236, &(0x7f0000010240)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(0x0, 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8004, 0x0, 0x0, 0x19, 0xd, "ef35100000003852f7bda4ae6dddfbd1ee09e737e60edf110f5bcb050000004b78c6df701905b9aafab4afa38155a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000c700e6d602000000000000080000000001", [0xa, 0x1]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 8m24.146694567s ago: executing program 6 (id=933): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @empty, 0x2, 0x3}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0xa) fchdir(r8) open_by_handle_at(r7, &(0x7f0000000180)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x6b8, 0x22281a3c, 0x1b, 0x3, 0x9615}}, 0x400002) r9 = openat$dir(0xffffffffffffff9c, 0x0, 0x188000, 0x85) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r8) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r10, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xfe68}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x4010) getdents64(r9, 0x0, 0x4f) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 8m24.028646475s ago: executing program 6 (id=936): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 8m24.00359884s ago: executing program 35 (id=936): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 8m21.317815262s ago: executing program 7 (id=984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 8m21.269975633s ago: executing program 7 (id=985): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 8m20.287239261s ago: executing program 7 (id=992): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0020407d6b0000de00000014000200040000000000000000000000000040001400030076657468315f766c616e00000000000008"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 8m20.203997036s ago: executing program 7 (id=994): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2200054, &(0x7f00000101c0)={[{@dioread_lock}, {@nodelalloc}]}, 0x1, 0x236, &(0x7f0000010240)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8004, 0x0, 0x0, 0x19, 0xd, "ef35100000003852f7bda4ae6dddfbd1ee09e737e60edf110f5bcb050000004b78c6df701905b9aafab4afa38155a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000c700e6d602000000000000080000000001", [0xa, 0x1]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 8m18.992952861s ago: executing program 7 (id=1004): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x16, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x62000000) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x401, 0x6, 0xfffffff9, 0x9, 0x6]}, &(0x7f0000000040)=0x54) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) sync() sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x0) 8m17.019380175s ago: executing program 7 (id=1015): syz_open_procfs(0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0xff07, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 8m17.018722965s ago: executing program 36 (id=1015): syz_open_procfs(0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0xff07, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 7m53.651387471s ago: executing program 8 (id=1316): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$netlink(r0, &(0x7f0000005d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c4}, 0x0) 7m53.526197218s ago: executing program 8 (id=1322): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 7m53.518057296s ago: executing program 8 (id=1323): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) recvfrom$inet(r2, 0x0, 0x0, 0x720, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x578410ed) 7m52.637553773s ago: executing program 8 (id=1339): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2200054, &(0x7f00000101c0)={[{@dioread_lock}, {@nodelalloc}]}, 0x1, 0x236, &(0x7f0000010240)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8004, 0x0, 0x0, 0x19, 0xd, "ef35100000003852f7bda4ae6dddfbd1ee09e737e60edf110f5bcb050000004b78c6df701905b9aafab4afa38155a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000c700e6d602000000000000080000000001", [0xa, 0x1]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 7m52.364770842s ago: executing program 8 (id=1349): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 7m52.147278612s ago: executing program 8 (id=1362): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4, @private=0xa010102}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000200)="cb57afecd191305850fa4686c0d56d353c6f80af983858e1db9a4c300e7d5e669214971cdcda09f61e0f21f715ed711d551b05581b78709d28e63d79c3d3f8c56407c47e137ba6", 0x47}, {&(0x7f0000000680)="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", 0x53e}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c"], 0x10b8}, 0x20000004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 7m52.08093369s ago: executing program 37 (id=1362): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4, @private=0xa010102}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000200)="cb57afecd191305850fa4686c0d56d353c6f80af983858e1db9a4c300e7d5e669214971cdcda09f61e0f21f715ed711d551b05581b78709d28e63d79c3d3f8c56407c47e137ba6", 0x47}, {&(0x7f0000000680)="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", 0x53e}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c"], 0x10b8}, 0x20000004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1m2.483822208s ago: executing program 1 (id=5293): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200305b0100140003006e657464657673696d300000000000000c00168008000180"], 0x5c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) (fail_nth: 2) 1m2.363728355s ago: executing program 1 (id=5294): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x10078, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x20000003, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xa}, 0x18) 1m2.258811236s ago: executing program 1 (id=5296): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x9, 0x1) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000080)=0x1, 0xd, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x62000000) openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x20, 0x22}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 1m1.456403717s ago: executing program 1 (id=5304): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1f8, &(0x7f0000000580)="$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") r0 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) ptrace(0x4208, r0) ptrace$getsig(0x4202, r0, 0x16, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xa, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @ldst={0x3, 0x2, 0x3, 0x7, 0x4, 0x80, 0xffffffffffffffff}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10}, @alu={0x4, 0x0, 0xd, 0x3, 0xa, 0xffffffffffffffc0, 0x10}, @exit]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x84, &(0x7f00000003c0)=""/132, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x2, 0x80, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x5, 0x3, 0x2, 0x7}], 0x10, 0xffff}, 0x94) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x40000048, 0x3a, '\\@', 0x3a, '.[', 0x3a, './file0'}, 0x2b) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getpeername(r6, &(0x7f00000007c0)=@nl=@proc, &(0x7f0000000840)=0x80) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r5, @ANYBLOB="001a8000080000003800f1a9"], 0x3c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r1, r5, 0x25, 0xc, @void}, 0x10) 1m1.14743138s ago: executing program 1 (id=5306): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lstat(0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40d0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r4) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}}, 0x64000) syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[], {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x6}}}}}}}, 0x0) 1m1.103901702s ago: executing program 1 (id=5307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES16=r1, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4"], 0x1c8}}, 0x0) 1m1.033955339s ago: executing program 38 (id=5307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES16=r1, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4"], 0x1c8}}, 0x0) 5.654227118s ago: executing program 9 (id=5834): r0 = syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000940)={{0x4, 0x4}, 0x100, './file1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) flistxattr(r4, 0x0, 0xffffffffffffffb1) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x81}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x7, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x7b, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8000c61) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 3.365899114s ago: executing program 2 (id=5840): r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) socket$inet6(0xa, 0x3, 0x3) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000980)={0x2, 0x0, 0x400, 0x2, 0xfffffffd}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x359}, 0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x5c, 0x8e, &(0x7f0000000340)="2fc39fd284668af6de55f0fb6b8c52069f7370e3029a58ac2edc1ed026e0149dbbcac31aea27d932290dc6b86276482fcdd9d3923d7f86f62bbced5984f3c12c1b3f57714d2f19fb4782a4890208f619908e58d1989efa6dce391ee9", &(0x7f0000000540)=""/142, 0x1, 0x0, 0x0, 0x42, 0x0, &(0x7f0000000680)="b090962a39b6d1d663450e17685c5580dcc88d91cc0b8dd4ee3589c74f8dc7cc6f1c4b79996633ffd5ab5f4d70b040360cae1bd99f81b6b81905daaff8add61a5ded", 0x4, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3d1, 0xfffffffffffffffb}, 0x4, 0x9, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) socket$packet(0x11, 0x2, 0x300) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open$dir(&(0x7f00000001c0)='./file0\x00', 0x100, 0x0) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_RENAMEAT={0x23, 0x10, 0x0, r7, &(0x7f00000003c0)='./file0\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r7}) accept4$inet(r3, 0x0, &(0x7f0000000000), 0x80800) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) 3.081023741s ago: executing program 5 (id=5849): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) memfd_create(&(0x7f0000001180)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf10x0, 0xcc, &(0x7f0000000540)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e21, 0x0, @mcast2, 0xb75}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e22, 0xe9d, @local, 0xff}, @in6={0xa, 0x4e24, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xa}, @in6={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @in6={0xa, 0x4e20, 0x2, @remote, 0x9e}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1, 0x80000001}, &(0x7f0000000180)=0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @remote, @multicast2}, 0x0) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private0, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffefffffffffe}, {0x0, 0xc, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x6}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x3, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0xdadb84c82225e4b9) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$netlink(0x10, 0x3, 0xc) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r10, 0x5403, &(0x7f0000000500)={0x4049, 0x5049, 0x3, 0x33b, 0x5, "00a6400d00000000000000f8ffffff00"}) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000100)=0x86) ioctl$TIOCL_GETMOUSEREPORTING(r10, 0x5412, &(0x7f0000000040)=0xd) 2.876514003s ago: executing program 9 (id=5852): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x7ffffc, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setresuid(0x0, 0x0, 0xee00) r3 = syz_open_procfs(0x0, 0x0) fchdir(r3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITHAW(r1, 0xc0045878) syz_open_procfs(r0, &(0x7f00000000c0)='net/snmp6\x00') r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x104, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @rand_addr, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x5}}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'team_slave_0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="8249ca4ee4e7", @remote, @broadcast, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x440) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r5) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000011c0)={0x2c, r6, 0x101, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c095}, 0x48090) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005d40), r7) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f0000005e00)={0x0, 0x0, &(0x7f0000005dc0)={&(0x7f0000005d80)={0x28, r8, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.625834297s ago: executing program 2 (id=5853): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20) unshare(0x28000600) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x86, &(0x7f0000002600)}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) listen(r2, 0x5) 2.48110891s ago: executing program 2 (id=5854): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) syz_usb_disconnect(r0) 2.195408707s ago: executing program 5 (id=5857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xf5, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}}, 0x0) 2.110070931s ago: executing program 0 (id=5858): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=@newqdisc={0x7c, 0x24, 0xf1d, 0x0, 0x2000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4c, 0x2, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8000}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x7}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x23}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x4}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x95e9}, @TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x30}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xffe0}, {0xc, 0xffff}, {0xffe0}}}, 0x24}}, 0x0) 2.109205471s ago: executing program 5 (id=5859): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0xfffffffe) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5d470500c7ee0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT=r1], 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 2.056139761s ago: executing program 0 (id=5860): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000000000000000000082295ebe6e90041f345cda61b62e9f16fd43a55cc4edbe73c"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2.008699272s ago: executing program 3 (id=5861): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.007807322s ago: executing program 0 (id=5862): setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) sysinfo(&(0x7f0000000200)=""/32) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {0x8}}, './file0\x00'}) ioprio_set$uid(0x3, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r8, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x25, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x342, &(0x7f0000000680)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) write$cgroup_int(r9, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000240)={0x0, 0x17, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r10}}, 0x18) 1.951584752s ago: executing program 3 (id=5863): openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) sendmmsg$inet(r4, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0xc}}], 0xc}}], 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) unshare(0x6a040000) 1.862540416s ago: executing program 9 (id=5864): socket(0x29, 0x80000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) tee(0xffffffffffffffff, r0, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400007ff8, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x80, 0x56}, 0x1a04, 0x1, 0x40008, 0x1, 0x975, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xb, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0xfd026, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0xec}, 0x400, 0xc, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x88000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x200000, 0x91) r3 = syz_clone(0x90000200, &(0x7f00000001c0)="6c1cdcea93ccf48d306af20c8f9a8ec2365259847c36fc4e443191e3dd4bb2884e4397430d30ad841a802bb3db7482407d812d64a38b234d77b9f010e3036f9283bf8b301e3112424a094ad89572a84b776200eed274afeb9dddabec9ed900e51214d0efcecf1ea17411b4adeeb409298df8ee53a6797f78837cf8c5ab524f8487f477f252493e719307a6c04c2c545c0414871186a8113c1d4f0044b1ae611afa5f2f6e28431e52", 0xa8, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="1c1cf7a46bc79729fe05a34a9ba21bca51b26bec070dd43a4711a37bc7b70faf0547993816133cda116deba81e017f9242839361a0df06f1dc69d492e767df2c2a2175333ee541f5ba11261d2cb5462b47c78568e7678ef624dc78a007c029e13b3d07e1a28592b9ba8f11b57b92228b54b7477cdcef72435254351d01e5af6d109e77f4471bb8afaa9fda28a6099bf306ca84c245bba2a40e73b80050f0a953bca7c018d7b849d1d02375") perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xa, 0x0, 0xe2, 0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x218f1, 0x4, @perf_config_ext={0x5, 0x5a80}, 0x18615, 0x3, 0x8, 0x9, 0x1, 0x1, 0x8, 0x0, 0x6, 0x0, 0x200000000000054}, r3, 0xe, r1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) inotify_init1(0x800) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 1.417888553s ago: executing program 2 (id=5865): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x588, 0x200, 0x200, 0x120, 0x200, 0x0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@uncond, 0x0, 0xd8, 0x120, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x4, 0x0, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private=0xa010100, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}, 0x10, 0x10, 0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xff], 'batadv_slave_1\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {0x1, 0x0, 0x4}, {0x87}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x120}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x44004) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b930ae1cbb246016ace2049f1db715c5192a29b256ef1f8d75b57e1104b3d2259c0bfd5858dcd"], 0x34}}, 0x0) 618.844645ms ago: executing program 9 (id=5866): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lstat(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40d0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) syz_emit_ethernet(0x32, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x6}}}}}}}, 0x0) 575.719357ms ago: executing program 5 (id=5867): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'security.', 'tracefs\x00'}, &(0x7f0000000100)='\x00', 0x1, 0x2) 561.420264ms ago: executing program 5 (id=5868): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lstat(0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40d0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r4) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}}, 0x64000) syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[], {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 511.314405ms ago: executing program 2 (id=5869): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000300)={[{@dioread_lock}, {@noblock_validity}, {@data_err_ignore}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4f1, &(0x7f0000000b00)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@journal_path={'journal_path', 0x3d, './file0'}}, {@init_itable}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x47a, &(0x7f0000000580)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x44, r3, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0) 273.935071ms ago: executing program 3 (id=5870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=@newqdisc={0x7c, 0x24, 0xf1d, 0x0, 0x2000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4c, 0x2, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8000}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x7}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x23}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x4}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x95e9}, @TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x30}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xffe0}, {0xc, 0xffff}, {0xffe0}}}, 0x24}}, 0x0) 239.670725ms ago: executing program 3 (id=5871): open(&(0x7f0000000040)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) symlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000640)='./file1\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x1, 0x0, @loopback}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) 220.335031ms ago: executing program 9 (id=5872): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0x800}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa8aaa420881450000000064000000879078ac1414bbac14140c21d21ae987ce846078c2231058624a6add7774c66663867a67e28b5f22df"], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'veth1_vlan\x00', @broadcast}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031400d3fc220000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 217.44513ms ago: executing program 0 (id=5873): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xfff9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 143.821867ms ago: executing program 5 (id=5874): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000d80)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x38, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1004014, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000196f05ef000100000000000000000020010000000000000000f2ff00000000ac14141500000000000000000000000000000005000000000a00200000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c0000"], 0xfc}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r5) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000200)={0x0, 0x40000, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32, @ANYBLOB="65a2449fde13d6187e0ac9710dfb9aea0400000000000000869fbe84febfab39427d37e4b3030a55aa19f6d66d548cc10f10150b80cd20574de76b44a751a4ab3a13f0200678fe29bdc5941d075ce1a9d0954f00000000d354a124222522e34a8aa51a04a6aedc19d536e89974f7820bbca171b7725c175c0fc6ec07b06bd4057531cbd784c2e2c1bdcc260e216d16dc806b3bb4ee1d156c11a1199dfd0b715ba770d84f3a23140301b904865f9b49ad373884f0ef73d85a5128e30700000000000000056e41e4764e1428747bcd2876505e10d316089d0bbf396454"], 0x1c}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00"], 0xfc}}, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0xb0000004}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f00000045c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}, 0x8}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)='L', 0x1}], 0x1}}], 0x1, 0x24044849) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd000071187b0000000000c3640000f10000006b0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0) 143.408037ms ago: executing program 9 (id=5875): setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) sysinfo(&(0x7f0000000200)=""/32) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x8}}, './file0\x00'}) ioprio_set$uid(0x3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, 0x0, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x25, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x342, &(0x7f0000000680)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) write$cgroup_int(r7, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000240)={0x0, 0x17, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r8}}, 0x18) 115.455312ms ago: executing program 0 (id=5876): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x7, 0x7, 0x1400, 0xe0, 0x1}) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r1, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000240)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x20000036, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) r8 = fcntl$getown(r5, 0x9) rt_tgsigqueueinfo(r7, r8, 0xb, &(0x7f0000000380)={0x1a, 0x8001, 0xaba2}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f0000000140)="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"/297, 0x3accf8d5) close(r9) shutdown(0xffffffffffffffff, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8587}}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r11, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r11, 0x2000) io_uring_enter(r2, 0x47f6, 0x4000, 0x88, 0x0, 0x0) 95.655398ms ago: executing program 3 (id=5877): socket(0x29, 0x80000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) tee(0xffffffffffffffff, r0, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400007ff8, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x80, 0x56}, 0x1a04, 0x1, 0x40008, 0x1, 0x975, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xb, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0xfd026, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0xec}, 0x400, 0xc, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x88000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x200000, 0x91) r3 = syz_clone(0x90000200, &(0x7f00000001c0)="6c1cdcea93ccf48d306af20c8f9a8ec2365259847c36fc4e443191e3dd4bb2884e4397430d30ad841a802bb3db7482407d812d64a38b234d77b9f010e3036f9283bf8b301e3112424a094ad89572a84b776200eed274afeb9dddabec9ed900e51214d0efcecf1ea17411b4adeeb409298df8ee53a6797f78837cf8c5ab524f8487f477f252493e719307a6c04c2c545c0414871186a8113c1d4f0044b1ae611afa5f2f6e28431e52", 0xa8, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="1c1cf7a46bc79729fe05a34a9ba21bca51b26bec070dd43a4711a37bc7b70faf0547993816133cda116deba81e017f9242839361a0df06f1dc69d492e767df2c2a2175333ee541f5ba11261d2cb5462b47c78568e7678ef624dc78a007c029e13b3d07e1a28592b9ba8f11b57b92228b54b7477cdcef72435254351d01e5af6d109e77f4471bb8afaa9fda28a6099bf306ca84c245bba2a40e73b80050f0a953bca7c018d7b849d1d02375") perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xa, 0x0, 0xe2, 0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x218f1, 0x4, @perf_config_ext={0x5, 0x5a80}, 0x18615, 0x3, 0x8, 0x9, 0x1, 0x1, 0x8, 0x0, 0x6, 0x0, 0x200000000000054}, r3, 0xe, r1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) inotify_init1(0x800) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 26.468935ms ago: executing program 2 (id=5878): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'security.', 'tracefs\x00'}, &(0x7f0000000100)='\x00', 0x1, 0x2) 0s ago: executing program 3 (id=5879): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lstat(0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40d0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r4) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}}, 0x64000) syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[], {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) kernel console output (not intermixed with test programs): 890572][T14371] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.953332][T25951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.288900][T26421] loop3: detected capacity change from 0 to 512 [ 810.496214][T26421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.572726][T26421] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 810.592149][T26421] FAULT_INJECTION: forcing a failure. [ 810.592149][T26421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.639443][T26421] CPU: 1 UID: 0 PID: 26421 Comm: syz.3.5397 Tainted: G W syzkaller #0 PREEMPT(full) [ 810.639557][T26421] Tainted: [W]=WARN [ 810.639562][T26421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 810.639611][T26421] Call Trace: [ 810.639619][T26421] [ 810.639628][T26421] __dump_stack+0x1d/0x30 [ 810.639663][T26421] dump_stack_lvl+0x95/0xd0 [ 810.639712][T26421] dump_stack+0x15/0x1b [ 810.639730][T26421] should_fail_ex+0x263/0x280 [ 810.639773][T26421] should_fail+0xb/0x20 [ 810.639791][T26421] should_fail_usercopy+0x1a/0x20 [ 810.639815][T26421] strncpy_from_user+0x27/0x250 [ 810.639839][T26421] ? kmem_cache_alloc_noprof+0x2f9/0x400 [ 810.639905][T26421] do_getname+0x59/0x1c0 [ 810.639938][T26421] getname_flags+0x1d/0x30 [ 810.639962][T26421] path_setxattrat+0x20f/0x310 [ 810.640052][T26421] __x64_sys_lsetxattr+0x71/0x90 [ 810.640152][T26421] x64_sys_call+0x1300/0x3020 [ 810.640175][T26421] do_syscall_64+0x12c/0x370 [ 810.640194][T26421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.640214][T26421] RIP: 0033:0x7f8bf79fc799 [ 810.640244][T26421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.640259][T26421] RSP: 002b:00007f8bf6457028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 810.640332][T26421] RAX: ffffffffffffffda RBX: 00007f8bf7c75fa0 RCX: 00007f8bf79fc799 [ 810.640359][T26421] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000180 [ 810.640374][T26421] RBP: 00007f8bf6457090 R08: 0000000000000000 R09: 0000000000000000 [ 810.640389][T26421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.640403][T26421] R13: 00007f8bf7c76038 R14: 00007f8bf7c75fa0 R15: 00007fff09458b08 [ 810.640426][T26421] [ 810.894312][T14371] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.906300][T26432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5401'. [ 810.971474][T26436] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 810.978029][T26436] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 810.999749][T26436] vhci_hcd vhci_hcd.0: Device attached [ 811.012375][T26436] bond1: option mode: invalid value (9) [ 811.035355][T26436] bond1 (unregistering): Released all slaves [ 811.091204][T26444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 811.164143][T26454] loop3: detected capacity change from 0 to 4096 [ 811.188444][T26437] vhci_hcd: connection closed [ 811.188754][T11718] vhci_hcd vhci_hcd.9: stop threads [ 811.199944][T11718] vhci_hcd vhci_hcd.9: release socket [ 811.205537][T11718] vhci_hcd vhci_hcd.9: disconnect device [ 811.229343][T26454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.420511][T26469] hub 8-0:1.0: USB hub found [ 811.425333][T26469] hub 8-0:1.0: 8 ports detected [ 811.440440][T26469] netlink: 'syz.5.5408': attribute type 36 has an invalid length. [ 811.458312][T26469] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 811.468202][T26469] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 811.509940][T26469] netlink: 'syz.5.5408': attribute type 10 has an invalid length. [ 811.519528][T26469] macvlan1: entered allmulticast mode [ 811.544540][T26469] veth1_vlan: entered allmulticast mode [ 811.556913][T26469] team0: Port device macvlan1 added [ 811.973549][T14371] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.005336][T26471] loop2: detected capacity change from 0 to 128 [ 812.560270][T26474] 9pnet_virtio: no channels available for device ./file0 [ 812.931316][T26498] loop9: detected capacity change from 0 to 128 [ 813.294843][T26500] FAULT_INJECTION: forcing a failure. [ 813.294843][T26500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.322171][T26500] CPU: 0 UID: 0 PID: 26500 Comm: syz.2.5420 Tainted: G W syzkaller #0 PREEMPT(full) [ 813.322206][T26500] Tainted: [W]=WARN [ 813.322213][T26500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 813.322225][T26500] Call Trace: [ 813.322233][T26500] [ 813.322241][T26500] __dump_stack+0x1d/0x30 [ 813.322333][T26500] dump_stack_lvl+0x95/0xd0 [ 813.322358][T26500] dump_stack+0x15/0x1b [ 813.322380][T26500] should_fail_ex+0x263/0x280 [ 813.322403][T26500] should_fail+0xb/0x20 [ 813.322452][T26500] should_fail_usercopy+0x1a/0x20 [ 813.322473][T26500] strncpy_from_user+0x27/0x250 [ 813.322501][T26500] ? kmem_cache_alloc_noprof+0x2f9/0x400 [ 813.322579][T26500] do_getname+0x59/0x1c0 [ 813.322600][T26500] getname_flags+0x1d/0x30 [ 813.322619][T26500] vfs_fstatat+0x45/0x170 [ 813.322668][T26500] __se_sys_newfstatat+0x55/0x3e0 [ 813.322699][T26500] ? __fget_files+0x184/0x1c0 [ 813.322722][T26500] ? mutex_lock+0x57/0x90 [ 813.322795][T26500] ? mutex_unlock+0x4e/0x90 [ 813.322895][T26500] __x64_sys_newfstatat+0x55/0x70 [ 813.322922][T26500] x64_sys_call+0x2c64/0x3020 [ 813.322949][T26500] do_syscall_64+0x12c/0x370 [ 813.322982][T26500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.323001][T26500] RIP: 0033:0x7fe06237c799 [ 813.323016][T26500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.323032][T26500] RSP: 002b:00007fe060dd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 813.323057][T26500] RAX: ffffffffffffffda RBX: 00007fe0625f5fa0 RCX: 00007fe06237c799 [ 813.323070][T26500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 813.323083][T26500] RBP: 00007fe060dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 813.323120][T26500] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 813.323132][T26500] R13: 00007fe0625f6038 R14: 00007fe0625f5fa0 R15: 00007fffb04242a8 [ 813.323150][T26500] [ 813.546552][T26503] team0: Device macvlan1 failed to change mtu [ 813.564652][T26506] loop5: detected capacity change from 0 to 4096 [ 813.696248][T26506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.884886][T26517] lo speed is unknown, defaulting to 1000 [ 813.891411][T26517] lo speed is unknown, defaulting to 1000 [ 814.729183][T25951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.738846][T21076] usb 6-1: device descriptor read/8, error -110 [ 814.844469][T26523] 9pnet_virtio: no channels available for device ./file0 [ 814.851879][T21076] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 814.899872][T21076] usb 6-1: enqueue for inactive port 0 [ 814.915547][T21076] usb 6-1: enqueue for inactive port 0 [ 814.927761][T21076] usb 6-1: enqueue for inactive port 0 [ 814.988833][ T28] kauditd_printk_skb: 515 callbacks suppressed [ 814.988850][ T28] audit: type=1400 audit(1773304991.806:26595): avc: denied { mount } for pid=26526 comm="syz.3.5430" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 815.543885][T26535] loop9: detected capacity change from 0 to 512 [ 815.588051][T26538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5431'. [ 815.600072][T26535] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.629975][T26535] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 815.643370][T26538] macvlan5: entered promiscuous mode [ 815.652973][T26538] bond0: entered promiscuous mode [ 815.681459][T21818] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.693395][T26545] loop5: detected capacity change from 0 to 512 [ 815.710831][ T28] audit: type=1400 audit(1773304992.536:26596): avc: denied { write } for pid=26546 comm="syz.9.5435" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 815.755518][T26543] loop2: detected capacity change from 0 to 512 [ 815.757203][T26545] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 815.777983][T26545] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 815.805737][T26545] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.5434: Corrupt directory, running e2fsck is recommended [ 815.830053][T26545] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 815.830864][T26543] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 815.838702][T26545] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.5434: corrupted in-inode xattr: invalid ea_ino [ 815.838733][T26545] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 815.838898][T26545] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5434: couldn't read orphan inode 15 (err -117) [ 815.856382][T26543] EXT4-fs (loop2): 1 orphan inode deleted [ 815.865313][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 815.865335][ C1] EXT4-fs (loop5): initial error at time 1773304992: ext4_iget_extra_inode:5025: inode 15 [ 815.865368][ C1] EXT4-fs (loop5): last error at time 1773304992: ext4_iget_extra_inode:5025: inode 15 [ 815.868576][T26545] loop5: lost filesystem error report for type 5 error -117 [ 815.877627][T26543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 815.973334][T26545] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.975700][T21076] usb usb6-port1: attempt power cycle [ 816.018475][ T28] audit: type=1326 audit(1773304992.836:26597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26558 comm="syz.3.5438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf79fc799 code=0x7ffc0000 [ 816.042476][ T28] audit: type=1326 audit(1773304992.836:26598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26558 comm="syz.3.5438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf79fc799 code=0x7ffc0000 [ 816.066165][ T28] audit: type=1326 audit(1773304992.836:26599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26558 comm="syz.3.5438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f8bf79fc799 code=0x7ffc0000 [ 816.092062][ T28] audit: type=1326 audit(1773304992.836:26600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26558 comm="syz.3.5438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf79fc799 code=0x7ffc0000 [ 816.130215][ T28] audit: type=1326 audit(1773304992.836:26601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26558 comm="syz.3.5438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf79fc799 code=0x7ffc0000 [ 816.173558][T26561] loop9: detected capacity change from 0 to 128 [ 816.208730][ T28] audit: type=1400 audit(1773304993.006:26602): avc: denied { watch } for pid=26552 comm="syz.9.5437" path="/234/file0/file0" dev="loop9" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 816.449830][T25951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.498041][T15885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.532570][T26572] IPv6: syztnl0: Disabled Multicast RS [ 816.555922][T26571] loop2: detected capacity change from 0 to 1024 [ 816.587742][T26571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 816.608740][T26572] loop5: detected capacity change from 0 to 1024 [ 816.680399][T26572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 816.749347][T26578] siw: device registration error -23 [ 816.773617][T15885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.793366][ T28] audit: type=1400 audit(1773304993.616:26603): avc: denied { ioctl } for pid=26566 comm="syz.5.5439" path="/17/file1/file1" dev="loop5" ino=15 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 816.916987][T26569] lo speed is unknown, defaulting to 1000 [ 816.934754][T26569] lo speed is unknown, defaulting to 1000 [ 817.069978][ T28] audit: type=1326 audit(1773304993.886:26604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26580 comm="syz.2.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06237c799 code=0x7ffc0000 [ 817.137979][T26583] loop9: detected capacity change from 0 to 512 [ 817.202851][T26584] loop2: detected capacity change from 0 to 128 [ 817.223292][T26583] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.334321][T26583] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 817.492925][T21818] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.627612][T26600] loop3: detected capacity change from 0 to 128 [ 817.946686][T26606] lo speed is unknown, defaulting to 1000 [ 818.024189][T26606] lo speed is unknown, defaulting to 1000 [ 818.210077][T21076] usb usb6-port1: unable to enumerate USB device [ 818.393123][T26613] lo speed is unknown, defaulting to 1000 [ 818.399430][T26613] lo speed is unknown, defaulting to 1000 [ 818.520796][T26606] loop2: detected capacity change from 0 to 8192 [ 818.561426][ T3533] loop2: p1 < > p2 p4 < p5 > [ 818.567747][ T3533] loop2: partition table partially beyond EOD, truncated [ 818.584602][ T3533] loop2: p1 start 134217728 is beyond EOD, truncated [ 818.592118][ T3533] loop2: p2 size 591360 extends beyond EOD, truncated [ 818.612459][ T3533] loop2: p5 size 591360 extends beyond EOD, truncated [ 818.653053][T26606] loop2: p1 < > p2 p4 < p5 > [ 818.657753][T26606] loop2: partition table partially beyond EOD, truncated [ 818.671845][T26629] loop3: detected capacity change from 0 to 1024 [ 818.698533][T26629] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 818.716685][T26627] lo speed is unknown, defaulting to 1000 [ 818.723348][T26627] lo speed is unknown, defaulting to 1000 [ 818.739281][T26629] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 818.749969][T26629] EXT4-fs (loop3): orphan cleanup on readonly fs [ 818.762691][T26629] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz.3.5461: Invalid inode table block 0 in block_group 0 [ 818.788535][T26629] loop3: lost filesystem error report for type 5 error -117 [ 818.789801][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 818.803570][ C0] EXT4-fs (loop3): initial error at time 1773304995: __ext4_get_inode_loc:4782 [ 818.812557][ C0] EXT4-fs (loop3): last error at time 1773304995: __ext4_get_inode_loc:4782 [ 818.821550][T26629] EXT4-fs (loop3): Remounting filesystem read-only [ 818.823140][T26606] loop2: p1 start 134217728 is beyond EOD, truncated [ 818.828490][T26629] EXT4-fs (loop3): 1 truncate cleaned up [ 818.841145][T26629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 818.869059][T26606] loop2: p2 size 591360 extends beyond EOD, truncated [ 818.896979][T26606] loop2: p5 size 591360 extends beyond EOD, truncated [ 818.918154][T14371] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.004453][T26644] loop3: detected capacity change from 0 to 512 [ 819.088797][T26644] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #3: comm syz.3.5468: corrupted inode contents [ 819.124478][ T6836] udevd[6836]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 819.136336][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 819.152193][ T3533] udevd[3533]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 819.232171][T26644] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 819.236927][T26644] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #3: comm syz.3.5468: mark_inode_dirty error [ 819.246065][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 819.246108][ C1] EXT4-fs (loop3): initial error at time 1773304996: ext4_do_update_inode:5569: inode 3 [ 819.246141][ C1] EXT4-fs (loop3): last error at time 1773304996: ext4_do_update_inode:5569: inode 3 [ 819.286890][T26651] loop9: detected capacity change from 0 to 128 [ 819.451436][T26644] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 819.451891][T26644] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #3: comm syz.3.5468: corrupted inode contents [ 819.511696][T26644] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 819.511930][T26644] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.5468: mark_inode_dirty error [ 819.559606][T26656] lo speed is unknown, defaulting to 1000 [ 819.582648][T26644] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 819.583859][T26644] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.5468: Failed to acquire dquot type 0 [ 819.588819][T26656] lo speed is unknown, defaulting to 1000 [ 819.600515][ T3533] udevd[3533]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 819.632909][T26644] loop3: lost filesystem error report for type 5 error -117 [ 819.634408][T26644] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.5468: corrupted inode contents [ 819.657372][ T3533] udevd[3533]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 819.658890][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 819.676244][T26644] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 819.677685][T26644] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #16: comm syz.3.5468: mark_inode_dirty error [ 819.720897][T26644] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 819.721075][T26644] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.5468: corrupted inode contents [ 819.769876][T26644] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 819.772370][T26644] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.5468: mark_inode_dirty error [ 819.822711][T26644] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 819.823993][T26644] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.5468: corrupted inode contents [ 819.897503][T26644] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 819.905620][T26644] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 819.937845][T26644] loop3: lost filesystem error report for type 5 error -117 [ 819.938159][T26644] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.5468: corrupted inode contents [ 819.966115][T26644] EXT4-fs error (device loop3): ext4_truncate:4587: inode #16: comm syz.3.5468: mark_inode_dirty error [ 819.994018][T26644] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 820.003510][T26644] loop3: lost filesystem error report for type 5 error -117 [ 820.013463][T26644] EXT4-fs (loop3): 1 truncate cleaned up [ 820.033633][T26644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.073916][T26667] lo speed is unknown, defaulting to 1000 [ 820.086525][T26644] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 820.100171][T26667] lo speed is unknown, defaulting to 1000 [ 820.112433][T26644] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #3: comm syz.3.5468: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 820.112433][T26644] [ 820.137430][ T28] kauditd_printk_skb: 849 callbacks suppressed [ 820.137442][ T28] audit: type=1326 audit(1773304996.956:27450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26673 comm="syz.0.5477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 820.201443][ T28] audit: type=1326 audit(1773304996.996:27451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26673 comm="syz.0.5477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 820.240218][T26644] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 820.242001][ T28] audit: type=1326 audit(1773304996.996:27452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26673 comm="syz.0.5477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 820.302950][ T28] audit: type=1326 audit(1773304996.996:27453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26673 comm="syz.0.5477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 820.326788][ T28] audit: type=1326 audit(1773304996.996:27454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26670 comm="syz.2.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06237c799 code=0x7ffc0000 [ 820.351767][ T28] audit: type=1326 audit(1773304996.996:27455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26670 comm="syz.2.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fe06237c799 code=0x7ffc0000 [ 820.376162][ T28] audit: type=1326 audit(1773304996.996:27456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26670 comm="syz.2.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06237c799 code=0x7ffc0000 [ 820.418291][ T28] audit: type=1326 audit(1773304996.996:27457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26670 comm="syz.2.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe06233cfce code=0x7ffc0000 [ 820.443841][T14371] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.453292][ T28] audit: type=1326 audit(1773304996.996:27458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26670 comm="syz.2.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06237c799 code=0x7ffc0000 [ 820.483441][ T28] audit: type=1326 audit(1773304996.996:27459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26670 comm="syz.2.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe06237c799 code=0x7ffc0000 [ 820.555268][T26688] loop3: detected capacity change from 0 to 512 [ 820.600305][T26688] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 820.619977][T26688] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 820.639834][T26688] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.5481: Corrupt directory, running e2fsck is recommended [ 820.681112][T26688] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 820.709882][T26688] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.5481: corrupted in-inode xattr: invalid ea_ino [ 820.746426][T26688] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.5481: couldn't read orphan inode 15 (err -117) [ 820.758393][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 820.758418][ C0] EXT4-fs (loop3): initial error at time 1773304997: ext4_iget_extra_inode:5025: inode 15 [ 820.758465][ C0] EXT4-fs (loop3): last error at time 1773304997: ext4_iget_extra_inode:5025: inode 15 [ 820.790017][T26688] loop3: lost filesystem error report for type 5 error -117 [ 820.790547][T26688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.840813][T14371] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.897053][T26693] loop3: detected capacity change from 0 to 512 [ 820.907019][T26693] EXT4-fs: Ignoring removed nobh option [ 820.923683][T26693] EXT4-fs (loop3): orphan cleanup on readonly fs [ 820.931348][T26693] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.5482: EA inode hash validation failed [ 820.945682][T26693] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 820.978325][T25951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.997753][T26693] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.5482: corrupted inode contents [ 821.019083][T26693] fserror_report: 3 callbacks suppressed [ 821.084366][T26693] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 821.084570][T26693] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.5482: mark_inode_dirty error [ 821.093765][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 821.093789][ C0] EXT4-fs (loop3): initial error at time 1773304997: ext4_do_update_inode:5569: inode 15 [ 821.093823][ C0] EXT4-fs (loop3): last error at time 1773304997: ext4_do_update_inode:5569: inode 15 [ 821.140200][T26693] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 821.140416][T26693] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.5482: corrupted inode contents [ 821.175816][T26693] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 821.178856][T26693] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.5482: mark_inode_dirty error [ 821.214123][T26693] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 821.214248][T26693] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.5482: mark inode dirty (error -117) [ 821.237136][T26693] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 821.237580][T26693] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 821.259477][T26693] EXT4-fs (loop3): 1 orphan inode deleted [ 821.268603][T26693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 821.285751][T26711] lo speed is unknown, defaulting to 1000 [ 821.299173][T26711] lo speed is unknown, defaulting to 1000 [ 821.306130][T14371] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.359641][T26718] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5492'. [ 821.369490][T26718] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5492'. [ 821.439126][T26722] FAULT_INJECTION: forcing a failure. [ 821.439126][T26722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 821.476984][T26722] CPU: 0 UID: 0 PID: 26722 Comm: syz.2.5494 Tainted: G W syzkaller #0 PREEMPT(full) [ 821.477076][T26722] Tainted: [W]=WARN [ 821.477083][T26722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 821.477094][T26722] Call Trace: [ 821.477099][T26722] [ 821.477106][T26722] __dump_stack+0x1d/0x30 [ 821.477174][T26722] dump_stack_lvl+0x95/0xd0 [ 821.477196][T26722] dump_stack+0x15/0x1b [ 821.477215][T26722] should_fail_ex+0x263/0x280 [ 821.477306][T26722] should_fail+0xb/0x20 [ 821.477323][T26722] should_fail_usercopy+0x1a/0x20 [ 821.477381][T26722] _copy_from_user+0x1c/0xb0 [ 821.477405][T26722] ___sys_recvmsg+0xaa/0x3b0 [ 821.477455][T26722] do_recvmmsg+0x1ef/0x560 [ 821.477624][T26722] ? get_timespec64+0xd2/0x100 [ 821.477654][T26722] __x64_sys_recvmmsg+0xfb/0x170 [ 821.477680][T26722] x64_sys_call+0x80f/0x3020 [ 821.477724][T26722] do_syscall_64+0x12c/0x370 [ 821.477741][T26722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.477759][T26722] RIP: 0033:0x7fe06237c799 [ 821.477774][T26722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.477792][T26722] RSP: 002b:00007fe060dd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 821.477882][T26722] RAX: ffffffffffffffda RBX: 00007fe0625f5fa0 RCX: 00007fe06237c799 [ 821.477895][T26722] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 821.477908][T26722] RBP: 00007fe060dd7090 R08: 0000200000003700 R09: 0000000000000000 [ 821.477923][T26722] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 821.477936][T26722] R13: 00007fe0625f6038 R14: 00007fe0625f5fa0 R15: 00007fffb04242a8 [ 821.477956][T26722] [ 821.509457][T26720] loop5: detected capacity change from 0 to 128 [ 821.997289][T26739] siw: device registration error -23 [ 822.316545][T26742] lo speed is unknown, defaulting to 1000 [ 822.322782][T26742] lo speed is unknown, defaulting to 1000 [ 822.846763][T26755] lo speed is unknown, defaulting to 1000 [ 822.868772][T26755] lo speed is unknown, defaulting to 1000 [ 822.975860][T26774] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5505'. [ 823.005228][T26774] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5505'. [ 823.014447][T26774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5505'. [ 823.035718][T26766] loop5: detected capacity change from 0 to 128 [ 823.443467][T26804] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 823.795851][T26831] lo speed is unknown, defaulting to 1000 [ 823.810259][T26831] lo speed is unknown, defaulting to 1000 [ 823.836574][T26833] lo speed is unknown, defaulting to 1000 [ 823.879194][T26833] lo speed is unknown, defaulting to 1000 [ 824.104271][T26859] loop3: detected capacity change from 0 to 128 [ 824.273417][T26888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5532'. [ 824.309129][T26888] ip6tnl1: entered allmulticast mode [ 824.512979][T26910] lo speed is unknown, defaulting to 1000 [ 824.519059][T26910] lo speed is unknown, defaulting to 1000 [ 824.598521][T26918] loop9: detected capacity change from 0 to 512 [ 824.606750][T26919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5537'. [ 824.616836][T26918] EXT4-fs: Ignoring removed nobh option [ 824.628036][T26919] macvlan6: entered promiscuous mode [ 824.688093][T26918] EXT4-fs (loop9): orphan cleanup on readonly fs [ 824.708569][T26918] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.5542: EA inode hash validation failed [ 824.761422][T26918] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #15: comm syz.9.5542: corrupted inode contents [ 824.806283][T26918] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 824.807090][T26918] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #15: comm syz.9.5542: mark_inode_dirty error [ 824.816794][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 824.816883][ C0] EXT4-fs (loop9): initial error at time 1773305001: ext4_do_update_inode:5569: inode 15 [ 824.817174][ C0] EXT4-fs (loop9): last error at time 1773305001: ext4_do_update_inode:5569: inode 15 [ 824.860891][T26918] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 824.862750][T26918] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #15: comm syz.9.5542: corrupted inode contents [ 824.888687][T26918] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 824.894430][T26918] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2999: inode #15: comm syz.9.5542: mark_inode_dirty error [ 824.918719][T26918] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 824.927130][T26929] loop2: detected capacity change from 0 to 128 [ 824.953629][T26918] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3002: inode #15: comm syz.9.5542: mark inode dirty (error -117) [ 824.966689][T26918] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 824.967624][T26918] EXT4-fs warning (device loop9): ext4_evict_inode:275: xattr delete (err -117) [ 824.990271][T26918] EXT4-fs (loop9): 1 orphan inode deleted [ 825.006804][T26918] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 825.181017][ T28] kauditd_printk_skb: 782 callbacks suppressed [ 825.181031][ T28] audit: type=1326 audit(1773305002.006:28242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26928 comm="syz.2.5546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe06237c799 code=0x7ffc0000 [ 825.240006][T21818] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.295364][ T28] audit: type=1400 audit(1773305002.116:28243): avc: denied { mounton } for pid=26947 comm="syz.9.5550" path="/proc/719" dev="proc" ino=82972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 825.388808][ T28] audit: type=1326 audit(1773305002.146:28244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26933 comm="syz.5.5548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8544f2c799 code=0x7ffc0000 [ 825.447725][T26958] lo speed is unknown, defaulting to 1000 [ 825.458604][ T28] audit: type=1326 audit(1773305002.146:28245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26933 comm="syz.5.5548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f8544f2c799 code=0x7ffc0000 [ 825.480186][T26958] lo speed is unknown, defaulting to 1000 [ 825.527159][ T28] audit: type=1326 audit(1773305002.146:28246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26933 comm="syz.5.5548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8544f2c799 code=0x7ffc0000 [ 825.595140][ T28] audit: type=1326 audit(1773305002.156:28247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26933 comm="syz.5.5548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8544f2c799 code=0x7ffc0000 [ 825.682406][ T28] audit: type=1326 audit(1773305002.156:28248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26933 comm="syz.5.5548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8544f2c799 code=0x7ffc0000 [ 825.741573][ T28] audit: type=1326 audit(1773305002.156:28249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26933 comm="syz.5.5548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8544f2c799 code=0x7ffc0000 [ 825.846427][T26983] hub 8-0:1.0: USB hub found [ 825.851344][T26983] hub 8-0:1.0: 8 ports detected [ 825.862546][T26983] netlink: 'syz.0.5555': attribute type 36 has an invalid length. [ 825.875879][T26983] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 825.885826][T26983] bridge14: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 825.899394][T26983] netlink: 'syz.0.5555': attribute type 10 has an invalid length. [ 826.273939][ T28] audit: type=1326 audit(1773305002.166:28250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26950 comm="syz.9.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0cb1c799 code=0x7ffc0000 [ 826.297710][ T28] audit: type=1326 audit(1773305002.166:28251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26950 comm="syz.9.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0cb1c799 code=0x7ffc0000 [ 826.598739][T27074] loop2: detected capacity change from 0 to 512 [ 826.710194][T27074] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 826.742634][T27091] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5563'. [ 826.765126][T27074] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 826.775651][T27074] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.5561: Corrupt directory, running e2fsck is recommended [ 826.789993][T27074] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 826.813273][T27074] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.5561: corrupted in-inode xattr: invalid ea_ino [ 826.903061][T27074] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 826.903315][T27074] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.5561: couldn't read orphan inode 15 (err -117) [ 826.912511][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 826.912551][ C1] EXT4-fs (loop2): initial error at time 1773305003: ext4_iget_extra_inode:5025: inode 15 [ 826.912583][ C1] EXT4-fs (loop2): last error at time 1773305003: ext4_iget_extra_inode:5025: inode 15 [ 826.965359][T27074] loop2: lost filesystem error report for type 5 error -117 [ 826.965931][T27074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.975655][T27103] loop5: detected capacity change from 0 to 128 [ 827.066476][T15885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.545454][T27131] loop9: detected capacity change from 0 to 512 [ 827.575400][T27131] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.597928][T27131] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 827.654044][T27136] loop5: detected capacity change from 0 to 128 [ 827.789104][T27143] loop5: detected capacity change from 0 to 512 [ 827.812389][T27143] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.5581: corrupted inode contents [ 827.824859][T27141] random: crng reseeded on system resumption [ 827.839923][T27143] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 827.840349][T27143] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #3: comm syz.5.5581: mark_inode_dirty error [ 827.860681][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 827.860721][ C1] EXT4-fs (loop5): initial error at time 1773305004: ext4_do_update_inode:5569: inode 3 [ 827.860756][ C1] EXT4-fs (loop5): last error at time 1773305004: ext4_do_update_inode:5569: inode 3 [ 827.928542][T27143] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 827.929139][T27143] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.5581: corrupted inode contents [ 827.995172][T27143] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 827.996279][T27143] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.5581: mark_inode_dirty error [ 828.019467][T27153] loop3: detected capacity change from 0 to 512 [ 828.043901][T27153] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 828.075776][T27143] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 828.078681][T27143] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.5581: Failed to acquire dquot type 0 [ 828.107606][T27153] EXT4-fs (loop3): couldn't read superblock of external journal [ 828.154314][T27143] loop5: lost filesystem error report for type 5 error -117 [ 828.159844][T27143] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.5581: corrupted inode contents [ 828.167485][T27153] loop3: detected capacity change from 0 to 512 [ 828.192947][T27143] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 828.194051][T27143] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #16: comm syz.5.5581: mark_inode_dirty error [ 828.214833][T27143] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 828.215615][T27143] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.5581: corrupted inode contents [ 828.235906][T27161] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27161 comm=syz.0.5587 [ 828.259462][T27143] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 828.260054][T27143] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.5581: mark_inode_dirty error [ 828.260354][T27153] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 828.293709][T27143] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 828.293886][T27143] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.5581: corrupted inode contents [ 828.315015][T27143] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 828.316972][T27143] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 828.317910][T27153] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 828.356346][T27143] loop5: lost filesystem error report for type 5 error -117 [ 828.356476][T27143] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.5581: corrupted inode contents [ 828.388725][T27168] FAULT_INJECTION: forcing a failure. [ 828.388725][T27168] name failslab, interval 1, probability 0, space 0, times 0 [ 828.459973][T27153] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5584: bg 0: block 248: padding at end of block bitmap is not set [ 828.480693][T27168] CPU: 1 UID: 0 PID: 27168 Comm: syz.0.5588 Tainted: G W syzkaller #0 PREEMPT(full) [ 828.480725][T27168] Tainted: [W]=WARN [ 828.480733][T27168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 828.480745][T27168] Call Trace: [ 828.480752][T27168] [ 828.480760][T27168] __dump_stack+0x1d/0x30 [ 828.480831][T27168] dump_stack_lvl+0x95/0xd0 [ 828.480851][T27168] dump_stack+0x15/0x1b [ 828.480869][T27168] should_fail_ex+0x263/0x280 [ 828.480962][T27168] should_failslab+0x8c/0xb0 [ 828.480984][T27168] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 828.481051][T27168] ? __alloc_skb+0x2d6/0x690 [ 828.481076][T27168] __alloc_skb+0x2d6/0x690 [ 828.481098][T27168] ? __alloc_skb+0x200/0x690 [ 828.481174][T27168] netlink_alloc_large_skb+0xbf/0xf0 [ 828.481198][T27168] netlink_sendmsg+0x40c/0x6f0 [ 828.481249][T27168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 828.481352][T27168] ____sys_sendmsg+0x563/0x5b0 [ 828.481384][T27168] ___sys_sendmsg+0x195/0x1e0 [ 828.481458][T27168] __x64_sys_sendmsg+0xd4/0x160 [ 828.481489][T27168] x64_sys_call+0x194c/0x3020 [ 828.481579][T27168] do_syscall_64+0x12c/0x370 [ 828.481601][T27168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.481766][T27168] RIP: 0033:0x7f554f17c799 [ 828.481782][T27168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.481800][T27168] RSP: 002b:00007f554dbd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 828.481889][T27168] RAX: ffffffffffffffda RBX: 00007f554f3f5fa0 RCX: 00007f554f17c799 [ 828.481903][T27168] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 828.481916][T27168] RBP: 00007f554dbd7090 R08: 0000000000000000 R09: 0000000000000000 [ 828.481927][T27168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.481939][T27168] R13: 00007f554f3f6038 R14: 00007f554f3f5fa0 R15: 00007fff8ad28628 [ 828.481959][T27168] [ 828.482047][T27143] EXT4-fs error (device loop5): ext4_truncate:4587: inode #16: comm syz.5.5581: mark_inode_dirty error [ 828.525769][T27153] loop3: lost filesystem error report for type 5 error -117 [ 828.570755][T27143] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 828.589810][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 828.708967][ C0] EXT4-fs (loop3): last error at time 1773305005: ext4_validate_block_bitmap:441 [ 828.712920][T27143] loop5: lost filesystem error report for type 5 error -117 [ 828.719187][T27153] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.5584: Failed to acquire dquot type 1 [ 828.719537][T27143] EXT4-fs (loop5): 1 truncate cleaned up [ 828.726929][T27153] loop3: lost filesystem error report for type 5 error -117 [ 828.738785][T27143] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.769908][T27143] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 828.789335][T21818] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.799958][T27153] EXT4-fs (loop3): 1 truncate cleaned up [ 828.806085][T27153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 828.829830][T27153] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.5584: Failed to acquire dquot type 1 [ 828.869053][T27143] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #3: comm syz.5.5581: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 828.869053][T27143] [ 828.900161][T14371] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 828.955222][T27181] loop9: detected capacity change from 0 to 512 [ 828.986056][T25951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.038577][T27181] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 829.059976][T27181] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 829.070603][T27181] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5591: Corrupt directory, running e2fsck is recommended [ 829.093569][T27197] lo speed is unknown, defaulting to 1000 [ 829.099721][T27197] lo speed is unknown, defaulting to 1000 [ 829.100177][T27181] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 829.139303][T27200] loop5: detected capacity change from 0 to 256 [ 829.160561][T27181] EXT4-fs error (device loop9): ext4_iget_extra_inode:5025: inode #15: comm syz.9.5591: corrupted in-inode xattr: invalid ea_ino [ 829.166520][T27200] FAT-fs (loop5): Directory bread(block 64) failed [ 829.180641][T27200] FAT-fs (loop5): Directory bread(block 65) failed [ 829.187197][T27200] FAT-fs (loop5): Directory bread(block 66) failed [ 829.189811][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 829.193728][T27200] FAT-fs (loop5): Directory bread(block 67) failed [ 829.200131][ C1] EXT4-fs (loop9): initial error at time 1773305006: ext4_iget_extra_inode:5025: inode 15 [ 829.200169][ C1] EXT4-fs (loop9): last error at time 1773305006: ext4_iget_extra_inode:5025 [ 829.206785][T27200] FAT-fs (loop5): Directory bread(block 68) failed [ 829.216544][ C1] : inode 15 [ 829.216671][T27181] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.5591: couldn't read orphan inode 15 (err -117) [ 829.225344][T27200] FAT-fs (loop5): Directory bread(block 69) failed [ 829.225406][T27200] FAT-fs (loop5): Directory bread(block 70) failed [ 829.251659][T27181] loop9: lost filesystem error report for type 5 error -117 [ 829.254032][T27200] FAT-fs (loop5): Directory bread(block 71) failed [ 829.274291][T27200] FAT-fs (loop5): Directory bread(block 72) failed [ 829.280884][T27200] FAT-fs (loop5): Directory bread(block 73) failed [ 829.307429][T27181] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 829.398909][T27207] netlink: 'syz.2.5596': attribute type 36 has an invalid length. [ 829.437459][T21818] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.458868][T27203] netlink: 'syz.2.5596': attribute type 10 has an invalid length. [ 829.496810][T27214] loop3: detected capacity change from 0 to 128 [ 829.510522][T27207] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 829.547870][T27207] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 830.161391][T27230] siw: device registration error -23 [ 830.350340][ T28] kauditd_printk_skb: 1671 callbacks suppressed [ 830.350369][ T28] audit: type=1326 audit(1773305007.176:29917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27232 comm="syz.2.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06237c799 code=0x7ffc0000 [ 830.402468][ T28] audit: type=1326 audit(1773305007.206:29918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27232 comm="syz.2.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06237c799 code=0x7ffc0000 [ 830.426644][ T28] audit: type=1326 audit(1773305007.206:29919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27232 comm="syz.2.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06237c799 code=0x7ffc0000 [ 830.451650][ T28] audit: type=1326 audit(1773305007.206:29920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27232 comm="syz.2.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06237c799 code=0x7ffc0000 [ 830.475620][ T28] audit: type=1326 audit(1773305007.206:29921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27232 comm="syz.2.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe06237c799 code=0x7ffc0000 [ 830.499667][ T28] audit: type=1326 audit(1773305007.206:29922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27232 comm="syz.2.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06237c799 code=0x7ffc0000 [ 830.526457][ T28] audit: type=1326 audit(1773305007.206:29923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27232 comm="syz.2.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06237c799 code=0x7ffc0000 [ 830.550491][ T28] audit: type=1326 audit(1773305007.206:29924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27232 comm="syz.2.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06237c799 code=0x7ffc0000 [ 830.574416][ T28] audit: type=1326 audit(1773305007.206:29925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27232 comm="syz.2.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe06237c799 code=0x7ffc0000 [ 830.598768][ T28] audit: type=1326 audit(1773305007.206:29926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27232 comm="syz.2.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06237c799 code=0x7ffc0000 [ 830.626425][T27234] loop2: detected capacity change from 0 to 128 [ 830.915009][T27238] loop9: detected capacity change from 0 to 128 [ 832.407452][T27209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 832.499680][T27247] loop5: detected capacity change from 0 to 512 [ 832.506787][T27250] loop3: detected capacity change from 0 to 1024 [ 832.523654][T27250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 832.547750][T27250] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 832.691242][T27247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.691361][T27247] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 832.715710][T25951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.721018][T27263] loop2: detected capacity change from 0 to 512 [ 833.734492][T27266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5618'. [ 833.749555][T27266] netlink: 200 bytes leftover after parsing attributes in process `syz.5.5618'. [ 833.882516][T27263] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #3: comm syz.2.5617: corrupted inode contents [ 833.899474][T27261] lo speed is unknown, defaulting to 1000 [ 833.906851][T27263] fserror_report: 3 callbacks suppressed [ 833.906866][T27263] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 833.914112][T27261] lo speed is unknown, defaulting to 1000 [ 833.929836][T27253] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 833.932244][T27263] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #3: comm syz.2.5617: mark_inode_dirty error [ 833.955519][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 833.955552][ C1] EXT4-fs (loop2): initial error at time 1773305010: ext4_do_update_inode:5569: inode 3 [ 833.955577][ C1] EXT4-fs (loop2): last error at time 1773305010: ext4_do_update_inode:5569: inode 3 [ 834.023168][T27263] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 834.023499][T27263] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #3: comm syz.2.5617: corrupted inode contents [ 834.044909][T27263] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 834.045113][T27263] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.5617: mark_inode_dirty error [ 834.065907][T27263] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 834.066275][T27263] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.5617: Failed to acquire dquot type 0 [ 834.095205][T27263] loop2: lost filesystem error report for type 5 error -117 [ 834.095770][T27263] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.5617: corrupted inode contents [ 834.120606][T27263] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 834.120805][T27263] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #16: comm syz.2.5617: mark_inode_dirty error [ 834.141818][T27263] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 834.141979][T27263] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.5617: corrupted inode contents [ 834.163354][T27263] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 834.163485][T27263] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.5617: mark_inode_dirty error [ 834.184224][T27263] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 834.184367][T27263] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.5617: corrupted inode contents [ 834.205743][T27263] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 834.205913][T27263] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 834.226095][T27263] loop2: lost filesystem error report for type 5 error -117 [ 834.226324][T27263] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.5617: corrupted inode contents [ 834.245805][T27263] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 834.246116][T27263] EXT4-fs error (device loop2): ext4_truncate:4587: inode #16: comm syz.2.5617: mark_inode_dirty error [ 834.266830][T27263] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 834.275886][T27263] loop2: lost filesystem error report for type 5 error -117 [ 834.276275][T27263] EXT4-fs (loop2): 1 truncate cleaned up [ 834.290113][T27263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 834.302729][T27263] ext4 filesystem being mounted at /528/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 834.320880][T27266] bond1 (unregistering): Released all slaves [ 834.358915][T27263] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #3: comm syz.2.5617: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 834.358915][T27263] [ 834.388828][T27273] lo speed is unknown, defaulting to 1000 [ 834.407546][T11608] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm kworker/u8:20: lblock 0 mapped to illegal pblock 0 (length 6) [ 834.421473][T27273] lo speed is unknown, defaulting to 1000 [ 834.421456][T11608] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 834.440616][T11608] EXT4-fs (loop3): This should not happen!! Data will be lost [ 834.440616][T11608] [ 834.473656][T11715] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:23: lblock 8 mapped to illegal pblock 8 (length 8) [ 834.488724][T27263] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 834.498652][T11715] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 834.521668][T15885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.530343][T11715] EXT4-fs (loop3): This should not happen!! Data will be lost [ 834.530343][T11715] [ 834.712946][T14371] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 834.760854][T27283] loop5: detected capacity change from 0 to 128 [ 834.804277][T27287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5620'. [ 835.127399][T27301] loop5: detected capacity change from 0 to 512 [ 835.154076][T27303] siw: device registration error -23 [ 835.170647][T27301] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.223650][T27301] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 835.291553][T25951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.335365][T27310] loop5: detected capacity change from 0 to 1024 [ 835.355023][T27310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 835.397443][ T28] kauditd_printk_skb: 1731 callbacks suppressed [ 835.397456][ T28] audit: type=1326 audit(1773305012.216:31656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27305 comm="syz.0.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 835.434865][T27310] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 835.490031][T15049] usb usb6-port1: attempt power cycle [ 835.499747][ T28] audit: type=1326 audit(1773305012.276:31657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.0.5632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 835.528003][ T28] audit: type=1326 audit(1773305012.276:31658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.0.5632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 835.551834][ T28] audit: type=1326 audit(1773305012.276:31659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.0.5632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 835.575839][ T28] audit: type=1326 audit(1773305012.276:31660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.0.5632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 835.599906][ T28] audit: type=1326 audit(1773305012.276:31661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.0.5632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 835.627727][ T28] audit: type=1326 audit(1773305012.276:31662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.0.5632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 835.651891][ T28] audit: type=1326 audit(1773305012.276:31663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.0.5632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 835.675911][ T28] audit: type=1326 audit(1773305012.276:31664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.0.5632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 835.699904][ T28] audit: type=1326 audit(1773305012.276:31665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.0.5632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 835.831163][T27322] loop3: detected capacity change from 0 to 1024 [ 835.844092][T27322] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 835.858918][T27322] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 835.867100][T27317] loop2: detected capacity change from 0 to 1024 [ 835.867241][T27322] EXT4-fs (loop3): orphan cleanup on readonly fs [ 835.898837][T27322] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz.3.5635: Invalid inode table block 0 in block_group 0 [ 835.904818][T27317] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.5633: Failed to acquire dquot type 0 [ 835.923396][T27317] loop2: lost filesystem error report for type 5 error -5 [ 835.923646][T27322] loop3: lost filesystem error report for type 5 error -117 [ 835.931432][T27317] EXT4-fs (loop2): 1 truncate cleaned up [ 835.942806][T27322] EXT4-fs (loop3): Remounting filesystem read-only [ 835.944540][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 835.944559][ C1] EXT4-fs (loop2): initial error at time 1773305012: ext4_acquire_dquot:7001 [ 835.951071][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 835.957464][ C1] [ 835.957471][ C1] EXT4-fs (loop2): last error at time 1773305012: ext4_acquire_dquot:7001 [ 835.961437][T27317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.966253][ C0] EXT4-fs (loop3): initial error at time 1773305012: __ext4_get_inode_loc:4782 [ 836.004929][ C0] EXT4-fs (loop3): last error at time 1773305012: __ext4_get_inode_loc:4782 [ 836.023811][T27322] EXT4-fs (loop3): 1 truncate cleaned up [ 836.052064][T27317] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.5633: Failed to acquire dquot type 0 [ 836.064308][T27322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 836.117832][T27336] tipc: Failed to obtain node identity [ 836.124635][T27336] tipc: Enabling of bearer rejected, failed to enable media [ 836.133968][T15885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.159575][T14371] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.162358][T27336] lo speed is unknown, defaulting to 1000 [ 836.217919][T25951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 836.228341][T27336] lo speed is unknown, defaulting to 1000 [ 836.231758][T27339] loop2: detected capacity change from 0 to 1024 [ 836.235301][T27341] loop3: detected capacity change from 0 to 512 [ 836.247553][T27339] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 836.264610][T27341] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 836.285796][T27339] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 836.298976][T27341] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 836.309859][T27341] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.5642: Corrupt directory, running e2fsck is recommended [ 836.323265][T27339] EXT4-fs (loop2): orphan cleanup on readonly fs [ 836.329675][T27341] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 836.338622][T27339] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz.2.5641: Invalid inode table block 0 in block_group 0 [ 836.347575][T27341] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.5642: corrupted in-inode xattr: invalid ea_ino [ 836.351543][T27339] loop2: lost filesystem error report for type 5 error -117 [ 836.367755][T27339] EXT4-fs (loop2): Remounting filesystem read-only [ 836.375213][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 836.375230][ C0] EXT4-fs (loop3): initial error at time 1773305013: ext4_iget_extra_inode:5025: inode 15 [ 836.375254][ C0] EXT4-fs (loop3): last error at time 1773305013: ext4_iget_extra_inode:5025: inode 15 [ 836.375278][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 836.375302][ C0] EXT4-fs (loop2): initial error at time 1773305013: __ext4_get_inode_loc:4782 [ 836.375319][ C0] EXT4-fs (loop2): last error at time 1773305013: __ext4_get_inode_loc:4782 [ 836.390155][T27341] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.5642: couldn't read orphan inode 15 (err -117) [ 836.398446][T27339] EXT4-fs (loop2): 1 truncate cleaned up [ 836.433500][T27341] loop3: lost filesystem error report for type 5 error -117 [ 836.450412][T27339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 836.460572][T27341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 836.528688][T15885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.572935][T27354] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 836.592151][T14371] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.673267][T27359] siw: device registration error -23 [ 836.682528][T27357] loop3: detected capacity change from 0 to 512 [ 836.704975][T27357] EXT4-fs: Ignoring removed nobh option [ 836.742870][T27357] EXT4-fs (loop3): orphan cleanup on readonly fs [ 836.756649][T27357] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.5647: EA inode hash validation failed [ 836.773132][T27357] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.5647: corrupted inode contents [ 836.788057][T27357] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.5647: mark_inode_dirty error [ 836.799707][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 836.799810][ C1] EXT4-fs (loop3): initial error at time 1773305013: ext4_do_update_inode:5569: inode 15 [ 836.800085][ C1] EXT4-fs (loop3): last error at time 1773305013: ext4_do_update_inode:5569: inode 15 [ 836.844070][T27357] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.5647: corrupted inode contents [ 836.857909][T27357] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.5647: mark_inode_dirty error [ 836.871957][T27357] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.5647: mark inode dirty (error -117) [ 836.886440][T27357] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 836.897488][T27357] EXT4-fs (loop3): 1 orphan inode deleted [ 836.911439][T27357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 836.965367][T14371] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.091135][T27375] netlink: 392 bytes leftover after parsing attributes in process `syz.5.5654'. [ 837.140807][T27384] netlink: 'syz.3.5658': attribute type 21 has an invalid length. [ 837.148823][T27384] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5658'. [ 837.163868][T27386] loop5: detected capacity change from 0 to 512 [ 837.172351][T27386] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 837.184036][T27386] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 837.194327][T27386] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.5659: Corrupt directory, running e2fsck is recommended [ 837.207615][T27386] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 837.216166][T27386] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.5659: corrupted in-inode xattr: invalid ea_ino [ 837.229791][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 837.236230][ C0] EXT4-fs (loop5): initial error at time 1773305014: ext4_iget_extra_inode:5025: inode 15 [ 837.246154][ C0] EXT4-fs (loop5): last error at time 1773305014: ext4_iget_extra_inode:5025: inode 15 [ 837.249900][T27386] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5659: couldn't read orphan inode 15 (err -117) [ 837.267794][T27386] loop5: lost filesystem error report for type 5 error -117 [ 837.268327][T27386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 837.309787][T27389] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 837.334218][T25951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.350158][T15049] usb usb6-port1: unable to enumerate USB device [ 837.388674][T27399] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5664'. [ 837.413814][T27401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5665'. [ 837.569138][T27403] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.636878][T27403] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.691248][T27409] netlink: 392 bytes leftover after parsing attributes in process `syz.3.5667'. [ 837.733138][T27403] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.901437][T27403] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.226560][ T4134] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 838.271403][ T4134] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 838.503316][T27424] siw: device registration error -23 [ 838.526868][T11715] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 838.546483][T11715] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 838.698431][T27433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5676'. [ 838.831013][T27446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5682'. [ 838.848810][T27446] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27446 comm=syz.2.5682 [ 838.879521][T27444] loop3: detected capacity change from 0 to 512 [ 838.894199][T27444] EXT4-fs: Ignoring removed nobh option [ 838.919153][T27444] EXT4-fs (loop3): orphan cleanup on readonly fs [ 838.927650][T27444] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.5680: EA inode hash validation failed [ 838.941713][T27444] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.5680: corrupted inode contents [ 838.954080][T27444] fserror_report: 8 callbacks suppressed [ 838.954227][T27444] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 838.962090][T27444] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.5680: mark_inode_dirty error [ 838.971781][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 838.971858][ C1] EXT4-fs (loop3): initial error at time 1773305015: ext4_do_update_inode:5569: inode 15 [ 838.972138][ C1] EXT4-fs (loop3): last error at time 1773305015: ext4_do_update_inode:5569: inode 15 [ 839.019995][T27444] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 839.021678][T27444] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.5680: corrupted inode contents [ 839.052221][T27444] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 839.054929][T27444] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.5680: mark_inode_dirty error [ 839.098877][T27444] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 839.100731][T27444] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.5680: mark inode dirty (error -117) [ 839.130823][T27444] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 839.131977][T27444] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 839.153364][T27444] EXT4-fs (loop3): 1 orphan inode deleted [ 839.163220][T27452] vfat: Unknown parameter '4)Um&f|O\0x000000000000000dxOw:;@ʎ6+HޠKZ*' [ 839.188072][T27444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 839.268134][T14371] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.359345][T27463] lo speed is unknown, defaulting to 1000 [ 839.365757][T27463] lo speed is unknown, defaulting to 1000 [ 839.758863][T27470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5690'. [ 839.787521][T27468] set_capacity_and_notify: 1 callbacks suppressed [ 839.787555][T27468] loop9: detected capacity change from 0 to 764 [ 839.826820][T27468] rock: directory entry would overflow storage [ 839.833395][T27468] rock: sig=0x4f50, size=4, remaining=3 [ 839.839427][T27468] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 839.888647][T27468] Symlink component flag not implemented [ 839.900045][T27468] Symlink component flag not implemented (129) [ 839.913604][T27468] rock: directory entry would overflow storage [ 839.920321][T27468] rock: sig=0x4f50, size=4, remaining=3 [ 839.926543][T27468] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 840.141322][T27496] siw: device registration error -23 [ 840.286576][T27501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5702'. [ 840.593039][T27502] lo speed is unknown, defaulting to 1000 [ 840.599388][T27502] lo speed is unknown, defaulting to 1000 [ 840.766847][ T28] kauditd_printk_skb: 1107 callbacks suppressed [ 840.766898][ T28] audit: type=1326 audit(1773305017.586:32765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27508 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 840.797112][ T28] audit: type=1326 audit(1773305017.586:32766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27508 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 840.821833][ T28] audit: type=1326 audit(1773305017.586:32767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27508 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 840.845454][ T28] audit: type=1326 audit(1773305017.586:32768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27508 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 840.869035][ T28] audit: type=1326 audit(1773305017.586:32769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27508 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 840.892660][ T28] audit: type=1326 audit(1773305017.596:32770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27508 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 840.916340][ T28] audit: type=1326 audit(1773305017.596:32771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27508 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 841.006582][T27518] FAULT_INJECTION: forcing a failure. [ 841.006582][T27518] name failslab, interval 1, probability 0, space 0, times 0 [ 841.140336][ T28] audit: type=1326 audit(1773305017.596:32772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27508 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 841.168140][T27518] CPU: 1 UID: 0 PID: 27518 Comm: syz.9.5708 Tainted: G W syzkaller #0 PREEMPT(full) [ 841.168173][T27518] Tainted: [W]=WARN [ 841.168242][T27518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 841.168254][T27518] Call Trace: [ 841.168260][T27518] [ 841.168267][T27518] __dump_stack+0x1d/0x30 [ 841.168290][T27518] dump_stack_lvl+0x95/0xd0 [ 841.168313][T27518] dump_stack+0x15/0x1b [ 841.168349][T27518] should_fail_ex+0x263/0x280 [ 841.168419][T27518] should_failslab+0x8c/0xb0 [ 841.168442][T27518] __kmalloc_noprof+0xb8/0x4e0 [ 841.168463][T27518] ? __se_sys_futex_waitv+0x101/0x1c0 [ 841.168489][T27518] __se_sys_futex_waitv+0x101/0x1c0 [ 841.168560][T27518] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 841.168588][T27518] __x64_sys_futex_waitv+0x67/0x80 [ 841.168624][T27518] x64_sys_call+0x2f5b/0x3020 [ 841.168648][T27518] do_syscall_64+0x12c/0x370 [ 841.168688][T27518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.168712][T27518] RIP: 0033:0x7fae0cb1c799 [ 841.168729][T27518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.168748][T27518] RSP: 002b:00007fae0b577028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 841.168768][T27518] RAX: ffffffffffffffda RBX: 00007fae0cd95fa0 RCX: 00007fae0cb1c799 [ 841.168850][T27518] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000580 [ 841.168862][T27518] RBP: 00007fae0b577090 R08: 0000000000000000 R09: 0000000000000000 [ 841.168876][T27518] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 841.168890][T27518] R13: 00007fae0cd96038 R14: 00007fae0cd95fa0 R15: 00007ffc50e20868 [ 841.168910][T27518] [ 841.340423][ T28] audit: type=1326 audit(1773305017.596:32773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27508 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 841.461386][T27523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5709'. [ 841.470355][ T28] audit: type=1326 audit(1773305017.596:32774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27508 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 841.508641][T27523] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5709'. [ 841.588173][T27525] loop3: detected capacity change from 0 to 512 [ 841.735122][T27525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.767573][T27525] ext4 filesystem being mounted at /589/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 842.188362][T14371] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.216144][T27534] loop9: detected capacity change from 0 to 512 [ 842.309734][T27534] EXT4-fs: Ignoring removed nobh option [ 842.337240][T27534] EXT4-fs (loop9): orphan cleanup on readonly fs [ 842.350088][T27534] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.5713: EA inode hash validation failed [ 842.386811][T27534] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #15: comm syz.9.5713: corrupted inode contents [ 842.402062][T27534] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 842.403195][T27534] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #15: comm syz.9.5713: mark_inode_dirty error [ 842.414338][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 842.414460][ C0] EXT4-fs (loop9): initial error at time 1773305019: ext4_do_update_inode:5569: inode 15 [ 842.414607][ C0] EXT4-fs (loop9): last error at time 1773305019: ext4_do_update_inode:5569: inode 15 [ 842.456066][T27534] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 842.457557][T27534] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #15: comm syz.9.5713: corrupted inode contents [ 842.480648][T27534] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 842.481558][T27534] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2999: inode #15: comm syz.9.5713: mark_inode_dirty error [ 842.506278][T27534] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 842.507492][T27534] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3002: inode #15: comm syz.9.5713: mark inode dirty (error -117) [ 842.531124][T27534] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 842.531872][T27534] EXT4-fs warning (device loop9): ext4_evict_inode:275: xattr delete (err -117) [ 842.552790][T27534] EXT4-fs (loop9): 1 orphan inode deleted [ 842.567759][T27534] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 842.675441][T21818] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.001227][T27551] siw: device registration error -23 [ 843.084351][T15047] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 843.307849][T27557] lo speed is unknown, defaulting to 1000 [ 843.314579][T27557] lo speed is unknown, defaulting to 1000 [ 843.684767][T15047] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 843.926825][T27568] loop3: detected capacity change from 0 to 128 [ 844.212121][T27591] loop2: detected capacity change from 0 to 512 [ 844.265054][T27591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 844.282113][T27591] ext4 filesystem being mounted at /551/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 844.307481][T15885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.411080][T27600] loop2: detected capacity change from 0 to 512 [ 844.499261][T27601] lo speed is unknown, defaulting to 1000 [ 844.505766][T27601] lo speed is unknown, defaulting to 1000 [ 844.763779][T27600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 844.897377][T27610] hub 8-0:1.0: USB hub found [ 844.903130][T27610] hub 8-0:1.0: 8 ports detected [ 844.915442][T27610] netlink: 'syz.5.5736': attribute type 36 has an invalid length. [ 844.928843][T27610] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 844.938720][T27610] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 844.965738][T27600] ext4 filesystem being mounted at /552/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 845.357493][T15885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.585960][T27635] loop2: detected capacity change from 0 to 128 [ 845.773585][ T28] kauditd_printk_skb: 1098 callbacks suppressed [ 845.773611][ T28] audit: type=1326 audit(1773305022.596:33873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27627 comm="syz.2.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe06233cfce code=0x7ffc0000 [ 845.829171][ T28] audit: type=1326 audit(1773305022.636:33874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27627 comm="syz.2.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe06233cfce code=0x7ffc0000 [ 845.879293][T27644] lo speed is unknown, defaulting to 1000 [ 845.885829][T27644] lo speed is unknown, defaulting to 1000 [ 846.059644][ T28] audit: type=1326 audit(1773305022.636:33875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27627 comm="syz.2.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe06233cfce code=0x7ffc0000 [ 846.132823][ T28] audit: type=1326 audit(1773305022.636:33876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27627 comm="syz.2.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe06233cfce code=0x7ffc0000 [ 846.157193][ T28] audit: type=1326 audit(1773305022.636:33877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27627 comm="syz.2.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe06233cfce code=0x7ffc0000 [ 846.181658][ T28] audit: type=1326 audit(1773305022.636:33878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27627 comm="syz.2.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe06233cfce code=0x7ffc0000 [ 846.207018][ T28] audit: type=1326 audit(1773305022.676:33879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27627 comm="syz.2.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe06233cfce code=0x7ffc0000 [ 846.231400][ T28] audit: type=1326 audit(1773305022.676:33880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27627 comm="syz.2.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe06233cfce code=0x7ffc0000 [ 846.255954][ T28] audit: type=1326 audit(1773305022.846:33881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27627 comm="syz.2.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe06233cfce code=0x7ffc0000 [ 846.280016][ T28] audit: type=1326 audit(1773305022.846:33882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27627 comm="syz.2.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe06233cfce code=0x7ffc0000 [ 846.363899][T27647] loop9: detected capacity change from 0 to 128 [ 846.397534][T27649] FAULT_INJECTION: forcing a failure. [ 846.397534][T27649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.428725][T27651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27651 comm=syz.0.5753 [ 846.430098][T27649] CPU: 1 UID: 0 PID: 27649 Comm: syz.2.5752 Tainted: G W syzkaller #0 PREEMPT(full) [ 846.430198][T27649] Tainted: [W]=WARN [ 846.430205][T27649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 846.430217][T27649] Call Trace: [ 846.430224][T27649] [ 846.430231][T27649] __dump_stack+0x1d/0x30 [ 846.430258][T27649] dump_stack_lvl+0x95/0xd0 [ 846.430283][T27649] dump_stack+0x15/0x1b [ 846.430305][T27649] should_fail_ex+0x263/0x280 [ 846.430329][T27649] should_fail+0xb/0x20 [ 846.430428][T27649] should_fail_usercopy+0x1a/0x20 [ 846.430453][T27649] _copy_to_user+0x20/0xa0 [ 846.430558][T27649] simple_read_from_buffer+0xb5/0x130 [ 846.430581][T27649] proc_fail_nth_read+0x10e/0x150 [ 846.430610][T27649] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 846.430682][T27649] vfs_read+0x1ab/0x7f0 [ 846.430711][T27649] ? __rcu_read_unlock+0x4e/0x70 [ 846.430773][T27649] ? __fget_files+0x184/0x1c0 [ 846.430833][T27649] ? mutex_lock+0x57/0x90 [ 846.430930][T27649] ksys_read+0xdc/0x1a0 [ 846.430961][T27649] __x64_sys_read+0x40/0x50 [ 846.430978][T27649] x64_sys_call+0x2886/0x3020 [ 846.431003][T27649] do_syscall_64+0x12c/0x370 [ 846.431031][T27649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.431057][T27649] RIP: 0033:0x7fe06233cfce [ 846.431073][T27649] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 846.431091][T27649] RSP: 002b:00007fe060dd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 846.431111][T27649] RAX: ffffffffffffffda RBX: 00007fe060dd76c0 RCX: 00007fe06233cfce [ 846.431147][T27649] RDX: 000000000000000f RSI: 00007fe060dd70a0 RDI: 0000000000000004 [ 846.431160][T27649] RBP: 00007fe060dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 846.431173][T27649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.431185][T27649] R13: 00007fe0625f6038 R14: 00007fe0625f5fa0 R15: 00007fffb04242a8 [ 846.431204][T27649] [ 846.855541][T27669] hub 8-0:1.0: USB hub found [ 846.860367][T27669] hub 8-0:1.0: 8 ports detected [ 846.871480][T27669] netlink: 'syz.0.5757': attribute type 36 has an invalid length. [ 846.885227][T27669] bridge15: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 846.895204][T27669] bridge15: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 847.670316][T27655] lo speed is unknown, defaulting to 1000 [ 847.676422][T27655] lo speed is unknown, defaulting to 1000 [ 847.694480][T27681] loop5: detected capacity change from 0 to 128 [ 847.958766][T27696] hub 8-0:1.0: USB hub found [ 847.963520][T27696] hub 8-0:1.0: 8 ports detected [ 847.977766][T27696] netlink: 'syz.5.5764': attribute type 36 has an invalid length. [ 848.630913][T11718] bond0 (unregistering): left promiscuous mode [ 848.650519][T11718] bond0 (unregistering): Released all slaves [ 848.658193][T11718] bond1 (unregistering): Released all slaves [ 848.678449][T27696] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 848.688369][T27696] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 848.731108][T27708] lo speed is unknown, defaulting to 1000 [ 848.737556][T27708] lo speed is unknown, defaulting to 1000 [ 848.982974][T11718] tipc: Left network mode [ 849.052825][T11718] IPVS: stopping backup sync thread 27354 ... [ 849.070237][T27655] chnl_net:caif_netlink_parms(): no params data found [ 849.158815][T11718] bond_slave_0: left promiscuous mode [ 849.235338][T27732] hub 8-0:1.0: USB hub found [ 849.240160][T27732] hub 8-0:1.0: 8 ports detected [ 849.249485][T27732] netlink: 'syz.2.5770': attribute type 36 has an invalid length. [ 849.340150][T11718] hsr_slave_0: left promiscuous mode [ 849.494742][T11718] hsr_slave_1: left promiscuous mode [ 849.673160][T11718] team0 (unregistering): Port device macvlan1 removed [ 849.824046][T27655] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.831232][T27655] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.838472][T27655] bridge_slave_0: entered allmulticast mode [ 849.845266][T27655] bridge_slave_0: entered promiscuous mode [ 849.854169][T27732] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 849.864149][T27732] bridge13: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 849.889474][T27655] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.897271][T27655] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.905183][T27655] bridge_slave_1: entered allmulticast mode [ 850.045837][T27655] bridge_slave_1: entered promiscuous mode [ 850.147647][T27747] wireguard0: entered promiscuous mode [ 850.157335][T27749] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5775'. [ 850.166782][T27747] wireguard0: entered allmulticast mode [ 850.226169][T27655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 850.272476][T27655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.400070][T27655] team0: Port device team_slave_0 added [ 850.502924][T27655] team0: Port device team_slave_1 added [ 850.677386][T27655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.709797][T27655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.820491][T27655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.832977][ T28] kauditd_printk_skb: 342 callbacks suppressed [ 850.832989][ T28] audit: type=1400 audit(1773305027.656:34225): avc: denied { append } for pid=27777 comm="syz.9.5782" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 850.881390][T27655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.888426][T27655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.914420][T27655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.941105][T27655] hsr_slave_0: entered promiscuous mode [ 850.947093][T27655] hsr_slave_1: entered promiscuous mode [ 850.952964][T27655] debugfs: 'hsr0' already exists in 'hsr' [ 850.958706][T27655] Cannot create hsr debugfs directory [ 851.332455][T27785] lo speed is unknown, defaulting to 1000 [ 851.338692][T27785] lo speed is unknown, defaulting to 1000 [ 851.489760][ T28] audit: type=1400 audit(1773305027.696:34226): avc: denied { bind } for pid=27777 comm="syz.9.5782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 851.656846][ T28] audit: type=1400 audit(1773305027.696:34227): avc: denied { write } for pid=27777 comm="syz.9.5782" path="socket:[86563]" dev="sockfs" ino=86563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 851.761132][T27794] 9pnet_fd: p9_fd_create_unix (27794): problem connecting socket: ./file0: -2 [ 851.775566][T27797] loop5: detected capacity change from 0 to 1024 [ 851.798617][T27797] EXT4-fs: Ignoring removed mblk_io_submit option [ 851.842970][T27797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 851.858961][T11718] IPVS: stop unused estimator thread 0... [ 851.866486][T27803] loop2: detected capacity change from 0 to 512 [ 851.912628][T27803] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #3: comm syz.2.5786: corrupted inode contents [ 851.931167][ T28] audit: type=1326 audit(1773305028.756:34228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27815 comm="syz.0.5788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 851.937364][T27803] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 851.955451][T27803] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #3: comm syz.2.5786: mark_inode_dirty error [ 851.964569][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 851.964590][ C1] EXT4-fs (loop2): initial error at time 1773305028: ext4_do_update_inode:5569: inode 3 [ 851.964621][ C1] EXT4-fs (loop2): last error at time 1773305028: ext4_do_update_inode:5569: inode 3 [ 852.003121][T27803] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 852.005397][T27803] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #3: comm syz.2.5786: corrupted inode contents [ 852.013261][ T28] audit: type=1326 audit(1773305028.756:34229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27815 comm="syz.0.5788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 852.050926][ T28] audit: type=1326 audit(1773305028.756:34230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27815 comm="syz.0.5788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 852.074729][ T28] audit: type=1326 audit(1773305028.756:34231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27815 comm="syz.0.5788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f554f13cfce code=0x7ffc0000 [ 852.075567][T27803] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 852.098333][ T28] audit: type=1326 audit(1773305028.756:34232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27815 comm="syz.0.5788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 852.131798][ T28] audit: type=1326 audit(1773305028.756:34233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27815 comm="syz.0.5788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 852.155660][ T28] audit: type=1326 audit(1773305028.756:34234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27815 comm="syz.0.5788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 852.182982][T27803] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.5786: mark_inode_dirty error [ 852.195190][T27803] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 852.195585][T27803] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.5786: Failed to acquire dquot type 0 [ 852.216145][T27803] loop2: lost filesystem error report for type 5 error -117 [ 852.220267][T27825] loop9: detected capacity change from 0 to 128 [ 852.243017][T27825] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 852.258649][T27835] FAULT_INJECTION: forcing a failure. [ 852.258649][T27835] name failslab, interval 1, probability 0, space 0, times 0 [ 852.273211][T25951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.307283][T27825] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 852.317820][T27655] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 852.320393][T27835] CPU: 1 UID: 0 PID: 27835 Comm: syz.0.5789 Tainted: G W syzkaller #0 PREEMPT(full) [ 852.320434][T27835] Tainted: [W]=WARN [ 852.320441][T27835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 852.320460][T27835] Call Trace: [ 852.320466][T27835] [ 852.320474][T27835] __dump_stack+0x1d/0x30 [ 852.320500][T27835] dump_stack_lvl+0x95/0xd0 [ 852.320563][T27835] dump_stack+0x15/0x1b [ 852.320584][T27835] should_fail_ex+0x263/0x280 [ 852.320607][T27835] ? ip_set_create+0x1ec/0x970 [ 852.320634][T27835] should_failslab+0x8c/0xb0 [ 852.320656][T27835] __kmalloc_cache_noprof+0x5f/0x410 [ 852.320708][T27835] ip_set_create+0x1ec/0x970 [ 852.320822][T27835] ? __nla_parse+0x40/0x60 [ 852.320847][T27835] nfnetlink_rcv_msg+0x509/0x5d0 [ 852.320883][T27835] netlink_rcv_skb+0x123/0x220 [ 852.320909][T27835] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 852.320998][T27835] nfnetlink_rcv+0x167/0x1720 [ 852.321098][T27835] ? xas_load+0x413/0x430 [ 852.321126][T27835] ? xas_load+0x413/0x430 [ 852.321155][T27835] ? __rcu_read_unlock+0x4e/0x70 [ 852.321175][T27835] ? xa_load+0xb1/0xe0 [ 852.321269][T27835] ? __account_obj_stock+0x211/0x350 [ 852.321291][T27835] ? obj_cgroup_charge_account+0x122/0x1a0 [ 852.321358][T27835] ? should_fail_ex+0x30/0x280 [ 852.321380][T27835] ? __rcu_read_unlock+0x4e/0x70 [ 852.321406][T27835] ? avc_has_perm_noaudit+0xab/0x130 [ 852.321485][T27835] ? _raw_spin_lock_bh+0x56/0xb0 [ 852.321558][T27835] ? _raw_spin_unlock_bh+0x18/0x20 [ 852.321597][T27835] ? selinux_nlmsg_lookup+0x99/0x890 [ 852.321628][T27835] ? __rcu_read_unlock+0x33/0x70 [ 852.321678][T27835] ? __netlink_lookup+0x276/0x2b0 [ 852.321736][T27835] netlink_unicast+0x5c0/0x690 [ 852.321762][T27835] netlink_sendmsg+0x5c8/0x6f0 [ 852.321833][T27835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 852.321899][T27835] ____sys_sendmsg+0x563/0x5b0 [ 852.321925][T27835] ___sys_sendmsg+0x195/0x1e0 [ 852.321955][T27835] __x64_sys_sendmsg+0xd4/0x160 [ 852.322006][T27835] x64_sys_call+0x194c/0x3020 [ 852.322036][T27835] do_syscall_64+0x12c/0x370 [ 852.322057][T27835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.322080][T27835] RIP: 0033:0x7f554f17c799 [ 852.322096][T27835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.322164][T27835] RSP: 002b:00007f554dbd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.322186][T27835] RAX: ffffffffffffffda RBX: 00007f554f3f5fa0 RCX: 00007f554f17c799 [ 852.322200][T27835] RDX: 00000000000040c0 RSI: 0000200000000040 RDI: 0000000000000003 [ 852.322213][T27835] RBP: 00007f554dbd7090 R08: 0000000000000000 R09: 0000000000000000 [ 852.322227][T27835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.322239][T27835] R13: 00007f554f3f6038 R14: 00007f554f3f5fa0 R15: 00007fff8ad28628 [ 852.322258][T27835] [ 852.450749][T27803] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.5786: corrupted inode contents [ 852.521930][T27847] loop5: detected capacity change from 0 to 512 [ 852.554279][T27803] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 852.580383][T27847] EXT4-fs: Ignoring removed nobh option [ 852.593324][T27803] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #16: comm syz.2.5786: mark_inode_dirty error [ 852.673245][T27655] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 852.690116][T27655] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 852.712633][T27655] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 852.728497][T27803] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 852.732868][T27803] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.5786: corrupted inode contents [ 852.736746][T27847] EXT4-fs (loop5): orphan cleanup on readonly fs [ 852.752933][T27803] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 852.780351][T27803] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.5786: mark_inode_dirty error [ 852.832329][T27872] 9pnet_fd: p9_fd_create_unix (27872): problem connecting socket: ./file0: -2 [ 852.848974][T27847] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.5792: EA inode hash validation failed [ 852.861831][T27655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.883409][T27803] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 852.883626][T27803] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.5786: corrupted inode contents [ 852.896402][T27655] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.925976][T27847] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.5792: corrupted inode contents [ 852.959290][T27883] loop9: detected capacity change from 0 to 128 [ 852.961856][T11715] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.972701][T11715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.988192][T27803] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 852.989829][T27803] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 853.012949][T11715] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.020048][T11715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.027799][T27847] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 853.028660][T27847] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.5792: mark_inode_dirty error [ 853.038229][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 853.038364][ C0] EXT4-fs (loop5): initial error at time 1773305029: ext4_do_update_inode:5569: inode 15 [ 853.038668][ C0] EXT4-fs (loop5): last error at time 1773305029: ext4_do_update_inode:5569: inode 15 [ 853.105194][T27803] loop2: lost filesystem error report for type 5 error -117 [ 853.105419][T27803] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.5786: corrupted inode contents [ 853.120672][T27655] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 853.136209][T27847] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.5792: corrupted inode contents [ 853.151056][T27803] EXT4-fs error (device loop2): ext4_truncate:4587: inode #16: comm syz.2.5786: mark_inode_dirty error [ 853.166610][T27655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 853.177515][T27847] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.5792: mark_inode_dirty error [ 853.181427][T27803] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 853.208678][T27847] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.5792: mark inode dirty (error -117) [ 853.248772][T27803] loop2: lost filesystem error report for type 5 error -117 [ 853.251676][T27803] EXT4-fs (loop2): 1 truncate cleaned up [ 853.266361][T27847] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 853.276703][T27847] EXT4-fs (loop5): 1 orphan inode deleted [ 853.311678][T27847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 853.352416][T27655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.372060][T27803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.417851][T27803] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 853.491977][T25951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.536712][T27803] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #3: comm syz.2.5786: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 853.536712][T27803] [ 853.685416][T27935] lo speed is unknown, defaulting to 1000 [ 853.698485][T27935] lo speed is unknown, defaulting to 1000 [ 853.717483][T27655] veth0_vlan: entered promiscuous mode [ 853.723676][T27803] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 853.727494][T27655] veth1_vlan: entered promiscuous mode [ 853.767255][T27655] veth0_macvtap: entered promiscuous mode [ 853.781685][T27655] veth1_macvtap: entered promiscuous mode [ 853.788983][T15885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.800205][T27655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.829339][T27655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.854133][T14685] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.856272][T27947] loop2: detected capacity change from 0 to 512 [ 853.869383][T11608] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.888460][T11608] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.920420][T27947] journal_path: Non-blockdev passed as './file0' [ 853.926857][T27947] EXT4-fs: error: could not find journal device path [ 853.953422][T11608] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.092411][T27929] pim6reg: entered allmulticast mode [ 854.105473][T27929] pim6reg: left allmulticast mode [ 854.220923][T27961] loop3: detected capacity change from 0 to 1024 [ 854.288099][T27961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 854.329412][T27961] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 854.365658][T27967] loop2: detected capacity change from 0 to 128 [ 854.512841][T27980] loop2: detected capacity change from 0 to 512 [ 855.350241][T27980] journal_path: Non-blockdev passed as './file0' [ 855.356802][T27980] EXT4-fs: error: could not find journal device path [ 855.769842][T27809] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 855.877014][T27992] loop2: detected capacity change from 0 to 128 [ 855.888907][ T28] kauditd_printk_skb: 578 callbacks suppressed [ 855.888922][ T28] audit: type=1326 audit(1773305032.716:34811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27994 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8544f2c799 code=0x7ffc0000 [ 855.931940][T27995] lo speed is unknown, defaulting to 1000 [ 855.950925][T27996] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5823'. [ 855.978800][T27995] lo speed is unknown, defaulting to 1000 [ 855.989509][ T28] audit: type=1326 audit(1773305032.716:34812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27994 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8544f2c799 code=0x7ffc0000 [ 856.037934][ T28] audit: type=1326 audit(1773305032.716:34813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27994 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8544f2c799 code=0x7ffc0000 [ 856.089845][ T28] audit: type=1326 audit(1773305032.716:34814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27994 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8544f2c799 code=0x7ffc0000 [ 856.131450][ T28] audit: type=1326 audit(1773305032.716:34815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27994 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8544f2c799 code=0x7ffc0000 [ 856.157654][ T28] audit: type=1326 audit(1773305032.716:34816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27994 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8544f2c799 code=0x7ffc0000 [ 856.181555][ T28] audit: type=1326 audit(1773305032.716:34817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27994 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8544f2c799 code=0x7ffc0000 [ 856.205415][ T28] audit: type=1326 audit(1773305032.716:34818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27994 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8544f2c799 code=0x7ffc0000 [ 856.229523][ T28] audit: type=1326 audit(1773305032.776:34819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27994 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8544f2c799 code=0x7ffc0000 [ 856.262691][ T28] audit: type=1326 audit(1773305032.776:34820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27994 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8544f2c502 code=0x7ffc0000 [ 856.636568][T14685] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm kworker/u8:27: lblock 0 mapped to illegal pblock 0 (length 6) [ 856.683540][T28009] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 856.903913][T14685] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 856.925526][T28009] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 856.936990][T28015] set_capacity_and_notify: 1 callbacks suppressed [ 856.937014][T28015] loop5: detected capacity change from 0 to 512 [ 856.959693][T28009] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5829: Corrupt directory, running e2fsck is recommended [ 856.975770][T14685] EXT4-fs (loop3): This should not happen!! Data will be lost [ 856.975770][T14685] [ 856.995888][T28015] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 857.022469][T28015] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 857.023429][T28009] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 857.037391][T28015] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5828: bg 0: block 248: padding at end of block bitmap is not set [ 857.046593][T14685] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:27: lblock 8 mapped to illegal pblock 8 (length 8) [ 857.060316][T28015] loop5: lost filesystem error report for type 5 error -117 [ 857.074722][T28009] EXT4-fs error (device loop9): ext4_iget_extra_inode:5025: inode #15: comm syz.9.5829: corrupted in-inode xattr: invalid ea_ino [ 857.074851][T28015] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.5828: Failed to acquire dquot type 1 [ 857.082046][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 857.082068][ C0] EXT4-fs (loop5): last error at time 1773305033: ext4_validate_block_bitmap:441 [ 857.082509][T28009] fserror_report: 6 callbacks suppressed [ 857.082520][T28009] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 857.097870][T14685] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 857.130096][T28015] loop5: lost filesystem error report for type 5 error -117 [ 857.139802][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 857.159622][T14685] EXT4-fs (loop3): This should not happen!! Data will be lost [ 857.159622][T14685] [ 857.162861][ C1] EXT4-fs (loop9): initial error at time 1773305033: ext4_iget_extra_inode:5025: inode 15 [ 857.179202][T28015] EXT4-fs (loop5): 1 truncate cleaned up [ 857.182383][ C1] EXT4-fs (loop9): last error at time 1773305033: ext4_iget_extra_inode:5025: inode 15 [ 857.188567][T28015] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 857.197719][T28009] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.5829: couldn't read orphan inode 15 (err -117) [ 857.213439][T28015] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 857.232556][T28018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5830'. [ 857.249674][T28009] loop9: lost filesystem error report for type 5 error -117 [ 857.250362][T28009] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 857.356836][T21818] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.400004][T28014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5828'. [ 857.417560][T28014] loop5: detected capacity change from 0 to 256 [ 857.438962][T28030] loop9: detected capacity change from 0 to 1024 [ 857.448633][T28014] msdos: Unexpected value for 'sys_immutable' [ 857.455718][T27655] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 857.505687][T28034] loop2: detected capacity change from 0 to 1024 [ 857.535123][T28030] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 857.547763][T28034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 857.567078][T28034] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 857.578072][T28041] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5838'. [ 857.578110][T28030] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 857.741888][T28043] loop5: detected capacity change from 0 to 8192 [ 858.640207][T28051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28051 comm=syz.3.5839 [ 859.593021][T14685] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm kworker/u8:27: lblock 0 mapped to illegal pblock 0 (length 6) [ 859.641693][T14685] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 859.674617][T28043] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 859.696626][T14685] EXT4-fs (loop2): This should not happen!! Data will be lost [ 859.696626][T14685] [ 859.716340][T14685] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:27: lblock 8 mapped to illegal pblock 8 (length 8) [ 859.783815][T14685] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 859.851855][T14685] EXT4-fs (loop2): This should not happen!! Data will be lost [ 859.851855][T14685] [ 859.864310][T28063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5844'. [ 860.022305][T28077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5851'. [ 860.145819][T21818] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 860.210398][T28084] loop3: detected capacity change from 0 to 128 [ 860.272930][T15885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 860.727947][T28112] syzkaller0: entered promiscuous mode [ 860.756374][T28112] syzkaller0: entered allmulticast mode [ 860.937910][ T28] kauditd_printk_skb: 279 callbacks suppressed [ 860.937925][ T28] audit: type=1400 audit(1773305037.756:35098): avc: denied { create } for pid=28149 comm="syz.5.5859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 860.967526][ T28] audit: type=1400 audit(1773305037.786:35099): avc: denied { connect } for pid=28149 comm="syz.5.5859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 860.987928][ T28] audit: type=1400 audit(1773305037.786:35100): avc: denied { listen } for pid=28149 comm="syz.5.5859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 861.024580][ T28] audit: type=1326 audit(1773305037.846:35101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28158 comm="syz.0.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 861.032940][T28157] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 861.079324][ T28] audit: type=1326 audit(1773305037.846:35102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28158 comm="syz.0.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 861.085430][T28157] macvtap1: entered allmulticast mode [ 861.164430][T28157] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 861.173404][ T28] audit: type=1326 audit(1773305037.876:35103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28158 comm="syz.0.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 861.217691][ T28] audit: type=1326 audit(1773305037.876:35104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28158 comm="syz.0.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 861.241427][T28157] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 861.242018][ T28] audit: type=1326 audit(1773305037.876:35105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28158 comm="syz.0.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 861.248850][T28157] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 861.280528][ T28] audit: type=1326 audit(1773305037.876:35106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28158 comm="syz.0.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 861.304225][ T28] audit: type=1326 audit(1773305037.876:35107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28158 comm="syz.0.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554f17c799 code=0x7ffc0000 [ 861.694042][T28171] loop2: detected capacity change from 0 to 512 [ 861.749471][T28171] EXT4-fs: Ignoring removed nobh option [ 861.811002][T28171] EXT4-fs (loop2): orphan cleanup on readonly fs [ 861.827017][T28171] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.5865: EA inode hash validation failed [ 861.848202][T28171] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.5865: corrupted inode contents [ 862.025683][T28171] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 862.026652][T28171] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.5865: mark_inode_dirty error [ 862.036063][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 862.036141][ C1] EXT4-fs (loop2): initial error at time 1773305038: ext4_do_update_inode:5569: inode 15 [ 862.036380][ C1] EXT4-fs (loop2): last error at time 1773305038: ext4_do_update_inode:5569: inode 15 [ 862.075982][T28171] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 862.076904][T28171] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.5865: corrupted inode contents [ 862.100172][T28171] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 862.101125][T28171] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.5865: mark_inode_dirty error [ 862.123672][T28171] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 862.124597][T28171] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3002: inode #15: comm syz.2.5865: mark inode dirty (error -117) [ 862.150558][T28171] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 862.151545][T28171] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 862.171349][T28171] EXT4-fs (loop2): 1 orphan inode deleted [ 862.183599][T28171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 862.298317][T28169] lo speed is unknown, defaulting to 1000 [ 862.304544][T28169] lo speed is unknown, defaulting to 1000 [ 862.511002][T15885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.769761][T28182] loop2: detected capacity change from 0 to 512 [ 862.807499][T28182] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 862.830614][T28182] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 862.840867][T28182] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.5869: Corrupt directory, running e2fsck is recommended [ 862.854068][T28182] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 862.862430][T28182] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.5869: corrupted in-inode xattr: invalid ea_ino [ 862.876144][T28182] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 862.876295][T28182] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.5869: couldn't read orphan inode 15 (err -117) [ 862.885481][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 862.885500][ C0] EXT4-fs (loop2): initial error at time 1773305039: ext4_iget_extra_inode:5025: inode 15 [ 862.885527][ C0] EXT4-fs (loop2): last error at time 1773305039: ext4_iget_extra_inode:5025: inode 15 [ 862.924225][T28182] loop2: lost filesystem error report for type 5 error -117 [ 862.925559][T28182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.995717][T15885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.011231][T28193] loop9: detected capacity change from 0 to 128 [ 863.021063][T15885] ================================================================== [ 863.029164][T15885] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 863.036716][T15885] [ 863.039038][T15885] read-write to 0xffff888237d26668 of 1 bytes by task 3533 on cpu 1: [ 863.047099][T15885] folio_add_lru+0xa4/0x1e0 [ 863.051604][T15885] shmem_get_folio_gfp+0x7b0/0xd60 [ 863.056721][T15885] shmem_write_begin+0xfc/0x1f0 [ 863.061583][T15885] generic_perform_write+0x183/0x490 [ 863.066879][T15885] shmem_file_write_iter+0xc5/0xf0 [ 863.072004][T15885] vfs_write+0x5a6/0x9f0 [ 863.076265][T15885] ksys_write+0xdc/0x1a0 [ 863.080530][T15885] __x64_sys_write+0x40/0x50 [ 863.085138][T15885] x64_sys_call+0x27e1/0x3020 [ 863.089821][T15885] do_syscall_64+0x12c/0x370 [ 863.094402][T15885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.100290][T15885] [ 863.102604][T15885] read to 0xffff888237d26668 of 1 bytes by task 15885 on cpu 0: [ 863.110221][T15885] __lru_add_drain_all+0x17e/0x450 [ 863.115338][T15885] lru_add_drain_all+0x10/0x20 [ 863.120105][T15885] invalidate_bdev+0x47/0x70 [ 863.124690][T15885] ext4_put_super+0x624/0x7d0 [ 863.129373][T15885] generic_shutdown_super+0xee/0x220 [ 863.134668][T15885] kill_block_super+0x2a/0x70 [ 863.139358][T15885] ext4_kill_sb+0x42/0x80 [ 863.143694][T15885] deactivate_locked_super+0x75/0x1c0 [ 863.149075][T15885] deactivate_super+0x97/0xa0 [ 863.153759][T15885] cleanup_mnt+0x2bb/0x330 [ 863.158182][T15885] __cleanup_mnt+0x19/0x20 [ 863.162604][T15885] task_work_run+0x130/0x1a0 [ 863.167201][T15885] exit_to_user_mode_loop+0x1f4/0x6f0 [ 863.172574][T15885] do_syscall_64+0x249/0x370 [ 863.177157][T15885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.183062][T15885] [ 863.185420][T15885] value changed: 0x03 -> 0x04 [ 863.190086][T15885] [ 863.192402][T15885] Reported by Kernel Concurrency Sanitizer on: [ 863.198558][T15885] CPU: 0 UID: 0 PID: 15885 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 863.209757][T15885] Tainted: [W]=WARN [ 863.209766][T15885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 863.209778][T15885] ==================================================================