last executing test programs: 7m50.901715666s ago: executing program 32 (id=163): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x3, 0x6, 0x0, 0xa, 0x8, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94) 7m50.397817562s ago: executing program 33 (id=175): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@ipv4_getrule={0x1c, 0x22, 0x4, 0x70bd2b, 0x25dfdbff, {0x2, 0x90, 0x0, 0x39, 0x5, 0x0, 0x0, 0x7, 0x10010}}, 0x1c}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m49.878387479s ago: executing program 34 (id=185): socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x6044810}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) 7m43.45263797s ago: executing program 6 (id=176): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, 0x140f, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0xd, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x100000, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 7m42.494690931s ago: executing program 6 (id=256): socket$kcm(0x11, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x80040, 0x54) getxattr(&(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)=@known='system.posix_acl_access\x00', 0x0, 0x0) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10049, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x9, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x203fffffffff, 0xffffffffffffffff, 0xa) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x128, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000800}, 0x81) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000000)={0x3, 0x0, [0x0, 0x0, 0x0]}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") 7m40.043216688s ago: executing program 6 (id=270): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea5, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r0, 0x0, 0x44004) 7m39.921310661s ago: executing program 6 (id=272): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 7m39.850157513s ago: executing program 6 (id=274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x78}}, 0x80c4) 7m39.597483912s ago: executing program 35 (id=276): r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0xe000200c}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 7m39.554675303s ago: executing program 6 (id=279): io_setup(0x8, &(0x7f0000000600)=0x0) r1 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xc, r1, 0x0}]) 7m39.497420205s ago: executing program 36 (id=279): io_setup(0x8, &(0x7f0000000600)=0x0) r1 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xc, r1, 0x0}]) 7m38.801426408s ago: executing program 0 (id=281): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r0, 0x4001000000, 0x0) 7m38.684993641s ago: executing program 0 (id=282): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea5, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 7m38.612435242s ago: executing program 0 (id=283): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) 7m38.510757016s ago: executing program 0 (id=284): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 7m38.465004608s ago: executing program 0 (id=285): socket$kcm(0x11, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x80040, 0x54) getxattr(&(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)=@known='system.posix_acl_access\x00', 0x0, 0x0) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10049, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x9, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x203fffffffff, 0xffffffffffffffff, 0xa) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x12c, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x7}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000800}, 0x81) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000000)={0x3, 0x0, [0x0, 0x0, 0x0]}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") 7m38.250331634s ago: executing program 0 (id=286): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) dup2(0xffffffffffffffff, r0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x10, @empty, 0x4}], 0x1c) sendto$inet6(r0, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000680)=0xdb, 0x4) 7m38.224389535s ago: executing program 37 (id=286): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) dup2(0xffffffffffffffff, r0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x10, @empty, 0x4}], 0x1c) sendto$inet6(r0, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000680)=0xdb, 0x4) 7m37.331679833s ago: executing program 5 (id=290): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r0, 0x4001000000, 0x0) 7m37.218766107s ago: executing program 5 (id=291): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 7m37.140930309s ago: executing program 5 (id=292): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) 7m37.097208111s ago: executing program 5 (id=293): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 7m37.034879573s ago: executing program 5 (id=294): socket$kcm(0x11, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x80040, 0x54) getxattr(&(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)=@known='system.posix_acl_access\x00', 0x0, 0x0) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10049, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x9, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x203fffffffff, 0xffffffffffffffff, 0xa) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x12c, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x7}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000800}, 0x81) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000000)={0x3, 0x0, [0x0, 0x0, 0x0]}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") 7m36.758709701s ago: executing program 5 (id=295): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x18b) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f00000000c0)=0x18) 7m36.702651903s ago: executing program 38 (id=295): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x18b) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f00000000c0)=0x18) 7m9.619007766s ago: executing program 9 (id=498): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 7m9.481579191s ago: executing program 9 (id=501): socket$nl_audit(0x10, 0x3, 0x9) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="002289142464", @ANYRES64], 0xb2) 7m9.402748574s ago: executing program 9 (id=503): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x114, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xb}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0xa9f}, @filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x1, 0x7, 0x2, 0x0, 0x7, 0xd, 0x94, 0x2}}, @TCA_U32_ACT={0xc0, 0x7, [@m_csum={0xbc, 0x4, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4, 0xfffffffb}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x4, 0x1, 0xa, 0x928}, 0x60}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0x7a, 0x10000000, 0x5, 0x3}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc, 0x0, 0x1, 0xffffffff, 0x3}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x430800, 0x4, 0x7, 0x4}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x91}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 7m9.400279394s ago: executing program 9 (id=505): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 7m9.320158066s ago: executing program 9 (id=506): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x80002, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c00000010003704030000000300000000000000", @ANYRES32=r2, @ANYBLOB="0b1b0500000000005c0012800b00010069703667726500004c000280080001", @ANYRES32=r2, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fe"], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 7m6.40677654s ago: executing program 9 (id=512): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x20040010) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x4}, 0x80, 0x0}, 0x20000000) 7m5.794025069s ago: executing program 39 (id=512): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x20040010) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x4}, 0x80, 0x0}, 0x20000000) 6m50.640743092s ago: executing program 1 (id=620): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000) keyctl$get_security(0x11, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmsg(r5, &(0x7f0000002a80)={&(0x7f0000000100)=@can, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/32, 0x20}, {&(0x7f0000002780)=""/246, 0xf6}, {&(0x7f0000002880)=""/123, 0x7b}, {&(0x7f0000002900)=""/15, 0xf}, {&(0x7f0000002940)=""/74, 0x4a}], 0x6, &(0x7f0000002a40)=""/51, 0x33}, 0x2021) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c400000019000100feffff056663d600e000000200000000108da341c7120711363300a68e360000000000000000000000000000000000000000008700"/77, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 6m47.169114023s ago: executing program 1 (id=631): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0xffffffff}, 0x1b) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfbfffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x20000003}}, 0x10) bind$tipc(r1, 0x0, 0x0) 6m47.068049866s ago: executing program 1 (id=633): socket$unix(0x1, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 6m46.998619768s ago: executing program 1 (id=634): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 6m46.869669863s ago: executing program 1 (id=636): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031400d3fc142000004788031c09", 0xf, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m46.562341492s ago: executing program 1 (id=637): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 6m46.438646366s ago: executing program 40 (id=637): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4.410569636s ago: executing program 3 (id=2286): r0 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04004100000010"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000001c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000000)={[{@user_xattr}, {@norecovery}, {@norecovery}, {@errors_remount}, {@user_xattr}]}, 0x8, 0x661, &(0x7f00000007c0)="$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") 3.834021185s ago: executing program 7 (id=2289): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) preadv2(r0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) 3.764731337s ago: executing program 3 (id=2290): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@type_tag={0x7, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x2e, 0x30, 0x30, 0x5f, 0x2e, 0x30]}}, 0x0, 0x2c, 0x0, 0x1, 0x1ffffe}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xbf}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) modify_ldt$write2(0x11, &(0x7f00000002c0)={0x7, 0x1000, 0x2000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000240)={[{@grpquota}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@noblock_validity}]}, 0x3, 0x79b, &(0x7f0000001200)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0xb, 0x4, 0x4, 0xfffffff9}) 3.705706729s ago: executing program 7 (id=2291): unshare(0x400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) (fail_nth: 1) 3.334056131s ago: executing program 7 (id=2292): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x8002, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f00000005c0)={0x0, 0xc89e, 0xc000, 0xd, 0x10b}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4000845) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x1, 0x9, 'syz0\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x804718, &(0x7f00000002c0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@nouid32}, {@mblk_io_submit}, {@acl}, {@nomblk_io_submit}]}, 0x0, 0x497, &(0x7f0000002200)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x77}, 0x1, 0x0, 0x0, 0x20010080}, 0x4040015) perf_event_open$cgroup(0x0, r3, 0x4, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = socket$pppl2tp(0x18, 0x1, 0x1) write$cgroup_subtree(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x184a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) 3.252864094s ago: executing program 2 (id=2294): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000240)={[{@grpquota}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@noblock_validity}]}, 0x3, 0x79b, &(0x7f0000001200)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0xb, 0x4, 0x4, 0xfffffff9}) semop(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 3.163841787s ago: executing program 7 (id=2295): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040080) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x519, &(0x7f0000000f80)="$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") uname(0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) 3.116281778s ago: executing program 2 (id=2296): r0 = epoll_create1(0x80000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000b00)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x485, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYBLOB, @ANYRESOCT=r3], 0x50) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000400)={'lo\x00', 0x2b4b}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x102802, 0x31, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a900000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000064000380600000800c00018006000100d65b000050000b80200001800e000100636f6e6e6c696d69740000000c000280080001"], 0xb8}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x28203) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, 0x0, 0x4000080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000000010104000000e83d1a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028f14000180080001000000000008000200ac1e00010c000280050001000000000008000740000000010800164000000008"], 0x6c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) 2.854790257s ago: executing program 3 (id=2297): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x11340c, 0x8, 0x0, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0x565a3575}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x11e}, 0x0, 0x0, 0x7, 0x2, 0x1, 0x7, 0x8, 0x9, 0xb0, 0x9, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x61) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344, 0x41424344}, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x20, r4, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x240000c0) syz_emit_ethernet(0x16f, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, 'aRd', 0x139, 0x6, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@routing={0x87, 0x8, 0x0, 0x1, 0x0, [@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @empty]}, @dstopts={0x8, 0x7, '\x00', [@ra={0x5, 0x2, 0x401}, @calipso={0x7, 0x38, {0xf4f7ee705fffe0de, 0xc, 0x5, 0x7ff, [0x6, 0x8, 0x1, 0x6fa, 0x2, 0xd]}}]}, @srh={0x4, 0x6, 0x4, 0x3, 0x7, 0x20, 0x1000, [@empty, @mcast1, @local]}], {{0x4e22, 0x4e22, 0x41424344, r2, 0x1, 0x0, 0x10, 0x1, 0x8, 0x0, 0x3, {[@window={0x3, 0x3, 0x5}, @nop, @exp_fastopen={0xfe, 0xa, 0xf989, "54964b69e179"}, @sack_perm={0x4, 0x2}, @eol, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @generic={0x2, 0x2}, @fastopen={0x22, 0xc, "28310f129f2fbe5e9c03"}, @exp_smc={0xfe, 0x6}]}}, {"947c97d63b68eecb6ab3481201cb8018e26b4267db4eb563832c0857a0ed377d1599b8e8ab5ca2569fe0d5efb5548b33c4"}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x2, 0x90, [0x0, 0x0, 0x2000000008c0], 0x2, 0x0, &(0x7f00000008c0)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x108) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000640)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './cgroup/../file0\x00'}) syz_clone3(&(0x7f0000000040)={0x2a0a00300, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$BLKCRYPTOIMPORTKEY(r7, 0xc0401289, &(0x7f00000007c0)={&(0x7f0000000100)="0e25b906490b4911904d416b8ff5c13d2ee8a269a78d6e1fb6", 0x19, &(0x7f0000000780)=""/44, 0x2c}) 1.946959897s ago: executing program 8 (id=2301): preadv2(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) 1.54631804s ago: executing program 3 (id=2302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c29, 0x80, 0x0, 0x18000000}) io_uring_enter(r1, 0x0, 0x2, 0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.54602995s ago: executing program 8 (id=2303): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xbc9}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 1.545513049s ago: executing program 7 (id=2304): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) close(0xffffffffffffffff) r5 = socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0x2, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x200}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0e9}, 0x4000010) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r7 = fcntl$dupfd(r0, 0x0, r0) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000140)={&(0x7f0000000080)=[{0x0, 0x1, 0x0, {0x2, 0x8, 0x1}}], 0x1, 0x20, 0x8, 0x3}) sendmmsg$inet6(r7, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/160, 0xa0, 0x1, 0x0}, &(0x7f0000000180)=0x40) 1.54523592s ago: executing program 4 (id=2305): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x8002, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f00000005c0)={0x0, 0xc89e, 0xc000, 0xd, 0x10b}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4000845) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x1, 0x9, 'syz0\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x804718, &(0x7f00000002c0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@nouid32}, {@mblk_io_submit}, {@acl}, {@nomblk_io_submit}]}, 0x0, 0x497, &(0x7f0000002200)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x77}, 0x1, 0x0, 0x0, 0x20010080}, 0x4040015) perf_event_open$cgroup(0x0, r3, 0x4, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = socket$pppl2tp(0x18, 0x1, 0x1) write$cgroup_subtree(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x184a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) 1.426911803s ago: executing program 2 (id=2306): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) close(0xffffffffffffffff) r5 = socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0x2, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x200}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0e9}, 0x4000010) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r7 = fcntl$dupfd(r0, 0x0, r0) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000140)={&(0x7f0000000080)=[{0x0, 0x1, 0x0, {0x2, 0x8, 0x1}}], 0x1, 0x20, 0x8, 0x3}) sendmmsg$inet6(r7, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/160, 0xa0, 0x1, 0x0}, &(0x7f0000000180)=0x40) 873.856032ms ago: executing program 8 (id=2307): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000acc000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000009e000c0046723040dcf851353d80428b66c4a5c76fdd086344be5b4b365b030000000000000098b7647dd42e1f003e993562f77b29872355e30839152ef602e4e7b1a25f4123ba0b4f5889c3681c221c0b96e521524250432d6063a60098490ece73ddd10f0030be88fed0a90e3ad8f6863296818bb85f56f7ce8ea7f57bd1a124d9398abb1f83e8205bc2"], 0xf4}, 0x1, 0x0, 0x0, 0x4000855}, 0x24000840) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_flags=0x1000}) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000040a0102"], 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x24008000) io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) r2 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x103300, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e1208000c0002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001f", 0x6c}], 0x1}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r2, 0xc4c03d09, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400481d) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x200000}, 0x1c) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@enum={0x10, 0x6, 0x0, 0x6, 0x4, [{0xc, 0x8}, {0x0, 0x7}, {0x3, 0x7}, {0x8, 0xfffff000}, {0xc, 0x2}, {0xc, 0x7fffffff}]}, @typedef={0x10, 0x0, 0x0, 0x8, 0x4}, @float={0x10, 0x0, 0x0, 0x10, 0x4}]}}, &(0x7f00000002c0)=""/51, 0x6e, 0x33, 0x1, 0x400, 0x10000, @value=r3}, 0x28) 810.824994ms ago: executing program 4 (id=2308): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@type_tag={0x7, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x2e, 0x30, 0x30, 0x5f, 0x2e, 0x30]}}, 0x0, 0x2c, 0x0, 0x1, 0x1ffffe}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xbf}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) modify_ldt$write2(0x11, &(0x7f00000002c0)={0x7, 0x1000, 0x2000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000240)={[{@grpquota}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@noblock_validity}]}, 0x3, 0x79b, &(0x7f0000001200)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0xb, 0x4, 0x4, 0xfffffff9}) 716.704447ms ago: executing program 8 (id=2309): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') readv(r0, &(0x7f0000001440)=[{0x0}, {0x0, 0x61}], 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0) 688.892248ms ago: executing program 8 (id=2310): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f0000000700), 0x1, 0x459, &(0x7f0000000240)="$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") socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x10445, &(0x7f0000000240)={[{@jqfmt_vfsv1}, {@sysvgroups}]}, 0x3, 0x466, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk76/sW/ilcfQKAgKh5Jk5bSAxcQlTiAhASHcgxJWpW6DWqCRKsKCkLliCpxRxyR+As4wQUBJySu5YpQpQr10tKT0dq7tuPaTuomtak/H2njmX1k5ru7Y8/sxAlgaE2kP5KI7RFxJSLGa9mVO0zUXm5evzD3z/ULc0lUKm//nVT3u3H9wly+a37ctjxTiih8nsSeNuUunTt/arZcXjib5aeWT38wtXTu/AsnT8+eWDixcGbmyJFDB6dfOjzz4rrEmcZ1Y/fHi3t3vf7u5Tfnjl1+75fvkjz+ljjuSKHjloluhz1dqfRU3KDa0ZROio3kKodVxtutHe1yxMid1oxu0tNZzE75lRiPkWhcvPE4+llfKwdsqLHumy9WgPtY2psHhlH+QZ+Of/PlHnQ7Bsa1V2oDoDTum9lS21KsD+1HW8a362kiIo5dvPV1usTdPIcAAFijH9L+z/Pt+n+FeKhpv/9lcyiliPh/ROyMiMPZ8+MHI6r7PhwRj9SP2Lym8lsnSW7v/xSu9hzcGqT9v5ezua2V/b/6xE5pJMvtqMY/mhw/WV44kJ2T/TG6Kc1Pdynjx9d+/7LTtub+X7qk5ed9waweV4ubVh4zP7s8ezcxN7v2acTuYrv4k/pMQBIRuyJid49lnHz2272dtq0e/8aqfBPxTO36X4yW+HNJU67N/OTU5igvHJjK74rb/frbpbc6ld8cf7EP8afXf2vb+78efylpnq9duvMyLv3xRccxTa/3/1jyTmNFfqNOR4wlb9Qqna36aHZ5+exMY9c8X32drsW/f1/79r8zGmdiT0SkN/GjEfFYRDye1f2JiHgyIvZ1if/nV596v/f4N1Ya/3xE3MqeB6x+/RuJsWhdkyX+zH5Ztmbk1E/fryi0tEr8R5tH2+n1P1RN7c/WrOX9r2292iTu8vQBAADAf0IhIrZHUpispwuFycna3/A/EFsL5cWl5eeOL354Zr72HYFSjBbyJ13jTc9Dp7NhfZ6fackfzJ4bfzWypZqfnFssz/c7eBhy2zq0/9RfvmsB979ivysA9I32D8NL+4fhpf3D8GrT/rf0ox7AvVdt/y3/qumTPtUFuLdaPv9N+8EQMf6H4dVD+/eWAfcJjRmG0tKWWP1L8hIbkRgfjGr0mojCQFRjQBLpR+gAVGMdE/1+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFgf/wYAAP//g+zhUw==") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0xa8, 0x30, 0xb, 0x5, 0x0, {}, [{0x94, 0x1, [@m_ct={0x90, 0x1, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK_MASK={0xff28, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x40) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) creat(&(0x7f0000000840)='./file0\x00', 0x40) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 519.021843ms ago: executing program 4 (id=2311): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'dummy0\x00'}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}}, 0x800) 493.817464ms ago: executing program 3 (id=2312): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="e90c610faca201805d42bda3d78f9260c200000008004500001c0000e000031190780000000000000000"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="e90c610faca201805d42bda3d78f9260c200000008004500001c0000e000031190780000000000000000"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) 421.865646ms ago: executing program 4 (id=2313): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x11340c, 0x8, 0x0, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0x565a3575}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x11e}, 0x0, 0x0, 0x7, 0x2, 0x1, 0x7, 0x8, 0x9, 0xb0, 0x9, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x61) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344, 0x41424344}, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x20, r4, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x240000c0) syz_emit_ethernet(0x16f, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, 'aRd', 0x139, 0x6, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@routing={0x87, 0x8, 0x0, 0x1, 0x0, [@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @empty]}, @dstopts={0x8, 0x7, '\x00', [@ra={0x5, 0x2, 0x401}, @calipso={0x7, 0x38, {0xf4f7ee705fffe0de, 0xc, 0x5, 0x7ff, [0x6, 0x8, 0x1, 0x6fa, 0x2, 0xd]}}]}, @srh={0x4, 0x6, 0x4, 0x3, 0x7, 0x20, 0x1000, [@empty, @mcast1, @local]}], {{0x4e22, 0x4e22, 0x41424344, r2, 0x1, 0x0, 0x10, 0x1, 0x8, 0x0, 0x3, {[@window={0x3, 0x3, 0x5}, @nop, @exp_fastopen={0xfe, 0xa, 0xf989, "54964b69e179"}, @sack_perm={0x4, 0x2}, @eol, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @generic={0x2, 0x2}, @fastopen={0x22, 0xc, "28310f129f2fbe5e9c03"}, @exp_smc={0xfe, 0x6}]}}, {"947c97d63b68eecb6ab3481201cb8018e26b4267db4eb563832c0857a0ed377d1599b8e8ab5ca2569fe0d5efb5548b33c4"}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x2, 0x90, [0x0, 0x0, 0x2000000008c0], 0x2, 0x0, &(0x7f00000008c0)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x108) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000640)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './cgroup/../file0\x00'}) syz_clone3(&(0x7f0000000040)={0x2a0a00300, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$BLKCRYPTOIMPORTKEY(r7, 0xc0401289, &(0x7f00000007c0)={&(0x7f0000000100)="0e25b906490b4911904d416b8ff5c13d2ee8a269a78d6e1fb6", 0x19, &(0x7f0000000780)=""/44, 0x2c}) 414.534307ms ago: executing program 2 (id=2314): preadv2(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) 311.3267ms ago: executing program 8 (id=2315): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) getresuid(&(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xd, 0x0, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x44004) write$selinux_create(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x878b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46e, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYui4KGioId6jMm2hG4baaLYUmwqUi+CFPQsHgX/Am8iiHoSvOrFkxSK9tLqKTKzM+1mm02N2WRi9veDzb7vzrs7z5P5eud9dwPoWkPZnyRiR0T8EhEDjeriBkONpxvXzk/+de38ZBILC6//keTtrl87P1k2Ld+3vagMpxHph0mxksVmz547OVGv184U9dG5U2+Pzp4999S7pyZO1E7UTo8fOXL40Nizz4w/3ZE8s7yu73t/Zv/el9+8/Mrksctv/fBVFu+OYnlzHp0ylCX+50KuddnjnV5ZxXY2lZPeCgNhRXoiIttcffnxPxA9cWvjDcRLH1QaHLCmsmvTlvaL5xeATSyJqiMAqlFe6LP73/KxTl2PDeHq840boCzvG8WjsaQ30qJNX8v9bScNRcSx+b8/zx6xRuMQAADNPp787Gh/UV7c/0vjvvz5t/zvrmIOZTAi7o6I3RFxT0TsiYh7I/K290fEA6uM5/b+T3pllR+5rKz/91wxt7W4/1f2/mKwp6jtzPPvS45P12sHi//JcPRtyepjy6zjmxd//qTdsub+X/bI1l/2BYs4rvS2DNBNTcxN5J3SDrh6MWJf71L5JzdnApKI2BsR+1b20bvKwvQTX+5v1+jO+S+jA/NMC19k6c1n+c9HS/6lpHl+cvq2+cnRrVGvHRwt94rb/fjTpdfarX9V+XfA1VrjuWn7tzYZTJrna2dXvo5Lv37U9p7mP+7/aX/yRj7PXJ673puYmzszFtGfHM3ri14fv/Xesl62z/b/4QNLH/+7i/dk+T8YEdlO/FBEPBwRjxSxPxoRj0XEgWXy//6F9svK/COtaPtfjJha8vx3c/9v2f4rL/Sc/O7rduv/d9v/cF4aLl7Jz393sFQ42emiNcDV/O8AAADg/yLNvwOfpCM3y2k6MtL4Dv+euCutz8zOPXl85p3TU43vyg9GX1qOdA0U46H16XptLJkvPrExPjpejBWX46WHinHjT3u25fWRyZn6VMW5Q7fb3ub4z/zeU3V0wBrbtuSr4/3rHghQgdZ59HRx9cKr4WQAm5Xfa0P3usPxn65XHMD6c/2H7rXU8X+hpW4uADYn13/oXo5/6FLpt1VHAFTI9R+60mp+17+Gha0bI4xqCht1o+SFiLKQboh4FNaoUPWZCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+CQAA//9Chukd") socket(0x2, 0x3, 0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw6\x00') r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x4, 0x4}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/119, 0x77}], 0x1, 0x4f, 0xfffffffe) preadv(r1, &(0x7f0000002d00)=[{0x0}], 0x1, 0x101, 0x9) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000380)) r4 = socket(0x40000000015, 0x5, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000200)={0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}]}) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 311.01667ms ago: executing program 3 (id=2316): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040080) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x519, &(0x7f0000000f80)="$eJzs3cFvHFcZAPBvxl7Xbh3sAodSidZCoLSC7No1bS0ObZEQnAqUcjfGXluW117Lu25jq0KOOCMkhADBBU5ckPgDkFD+BIQUCe4RQqAIknDgENhqdmcde7PrOMquN7F/P+ll3rzMzPe9TfZ53854JoALayYi3omIkYh4NSKm8vY0L3HQKtl2d25/tJyVJBqN9/+VRJK3tY+V5Mvn8t3GI+I734j4fpK0Go6o7e1vLFUq5Z18vVTf3C7V9vavrG8urZXXylvz83NvLLy58PrCbN/6+tbX/v6zH//262/98Usf3lz85ys/yPKdzP/uaD/6qfWaFJqvRdtoROwMItgQjOT/Twqn2TgZfD4AAJws++z2yYj4XETc/eWwswEAAAAGofH2ZNxLIhoP+ua38k0AAACAp1vavAY2SYv5tQCTkabFYusa3k/H21Gp1upfXK3ubq20rpWdjkK6ul4pz+bXCk9HIcnW55r1++uvdazPR8TzEfHTqYnmenG5WlkZ9pcfAAAAcEFk8/zJtFXPFv+ZStPi2LCzAgAAAPpuetgJAAAAAANn/g8AAADn34Pz/5nWIhk9+2QAAACAfvv2u+9mpdF+/vXKB3u7G9UPrqyUaxvFzd3l4nJ1Z7u4Vq2uNe/Zt3l/z2e6Hq9SrW5/ObZ2r5bq5Vq9VNvbX9ys7m7VF5vP9V4sn+o50QAAAEBfPf/y9b8mEXHwlYlmybRv/2euDudb+mibJ4PKAzh7I6duBM4bF/jCxeX9DzxsYj9+RnkAAACDc/kzh+f/J+LI+f9LN53/h/PuEc//A+eIU/1wcXWc//v1qXa61xhMMsCZMscHHvY9QM/z/3/qfy4AAMBgTDZLkhbzOcBkpGmxGHGp+ViAQrK6XinPRsQnIuIvU4VnsvW5YScNAAAAAAAAAAAAAAAAAAAAAAAAAE+ZRiOJBgAAAHCuRaT/SCIiifGIqc9Pdn4/MJb8d6q5jIgPf/X+z68u1es7c1n7vw/b67/I218bxjcYAAAAQKf2PL09jwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfrpz+6PldjnS/IVBx7311YiY7hZ/NMaby/EoRMSzd5MYPbJfEhEjfYh/cC0iXugWP8nSiuk8i874aURMDDn+c32IDxfZ9Wz8eafb+y+Nmeay+/tvNC+P69ZMr/EvPRz/RnqMf5cecuyxfPnijd+Xesa/FvHiaPfxpx1/7DHH3+99d3+/o+m99tjZ+E3E5a4/f5JjsUr1ze1SbW//yvrm0lp5rbw1Pz/3xsKbC68vzJZW1yvl/M+u8X/y2T/8/6T+P9sj/nTe/6TZ//Fjnc/aGo3ux3y5Y/1/N67e/lS3DZOIWz/K613+/V84Fv/46z+S/3BO89fncrt+0Kof9dLv/vxS7/6PxEqP/o+fED9re6XXQTu8+t4P/9aqFU65BwAwSLW9/Y2lSqW887RXss48AWn0sTLzZKRx3ivtWdSTks/gKskjvd+HOy4BAAD9d/9D/7AzAQAAAAAAAAAAAAAAAAAAgIur/fv/7Xs5D+LeY0fjHd5FOUnOvK8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf5OAAA//9O3cdG") uname(0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) 293.817651ms ago: executing program 4 (id=2317): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xbc9}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 220.936973ms ago: executing program 2 (id=2318): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x8002, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f00000005c0)={0x0, 0xc89e, 0xc000, 0xd, 0x10b}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4000845) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x1, 0x9, 'syz0\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x804718, &(0x7f00000002c0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@nouid32}, {@mblk_io_submit}, {@acl}, {@nomblk_io_submit}]}, 0x0, 0x497, &(0x7f0000002200)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x77}, 0x1, 0x0, 0x0, 0x20010080}, 0x4040015) perf_event_open$cgroup(0x0, r3, 0x4, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = socket$pppl2tp(0x18, 0x1, 0x1) write$cgroup_subtree(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x184a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) 210.216113ms ago: executing program 7 (id=2319): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e6, 0x5, 0x4, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_io_uring_setup(0x2152, &(0x7f0000000200)={0x0, 0x4996, 0x1040, 0xfffffffd, 0x8000153}, 0x0, &(0x7f0000000040), &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x6, 0x0, 0xfc, 0x7fff0026}, {0x4, 0x0, 0xfa, 0x2}]}) syz_usb_connect$hid(0x1, 0x36, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x7854e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8003, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r2, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x700000000000000) fsmount(0xffffffffffffffff, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) quotactl_fd$Q_SETINFO(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) socket$nl_xfrm(0x10, 0x3, 0x6) 14.40815ms ago: executing program 4 (id=2320): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYRES32=r1], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x240004d0) 0s ago: executing program 2 (id=2321): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xbf}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) modify_ldt$write2(0x11, &(0x7f00000002c0)={0x7, 0x1000, 0x2000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000240)={[{@grpquota}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@noblock_validity}]}, 0x3, 0x79b, &(0x7f0000001200)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0xb, 0x4, 0x4, 0xfffffff9}) kernel console output (not intermixed with test programs): 31.529319][T11457] tipc: Enabled bearer , priority 10 [ 431.536095][T11449] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 431.540612][T11449] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #15: comm syz.8.1972: corrupted inode contents [ 431.576955][T11458] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1975'. [ 431.588837][T11458] tipc: Disabling bearer [ 431.608334][T11449] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 431.610860][T11449] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #15: comm syz.8.1972: mark_inode_dirty error [ 431.688081][T11449] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 431.688549][T11449] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #15: comm syz.8.1972: mark inode dirty (error -117) [ 431.764943][T11449] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 431.772042][T11449] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 431.823211][T11462] tipc: New replicast peer: 172.30.0.8 [ 431.847465][T11449] EXT4-fs (loop8): 1 orphan inode deleted [ 431.854473][T11462] tipc: Enabled bearer , priority 10 [ 431.868103][T11462] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1977'. [ 431.888892][T11449] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 431.914591][T11462] tipc: Disabling bearer [ 432.156696][ T5847] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 432.172592][ T4463] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.029164][T11473] loop7: detected capacity change from 0 to 2048 [ 433.218772][T11471] loop4: detected capacity change from 0 to 2048 [ 433.242880][T11473] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.345877][T11473] EXT4-fs error (device loop7): ext4_ext_precache:648: inode #2: comm syz.7.1981: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 433.394730][T11473] EXT4-fs (loop7): Remounting filesystem read-only [ 433.410955][T11471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.448494][ T6506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.648827][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.346373][T11495] tipc: New replicast peer: 172.30.0.3 [ 434.410025][T11495] tipc: Enabled bearer , priority 10 [ 434.489421][T11496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1986'. [ 434.581499][T11496] tipc: Disabling bearer [ 434.648523][T11480] loop8: detected capacity change from 0 to 2048 [ 434.799572][T11501] loop2: detected capacity change from 0 to 128 [ 434.821380][T11487] loop4: detected capacity change from 0 to 512 [ 434.856751][T11501] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 434.931244][T11501] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.942856][T11480] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.993224][T11487] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 435.034215][T11480] EXT4-fs error (device loop8): ext4_find_extent:939: inode #2: comm syz.8.1980: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 435.036644][ T5847] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 435.075373][T11480] EXT4-fs (loop8): Remounting filesystem read-only [ 435.184459][ T4463] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.318129][T11512] netlink: 276 bytes leftover after parsing attributes in process `syz.8.1990'. [ 436.539806][T11519] loop2: detected capacity change from 0 to 2048 [ 436.702820][T11519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.730205][T11513] loop8: detected capacity change from 0 to 512 [ 436.974255][T11513] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 437.059955][T11517] EXT4-fs error (device loop2): ext4_ext_precache:648: inode #2: comm syz.2.1992: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 437.702226][T11527] loop7: detected capacity change from 0 to 512 [ 437.719529][T11517] EXT4-fs (loop2): Remounting filesystem read-only [ 437.748314][T11527] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.793337][T11527] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.970666][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.162732][ T4463] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 439.057427][T11547] loop3: detected capacity change from 0 to 128 [ 439.247610][T11547] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 439.280489][T11538] loop8: detected capacity change from 0 to 512 [ 439.295052][ T28] audit: type=1400 audit(1781600472.904:839): avc: denied { write } for pid=11526 comm="syz.7.1993" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 439.326440][T11547] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.445796][ T4511] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 439.517758][ T28] audit: type=1400 audit(1781600473.109:840): avc: denied { write } for pid=11526 comm="syz.7.1993" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 439.646024][ T28] audit: type=1400 audit(1781600473.109:841): avc: denied { create } for pid=11526 comm="syz.7.1993" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 439.769551][T11538] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 439.791566][ T3298] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 439.856092][ T6506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.941387][T11562] tipc: New replicast peer: 172.30.0.8 [ 439.968773][T11562] tipc: Enabled bearer , priority 10 [ 439.994375][T11562] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2003'. [ 440.024852][T11562] tipc: Disabling bearer [ 441.150219][T11566] loop2: detected capacity change from 0 to 512 [ 441.160668][T11566] EXT4-fs: Ignoring removed mblk_io_submit option [ 441.383733][T11566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 441.443503][T11566] EXT4-fs (loop2): 1 orphan inode deleted [ 441.461952][T11566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.579466][T11571] loop4: detected capacity change from 0 to 2048 [ 441.620775][ T4463] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 441.637854][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.697556][T11571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.710073][T11584] loop2: detected capacity change from 0 to 512 [ 441.714218][T11584] EXT4-fs: Ignoring removed nobh option [ 441.811494][T11571] EXT4-fs error (device loop4): ext4_ext_precache:648: inode #2: comm syz.4.2005: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 441.834715][T11571] EXT4-fs (loop4): Remounting filesystem read-only [ 441.856297][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.860883][T11589] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 441.911228][T11584] EXT4-fs (loop2): orphan cleanup on readonly fs [ 441.918027][T11594] loop7: detected capacity change from 0 to 512 [ 441.944130][T11584] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2007: EA inode hash validation failed [ 441.960224][T11584] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.2007: corrupted inode contents [ 441.968923][T11594] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 442.556818][T11598] loop8: detected capacity change from 0 to 512 [ 442.575606][T11598] EXT4-fs: Ignoring removed orlov option [ 442.582725][T11598] EXT4-fs: Ignoring removed nomblk_io_submit option [ 442.590557][T11598] EXT4-fs: Ignoring removed nomblk_io_submit option [ 442.617306][T11598] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 442.646422][T11598] EXT4-fs (loop8): 1 truncate cleaned up [ 442.664712][T11598] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.747947][T11584] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 442.755616][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 442.771282][ C1] EXT4-fs (loop2): initial error at time 1781600476: ext4_do_update_inode:5690: inode 15 [ 442.781156][ C1] EXT4-fs (loop2): last error at time 1781600476: ext4_do_update_inode:5690: inode 15 [ 442.804754][T11584] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #15: comm syz.2.2007: mark_inode_dirty error [ 443.005144][T11584] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 443.007270][T11584] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.2007: corrupted inode contents [ 443.149896][T11584] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 443.170305][T11584] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.2007: mark_inode_dirty error [ 443.792208][T11606] loop4: detected capacity change from 0 to 256 [ 443.925267][ T4463] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.259715][T11584] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 444.274105][T11584] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.2007: mark inode dirty (error -117) [ 444.332001][T11584] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 445.096324][T11584] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 445.362176][T11584] EXT4-fs (loop2): 1 orphan inode deleted [ 445.477470][T11584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 445.517627][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.406371][T11624] loop2: detected capacity change from 0 to 512 [ 446.419369][T11624] EXT4-fs: Ignoring removed nobh option [ 447.661675][T11632] netlink: 'syz.4.2021': attribute type 39 has an invalid length. [ 447.771964][T11624] EXT4-fs (loop2): orphan cleanup on readonly fs [ 447.846376][T11636] loop3: detected capacity change from 0 to 512 [ 447.863507][T11624] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2017: EA inode hash validation failed [ 447.886633][T11636] EXT4-fs: Ignoring removed mblk_io_submit option [ 447.916797][T11636] EXT4-fs: Ignoring removed nomblk_io_submit option [ 447.935563][T11624] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.2017: corrupted inode contents [ 447.972745][T11636] EXT4-fs (loop3): 1 orphan inode deleted [ 447.983779][T11624] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 447.987881][T11636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.997218][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 447.997290][ C1] EXT4-fs (loop2): initial error at time 1781600481: ext4_do_update_inode:5690: inode 15 [ 447.997378][ C1] EXT4-fs (loop2): last error at time 1781600481: ext4_do_update_inode:5690: inode 15 [ 448.048760][T11624] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #15: comm syz.2.2017: mark_inode_dirty error [ 448.106979][ T4511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.118361][T11624] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 448.125523][T11624] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.2017: corrupted inode contents [ 448.173151][T11624] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 448.177043][T11624] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.2017: mark_inode_dirty error [ 448.237593][T11624] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 448.265370][T11624] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.2017: mark inode dirty (error -117) [ 448.410667][T11644] loop8: detected capacity change from 0 to 256 [ 448.491566][T11624] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 448.495731][T11624] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 448.677468][T11647] loop3: detected capacity change from 0 to 1764 [ 448.764474][T11624] EXT4-fs (loop2): 1 orphan inode deleted [ 449.176776][T11624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 449.412065][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.515697][ T6506] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 449.603944][ T28] audit: type=1400 audit(1781600482.547:842): avc: denied { getopt } for pid=11653 comm="syz.3.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 449.739803][T11660] loop7: detected capacity change from 0 to 128 [ 449.753564][T11660] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 449.770322][T11663] loop2: detected capacity change from 0 to 2048 [ 449.782860][T11660] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.809868][T11663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.820893][ T28] audit: type=1400 audit(1781600482.753:843): avc: denied { write } for pid=11659 comm="syz.7.2027" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 449.849085][T11663] EXT4-fs error (device loop2): ext4_ext_precache:648: inode #2: comm syz.2.2026: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 449.875428][T11663] EXT4-fs (loop2): Remounting filesystem read-only [ 449.923147][T11670] tipc: New replicast peer: 172.30.0.9 [ 449.928929][T11670] tipc: Enabled bearer , priority 10 [ 449.936135][T11670] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2031'. [ 449.945395][T11670] tipc: Disabling bearer [ 450.538902][ T6506] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 451.190954][T11683] tipc: Enabled bearer , priority 0 [ 451.586659][T11684] syzkaller0: entered promiscuous mode [ 451.596094][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.605374][T11684] syzkaller0: entered allmulticast mode [ 451.663151][T11686] tipc: New replicast peer: 172.30.0.3 [ 452.214928][T11686] tipc: Enabled bearer , priority 10 [ 452.238972][T11686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2035'. [ 452.263179][T11688] loop7: detected capacity change from 0 to 256 [ 452.718377][T11686] tipc: Disabling bearer [ 453.282068][ T3406] tipc: Node number set to 3850991231 [ 453.290245][T11682] tipc: Resetting bearer [ 453.303088][T11682] tipc: Disabling bearer [ 453.692712][T11691] loop3: detected capacity change from 0 to 512 [ 453.706447][T11696] tipc: New replicast peer: 172.30.0.3 [ 453.717489][T11691] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 453.730598][T11696] tipc: Enabled bearer , priority 10 [ 453.737106][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2038'. [ 453.784823][T11697] tipc: Disabling bearer [ 453.865815][ T28] audit: type=1326 audit(1781600486.532:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11699 comm="syz.4.2039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e048ce59 code=0x7ffc0000 [ 453.982733][ T28] audit: type=1326 audit(1781600486.635:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11699 comm="syz.4.2039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f39e048ce59 code=0x7ffc0000 [ 454.011319][ T28] audit: type=1326 audit(1781600486.635:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11699 comm="syz.4.2039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e048ce59 code=0x7ffc0000 [ 454.049288][ T28] audit: type=1326 audit(1781600486.635:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11699 comm="syz.4.2039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e048ce59 code=0x7ffc0000 [ 454.082415][ T28] audit: type=1326 audit(1781600486.635:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11699 comm="syz.4.2039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f39e048ce59 code=0x7ffc0000 [ 454.108002][ T28] audit: type=1326 audit(1781600486.635:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11699 comm="syz.4.2039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e048ce59 code=0x7ffc0000 [ 454.133656][ T28] audit: type=1326 audit(1781600486.635:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11699 comm="syz.4.2039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f39e048ce59 code=0x7ffc0000 [ 454.159269][ T28] audit: type=1326 audit(1781600486.635:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11699 comm="syz.4.2039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e048ce59 code=0x7ffc0000 [ 454.285254][T11706] tipc: Enabled bearer , priority 0 [ 454.292776][T11706] syzkaller0: entered promiscuous mode [ 454.298305][T11706] syzkaller0: entered allmulticast mode [ 455.364356][T11709] loop4: detected capacity change from 0 to 256 [ 456.413041][T11705] tipc: Resetting bearer [ 456.429900][T11705] tipc: Disabling bearer [ 456.448977][T11720] loop8: detected capacity change from 0 to 164 [ 456.874223][T11720] syzkaller0: entered promiscuous mode [ 457.083022][T11720] syzkaller0: entered allmulticast mode [ 457.148581][T11726] loop2: detected capacity change from 0 to 2048 [ 457.224431][T11726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.247094][ T4511] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 457.260567][T11726] EXT4-fs error (device loop2): ext4_ext_precache:648: inode #2: comm syz.2.2046: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 457.310379][T11726] EXT4-fs (loop2): Remounting filesystem read-only [ 457.367907][T11734] tipc: Enabled bearer , priority 0 [ 457.375198][T11734] syzkaller0: entered promiscuous mode [ 457.381409][T11734] syzkaller0: entered allmulticast mode [ 457.472978][T11739] loop3: detected capacity change from 0 to 1024 [ 457.634536][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 457.634555][ T28] audit: type=1400 audit(1781600490.059:871): avc: denied { firmware_load } for pid=11736 comm="syz.4.2050" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 457.666335][T11745] loop3: detected capacity change from 0 to 512 [ 457.677804][T11745] EXT4-fs: Ignoring removed mblk_io_submit option [ 457.693455][T11745] EXT4-fs: Ignoring removed nomblk_io_submit option [ 457.707913][T11745] EXT4-fs (loop3): 1 orphan inode deleted [ 457.715720][T11745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.745864][ T4511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.806083][T11752] netlink: 276 bytes leftover after parsing attributes in process `syz.4.2054'. [ 457.820859][T11752] loop4: detected capacity change from 0 to 512 [ 457.832699][T11752] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 458.005446][T11757] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 458.013220][T11757] infiniband sy1: RDMA CMA: cma_listen_on_dev, error -98 [ 458.092221][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.255007][T11733] tipc: Resetting bearer [ 458.295444][T11733] tipc: Disabling bearer [ 458.312941][T11759] loop2: detected capacity change from 0 to 512 [ 458.353853][T11759] ext4: Unknown parameter 'noacl' [ 458.779496][T11761] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 458.793732][T11761] xt_hashlimit: max too large, truncated to 1048576 [ 459.416735][ T28] audit: type=1400 audit(1781600491.359:872): avc: denied { create } for pid=11764 comm="syz.3.2057" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 459.910410][ T3298] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 460.126487][T11774] loop7: detected capacity change from 0 to 1024 [ 460.155573][T11774] EXT4-fs: Ignoring removed bh option [ 460.185568][T11774] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (3163!=35945) [ 460.226809][T11774] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 460.277952][T11774] EXT4-fs error (device loop7): __ext4_get_inode_loc:4885: comm syz.7.2061: Invalid inode table block 0 in block_group 0 [ 460.315297][T11774] loop7: lost filesystem error report for type 5 error -117 [ 460.315488][T11774] EXT4-fs (loop7): Remounting filesystem read-only [ 460.322863][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 460.322892][ C1] EXT4-fs (loop7): initial error at time 1781600492: __ext4_get_inode_loc:4885 [ 460.322914][ C1] EXT4-fs (loop7): last error at time 1781600492: __ext4_get_inode_loc:4885 [ 460.429696][T11774] EXT4-fs (loop7): get root inode failed [ 460.442070][T11774] EXT4-fs (loop7): mount failed [ 460.509472][ T28] audit: type=1400 audit(1781600492.743:873): avc: denied { mount } for pid=11771 comm="syz.3.2060" name="/" dev="autofs" ino=33558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 460.540367][T11781] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2062'. [ 460.550447][T11781] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2062'. [ 460.608537][T11786] FAULT_INJECTION: forcing a failure. [ 460.608537][T11786] name failslab, interval 1, probability 0, space 0, times 1 [ 460.638055][T11787] loop7: detected capacity change from 0 to 512 [ 460.653270][T11786] CPU: 1 UID: 0 PID: 11786 Comm: syz.2.2063 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 460.653307][T11786] Tainted: [W]=WARN [ 460.653316][T11786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 460.653333][T11786] Call Trace: [ 460.653342][T11786] [ 460.653353][T11786] __dump_stack+0x1d/0x30 [ 460.653416][T11786] dump_stack_lvl+0x95/0xd0 [ 460.653446][T11786] dump_stack+0x15/0x1b [ 460.653545][T11786] should_fail_ex+0x25e/0x270 [ 460.653570][T11786] ? __rdma_create_id+0x48/0x3e0 [ 460.653616][T11786] should_failslab+0x8c/0xb0 [ 460.653673][T11786] __kmalloc_cache_noprof+0x5f/0x400 [ 460.653714][T11786] ? __xa_alloc+0x291/0x300 [ 460.653744][T11786] ? __pfx_ucma_event_handler+0x10/0x10 [ 460.653816][T11786] ? __pfx_ucma_event_handler+0x10/0x10 [ 460.653847][T11786] __rdma_create_id+0x48/0x3e0 [ 460.653907][T11786] ? __pfx_ucma_event_handler+0x10/0x10 [ 460.653938][T11786] rdma_create_user_id+0x5a/0xa0 [ 460.653967][T11786] ucma_create_id+0x19c/0x280 [ 460.653999][T11786] ? __pfx_ucma_create_id+0x10/0x10 [ 460.654026][T11786] ucma_write+0x1c9/0x260 [ 460.654120][T11786] vfs_writev+0x41e/0x8b0 [ 460.654154][T11786] ? __pfx_ucma_write+0x10/0x10 [ 460.654191][T11786] do_writev+0xe9/0x210 [ 460.654321][T11786] __x64_sys_writev+0x45/0x50 [ 460.654346][T11786] x64_sys_call+0x1c0c/0x3020 [ 460.654380][T11786] do_syscall_64+0x136/0x3c0 [ 460.654410][T11786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.654518][T11786] RIP: 0033:0x7fdaf0cece59 [ 460.654545][T11786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.654606][T11786] RSP: 002b:00007fdaef73f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 460.654643][T11786] RAX: ffffffffffffffda RBX: 00007fdaf0f65fa0 RCX: 00007fdaf0cece59 [ 460.654662][T11786] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000c [ 460.654703][T11786] RBP: 00007fdaef73f090 R08: 0000000000000000 R09: 0000000000000000 [ 460.654722][T11786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.654738][T11786] R13: 00007fdaf0f66038 R14: 00007fdaf0f65fa0 R15: 00007ffe97f64258 [ 460.654766][T11786] [ 460.659178][T11787] EXT4-fs: Ignoring removed mblk_io_submit option [ 460.888921][T11787] EXT4-fs: Ignoring removed nomblk_io_submit option [ 460.922496][T11787] EXT4-fs (loop7): 1 orphan inode deleted [ 460.929775][T11787] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.960348][T11793] tipc: Enabled bearer , priority 0 [ 460.983530][T11793] syzkaller0: entered promiscuous mode [ 460.993367][ T6506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.007192][T11793] syzkaller0: entered allmulticast mode [ 461.179933][T11800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.189096][T11800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.198844][ T28] audit: type=1400 audit(1781600493.389:874): avc: denied { map } for pid=11794 comm="syz.3.2068" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 461.224425][ T28] audit: type=1400 audit(1781600493.389:875): avc: denied { read write } for pid=11794 comm="syz.3.2068" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 461.336393][T11801] loop7: detected capacity change from 0 to 256 [ 461.368443][T11800] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.502856][T11800] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.614611][T11800] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.740004][T11800] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.813995][T11792] tipc: Resetting bearer [ 461.863773][T11792] tipc: Disabling bearer [ 461.902465][T11807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2070'. [ 462.118236][T11807] netlink: 'syz.4.2070': attribute type 7 has an invalid length. [ 462.139873][ T9431] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.164806][ T9431] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.183930][T11807] netlink: 'syz.4.2070': attribute type 8 has an invalid length. [ 462.215450][ T9431] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.259252][ T9431] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.277286][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2070'. [ 462.374046][T11807] erspan0: entered promiscuous mode [ 462.411162][T11807] gretap0: entered promiscuous mode [ 462.432762][T11807] erspan0: left promiscuous mode [ 462.456316][T11807] gretap0: left promiscuous mode [ 462.504183][T11810] syz.2.2071 (11810) used greatest stack depth: 9280 bytes left [ 462.547967][T11808] macvlan2: entered allmulticast mode [ 462.572389][T11808] batadv0: entered allmulticast mode [ 462.587032][T11808] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 462.611813][T11808] batadv0: left allmulticast mode [ 463.013986][T11822] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2074'. [ 463.772166][T11835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42522 sclass=netlink_route_socket pid=11835 comm=syz.4.2078 [ 463.809632][T11831] loop2: detected capacity change from 0 to 512 [ 463.842504][T11831] EXT4-fs: Ignoring removed mblk_io_submit option [ 463.863301][T11838] loop3: detected capacity change from 0 to 128 [ 463.886204][T11831] EXT4-fs: Ignoring removed nomblk_io_submit option [ 463.912120][T11838] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 463.949076][T11831] EXT4-fs (loop2): 1 orphan inode deleted [ 463.971967][T11838] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.990773][T11831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.028386][T11843] tipc: Enabled bearer , priority 0 [ 464.045848][ T28] audit: type=1400 audit(1781600496.055:876): avc: denied { write } for pid=11837 comm="syz.3.2080" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 464.077871][T11843] syzkaller0: entered promiscuous mode [ 464.102529][T11843] syzkaller0: entered allmulticast mode [ 464.139398][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.599483][T11862] loop2: detected capacity change from 0 to 512 [ 464.644487][T11862] EXT4-fs: Ignoring removed nobh option [ 464.726996][T11862] EXT4-fs (loop2): orphan cleanup on readonly fs [ 464.746637][T11866] loop7: detected capacity change from 0 to 128 [ 464.773619][T11866] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 464.788146][T11862] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2089: EA inode hash validation failed [ 464.802414][T11866] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.829224][ T28] audit: type=1400 audit(1781600496.794:877): avc: denied { write } for pid=11865 comm="syz.7.2090" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 464.829618][T11862] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.2089: corrupted inode contents [ 464.874541][ T4511] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 464.907684][T11842] tipc: Resetting bearer [ 464.918908][ T28] audit: type=1400 audit(1781600496.878:878): avc: denied { bind } for pid=11869 comm="syz.3.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 464.938742][ T28] audit: type=1400 audit(1781600496.878:879): avc: denied { read } for pid=11869 comm="syz.3.2091" path="socket:[34115]" dev="sockfs" ino=34115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 464.966249][T11842] tipc: Disabling bearer [ 464.973955][T11862] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 464.979614][T11862] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #15: comm syz.2.2089: mark_inode_dirty error [ 464.989939][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 464.990058][ C1] EXT4-fs (loop2): initial error at time 1781600496: ext4_do_update_inode:5690: inode 15 [ 464.990323][ C1] EXT4-fs (loop2): last error at time 1781600496: ext4_do_update_inode:5690: inode 15 [ 465.038113][T11874] loop3: detected capacity change from 0 to 512 [ 465.049426][T11874] ext4: Unknown parameter 'syzkaller1' [ 465.055286][T11862] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 465.063737][T11862] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.2089: corrupted inode contents [ 465.105160][ T28] audit: type=1400 audit(1781600497.037:880): avc: denied { getopt } for pid=11869 comm="syz.3.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 465.140067][T11862] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 465.143872][T11862] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.2089: mark_inode_dirty error [ 465.169786][T11862] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 465.174286][T11876] loop8: detected capacity change from 0 to 512 [ 465.190269][T11862] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.2089: mark inode dirty (error -117) [ 465.205212][T11862] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 465.210017][T11862] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 465.233173][T11862] EXT4-fs (loop2): 1 orphan inode deleted [ 465.246926][T11876] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 465.342603][T11879] loop4: detected capacity change from 0 to 512 [ 465.379483][T11879] EXT4-fs: Ignoring removed mblk_io_submit option [ 465.405161][T11862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 465.424464][T11879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 465.450271][T11879] EXT4-fs (loop4): 1 orphan inode deleted [ 465.477016][T11879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.585641][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.597130][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.872276][ T6506] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 465.922291][ T28] audit: type=1400 audit(1781600497.813:881): avc: denied { write } for pid=11889 comm="syz.2.2096" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 465.971558][ T28] audit: type=1400 audit(1781600497.823:882): avc: denied { ioctl } for pid=11889 comm="syz.2.2096" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 466.081068][T11898] loop7: detected capacity change from 0 to 512 [ 466.108929][T11898] EXT4-fs: Ignoring removed nobh option [ 466.128241][T11898] EXT4-fs (loop7): orphan cleanup on readonly fs [ 466.202724][T11898] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.2100: EA inode hash validation failed [ 466.237718][T11898] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #15: comm syz.7.2100: corrupted inode contents [ 466.499033][T11903] loop2: detected capacity change from 0 to 256 [ 466.592426][T11905] loop3: detected capacity change from 0 to 128 [ 466.669720][T11898] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 466.675152][T11898] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #15: comm syz.7.2100: mark_inode_dirty error [ 466.681195][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 466.708346][ C1] EXT4-fs (loop7): initial error at time 1781600498: ext4_do_update_inode:5690: inode 15 [ 466.718237][ C1] EXT4-fs (loop7): last error at time 1781600498: ext4_do_update_inode:5690: inode 15 [ 466.743398][T11898] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 466.752681][T11898] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #15: comm syz.7.2100: corrupted inode contents [ 466.866740][T11898] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 466.893810][T11898] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3001: inode #15: comm syz.7.2100: mark_inode_dirty error [ 467.100226][T11905] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 467.115693][T11898] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 467.121904][T11898] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3004: inode #15: comm syz.7.2100: mark inode dirty (error -117) [ 467.167526][T11905] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.188634][T11898] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 467.190839][T11898] EXT4-fs warning (device loop7): ext4_evict_inode:287: xattr delete (err -117) [ 467.214682][ T4463] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 467.251714][T11898] EXT4-fs (loop7): 1 orphan inode deleted [ 467.276527][T11898] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 467.296744][ T28] audit: type=1400 audit(1781600499.104:883): avc: denied { write } for pid=11904 comm="syz.3.2101" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 467.441878][ T6506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.842010][T11915] tipc: New replicast peer: 172.30.0.3 [ 467.853486][T11915] tipc: Enabled bearer , priority 10 [ 467.869721][T11915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2105'. [ 467.879578][T11915] tipc: Disabling bearer [ 467.885476][T11917] tipc: Enabled bearer , priority 0 [ 467.892853][T11917] syzkaller0: entered promiscuous mode [ 467.921585][T11917] syzkaller0: entered allmulticast mode [ 468.898346][T11916] tipc: Resetting bearer [ 468.910998][ T4511] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 468.932001][T11916] tipc: Disabling bearer [ 468.991469][T11924] loop2: detected capacity change from 0 to 512 [ 469.054711][T11924] EXT4-fs: Ignoring removed nobh option [ 469.071189][ T281] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 469.081020][T11926] loop3: detected capacity change from 0 to 512 [ 469.107086][T11926] EXT4-fs: Ignoring removed nobh option [ 469.164804][T11926] EXT4-fs (loop3): orphan cleanup on readonly fs [ 469.208931][T11926] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.2107: EA inode hash validation failed [ 469.231118][T11924] EXT4-fs (loop2): orphan cleanup on readonly fs [ 469.274643][T11926] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.2107: corrupted inode contents [ 469.295817][T11924] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2106: EA inode hash validation failed [ 469.330113][T11926] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #15: comm syz.3.2107: mark_inode_dirty error [ 469.342335][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 469.342407][ C0] EXT4-fs (loop3): initial error at time 1781600501: ext4_do_update_inode:5690: inode 15 [ 469.342729][ C0] EXT4-fs (loop3): last error at time 1781600501: ext4_do_update_inode:5690: inode 15 [ 469.389759][T11924] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.2106: corrupted inode contents [ 469.439382][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 469.445890][ C0] EXT4-fs (loop2): initial error at time 1781600501: ext4_do_update_inode:5690: inode 15 [ 469.455794][ C0] EXT4-fs (loop2): last error at time 1781600501: ext4_do_update_inode:5690: inode 15 [ 469.467671][T11924] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #15: comm syz.2.2106: mark_inode_dirty error [ 469.496547][T11924] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.2106: corrupted inode contents [ 469.518428][T11926] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.2107: corrupted inode contents [ 469.550097][T11924] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.2106: mark_inode_dirty error [ 469.566620][T11926] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.2107: mark_inode_dirty error [ 469.607525][T11924] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.2106: mark inode dirty (error -117) [ 469.629809][T11926] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.2107: mark inode dirty (error -117) [ 469.669685][T11924] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 469.686597][T11926] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 469.711584][T11924] EXT4-fs (loop2): 1 orphan inode deleted [ 469.725406][T11926] EXT4-fs (loop3): 1 orphan inode deleted [ 469.753578][T11924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 469.778067][T11926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 469.875509][ T281] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 470.015675][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.030794][ T4511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.228264][T11938] FAULT_INJECTION: forcing a failure. [ 470.228264][T11938] name failslab, interval 1, probability 0, space 0, times 0 [ 470.362791][T11938] CPU: 1 UID: 0 PID: 11938 Comm: syz.3.2111 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 470.362837][T11938] Tainted: [W]=WARN [ 470.362847][T11938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 470.362863][T11938] Call Trace: [ 470.362872][T11938] [ 470.362880][T11938] __dump_stack+0x1d/0x30 [ 470.362980][T11938] dump_stack_lvl+0x95/0xd0 [ 470.363005][T11938] dump_stack+0x15/0x1b [ 470.363024][T11938] should_fail_ex+0x25e/0x270 [ 470.363048][T11938] should_failslab+0x8c/0xb0 [ 470.363082][T11938] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 470.363163][T11938] ? __alloc_skb+0x2d6/0x690 [ 470.363193][T11938] __alloc_skb+0x2d6/0x690 [ 470.363225][T11938] ? __alloc_skb+0x200/0x690 [ 470.363256][T11938] sock_omalloc+0x81/0xf0 [ 470.363298][T11938] msg_zerocopy_realloc+0x84/0x410 [ 470.363353][T11938] __ip_append_data+0x858/0x2390 [ 470.363421][T11938] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 470.363457][T11938] ? preempt_schedule_irq+0x2d/0x50 [ 470.363483][T11938] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 470.363514][T11938] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 470.363592][T11938] ? irqentry_exit+0x7d/0x610 [ 470.363628][T11938] ip_append_data+0xd5/0x130 [ 470.363664][T11938] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 470.363777][T11938] udp_sendmsg+0x2e9/0x14e0 [ 470.363847][T11938] ? __rcu_read_unlock+0x4e/0x70 [ 470.363892][T11938] ? avc_has_perm_noaudit+0xa3/0x120 [ 470.363930][T11938] ? avc_has_perm+0x101/0x190 [ 470.363962][T11938] ? __pfx_udp_sendmsg+0x10/0x10 [ 470.363986][T11938] ? __pfx_inet_sendmsg+0x10/0x10 [ 470.364005][T11938] inet_sendmsg+0xac/0xd0 [ 470.364115][T11938] __sys_sendto+0x3db/0x490 [ 470.364160][T11938] __x64_sys_sendto+0x76/0x90 [ 470.364193][T11938] x64_sys_call+0x2d35/0x3020 [ 470.364274][T11938] do_syscall_64+0x136/0x3c0 [ 470.364341][T11938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.364374][T11938] RIP: 0033:0x7f9d5cacce59 [ 470.364478][T11938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.364502][T11938] RSP: 002b:00007f9d5b527028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 470.364529][T11938] RAX: ffffffffffffffda RBX: 00007f9d5cd45fa0 RCX: 00007f9d5cacce59 [ 470.364581][T11938] RDX: 000000000000fdbe RSI: 0000200000000100 RDI: 0000000000000004 [ 470.364654][T11938] RBP: 00007f9d5b527090 R08: 0000000000000000 R09: 0000000011000a00 [ 470.364670][T11938] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000001 [ 470.364683][T11938] R13: 00007f9d5cd46038 R14: 00007f9d5cd45fa0 R15: 00007ffddb7610f8 [ 470.364703][T11938] [ 470.851713][T11948] tipc: New replicast peer: 172.30.0.3 [ 470.861097][T11948] tipc: Enabled bearer , priority 10 [ 470.889584][T11948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2114'. [ 470.924955][T11948] tipc: Disabling bearer [ 470.965122][T11951] loop8: detected capacity change from 0 to 512 [ 470.969014][ T28] audit: type=1400 audit(1781600502.528:884): avc: denied { setopt } for pid=11949 comm="syz.3.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 470.977202][T11951] EXT4-fs: Ignoring removed nomblk_io_submit option [ 471.018933][ T28] audit: type=1400 audit(1781600502.584:885): avc: denied { read } for pid=11949 comm="syz.3.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 471.053206][T11951] EXT4-fs: journaled quota format not specified [ 471.175032][ T28] audit: type=1400 audit(1781600502.724:886): avc: denied { write } for pid=11946 comm="syz.8.2115" path="socket:[34340]" dev="sockfs" ino=34340 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 471.226084][T11957] loop7: detected capacity change from 0 to 128 [ 471.254474][T11957] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 471.270562][T11959] tipc: Enabled bearer , priority 0 [ 471.277791][T11959] syzkaller0: entered promiscuous mode [ 471.289387][T11957] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.300327][T11959] syzkaller0: entered allmulticast mode [ 471.322545][ T28] audit: type=1400 audit(1781600502.864:887): avc: denied { write } for pid=11956 comm="syz.7.2117" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 472.415233][T11958] tipc: Resetting bearer [ 472.591139][T11958] tipc: Disabling bearer [ 472.597060][ T28] audit: type=1400 audit(1781600504.052:888): avc: denied { read } for pid=11962 comm="syz.8.2120" dev="sockfs" ino=35089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 472.680207][T11967] 9p: Bad value for 'rfdno' [ 472.694361][ T28] audit: type=1400 audit(1781600504.155:889): avc: denied { write } for pid=11962 comm="syz.8.2120" path="socket:[34359]" dev="sockfs" ino=34359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 472.979030][T11972] loop2: detected capacity change from 0 to 512 [ 473.016854][ T6506] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 473.044998][T11972] EXT4-fs: Ignoring removed nobh option [ 473.231227][T11972] EXT4-fs (loop2): orphan cleanup on readonly fs [ 473.239282][T11972] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2121: EA inode hash validation failed [ 473.256723][T11972] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.2121: corrupted inode contents [ 473.627276][T11972] fserror_report: 10 callbacks suppressed [ 473.627315][T11972] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 473.636210][T11972] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #15: comm syz.2.2121: mark_inode_dirty error [ 473.642426][ T23] tipc: Node number set to 2886997007 [ 473.646615][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 473.671018][ C0] EXT4-fs (loop2): initial error at time 1781600505: ext4_do_update_inode:5690: inode 15 [ 473.681654][ C0] EXT4-fs (loop2): last error at time 1781600505: ext4_do_update_inode:5690: inode 15 [ 473.719505][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 473.729186][ T9] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 473.748177][T11972] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 473.754393][T11972] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.2121: corrupted inode contents [ 473.817446][T11972] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 473.826505][T11972] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.2121: mark_inode_dirty error [ 473.880910][T11972] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 473.883573][T11972] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.2121: mark inode dirty (error -117) [ 473.933294][T11972] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 473.951990][T11972] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 473.973043][T11972] EXT4-fs (loop2): 1 orphan inode deleted [ 473.981437][T11972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 474.064031][T11992] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2127'. [ 474.097180][T11994] tipc: New replicast peer: 172.30.0.9 [ 474.102752][T11994] tipc: Enabled bearer , priority 10 [ 474.109612][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2128'. [ 474.118588][T11994] tipc: Disabling bearer [ 474.271856][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.677988][T12008] loop2: detected capacity change from 0 to 256 [ 475.118850][T12011] loop3: detected capacity change from 0 to 128 [ 475.202297][T12011] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 475.453108][T12011] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.511269][ T28] audit: type=1400 audit(1781600506.784:890): avc: denied { write } for pid=12010 comm="syz.3.2133" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 476.239082][T12019] loop7: detected capacity change from 0 to 512 [ 476.870874][T12019] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 476.980653][T12031] loop2: detected capacity change from 0 to 128 [ 477.011402][T12031] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 477.055466][T12031] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.090250][T12031] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 477.656070][ T4511] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 477.742893][T12037] loop3: detected capacity change from 0 to 512 [ 477.760219][T12037] EXT4-fs: Ignoring removed nobh option [ 477.809845][T12037] EXT4-fs (loop3): orphan cleanup on readonly fs [ 477.859621][T12037] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.2140: EA inode hash validation failed [ 477.875527][T12041] loop4: detected capacity change from 0 to 512 [ 477.883207][T12039] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 477.913306][T12041] EXT4-fs: Ignoring removed nobh option [ 477.932240][T12037] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.2140: corrupted inode contents [ 477.974748][T12037] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 477.976161][T12041] EXT4-fs (loop4): orphan cleanup on readonly fs [ 477.986560][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 477.986752][ C0] EXT4-fs (loop3): initial error at time 1781600509: ext4_do_update_inode:5690: inode 15 [ 477.987223][ C0] EXT4-fs (loop3): last error at time 1781600509: ext4_do_update_inode:5690: inode 15 [ 478.048351][T12037] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #15: comm syz.3.2140: mark_inode_dirty error [ 478.066389][T12037] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 478.072962][T12037] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.2140: corrupted inode contents [ 478.119653][T12037] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 478.123423][T12037] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.2140: mark_inode_dirty error [ 478.152414][T12041] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.2142: EA inode hash validation failed [ 478.181217][T12037] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 478.189041][T12037] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.2140: mark inode dirty (error -117) [ 478.191906][T12041] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.2142: corrupted inode contents [ 478.262655][T12041] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 478.281788][T12037] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 478.282467][T12041] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #15: comm syz.4.2142: mark_inode_dirty error [ 478.290984][T12037] EXT4-fs (loop3): 1 orphan inode deleted [ 478.291458][T12037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 478.313262][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 478.313368][ C0] EXT4-fs (loop4): initial error at time 1781600509: ext4_do_update_inode:5690: inode 15 [ 478.313578][ C0] EXT4-fs (loop4): last error at time 1781600509: ext4_do_update_inode:5690: inode 15 [ 478.374346][T12041] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.2142: corrupted inode contents [ 478.410862][ T4511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.420407][T12041] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.2142: mark_inode_dirty error [ 478.441742][T12041] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.2142: mark inode dirty (error -117) [ 478.456297][ T6506] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 478.493550][T12046] loop3: detected capacity change from 0 to 512 [ 478.493758][T12041] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 478.500743][T12046] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 478.536718][T12041] EXT4-fs (loop4): 1 orphan inode deleted [ 478.570860][T12041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 479.399129][T12051] loop7: detected capacity change from 0 to 256 [ 479.468186][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.942677][T12046] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 480.069868][T12060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2147'. [ 480.597710][T12063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2147'. [ 481.742135][T12074] loop7: detected capacity change from 0 to 128 [ 481.864351][T12074] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 481.903635][T12074] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.958171][ T28] audit: type=1400 audit(1781600512.808:891): avc: denied { write } for pid=12073 comm="syz.7.2150" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 482.434828][T12087] loop4: detected capacity change from 0 to 512 [ 482.441673][T12087] EXT4-fs: Ignoring removed nobh option [ 482.459591][T12087] EXT4-fs (loop4): orphan cleanup on readonly fs [ 482.529502][T12087] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.2153: EA inode hash validation failed [ 482.545734][T12087] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.2153: corrupted inode contents [ 482.557602][T12087] fserror_report: 5 callbacks suppressed [ 482.557620][T12087] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 482.577335][T12087] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #15: comm syz.4.2153: mark_inode_dirty error [ 482.597786][T12087] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 482.598015][T12087] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.2153: corrupted inode contents [ 482.619082][T12087] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 482.619387][T12087] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.2153: mark_inode_dirty error [ 482.640632][T12087] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 482.640834][T12087] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.2153: mark inode dirty (error -117) [ 482.650285][ C1] EXT4-fs (loop4): error count since last fsck: 4 [ 482.650341][ C1] EXT4-fs (loop4): initial error at time 1781600513: ext4_do_update_inode:5690: inode 15 [ 482.650659][ C1] EXT4-fs (loop4): last error at time 1781600513: ext4_xattr_delete_inode:3001: inode 15 [ 482.852958][T12087] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 482.855254][T12087] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 482.874881][T12087] EXT4-fs (loop4): 1 orphan inode deleted [ 482.881202][T12087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 482.906572][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.347480][T12096] loop4: detected capacity change from 0 to 512 [ 483.430764][T12092] loop8: detected capacity change from 0 to 256 [ 483.456977][T12096] EXT4-fs: Ignoring removed nobh option [ 483.625427][T12096] EXT4-fs (loop4): orphan cleanup on readonly fs [ 483.633634][T12096] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.2155: EA inode hash validation failed [ 483.646742][T12096] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.2155: corrupted inode contents [ 483.658700][T12096] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 483.659030][T12096] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #15: comm syz.4.2155: mark_inode_dirty error [ 483.679650][T12096] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 483.680081][T12096] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.2155: corrupted inode contents [ 483.702311][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 483.702501][ C1] EXT4-fs (loop4): initial error at time 1781600514: ext4_do_update_inode:5690: inode 15 [ 483.702791][ C1] EXT4-fs (loop4): last error at time 1781600514: ext4_dirty_inode:6587: inode 15 [ 484.019255][T12103] tipc: New replicast peer: 172.30.0.3 [ 484.025477][T12096] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 484.028111][T12096] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.2155: mark_inode_dirty error [ 484.049174][T12096] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 484.049415][T12103] tipc: Enabled bearer , priority 10 [ 484.065686][T12103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2158'. [ 484.074652][T12103] tipc: Disabling bearer [ 484.080016][T12096] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.2155: mark inode dirty (error -117) [ 484.092585][T12096] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 484.092846][T12096] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 484.111111][T12096] EXT4-fs (loop4): 1 orphan inode deleted [ 484.117274][T12096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 484.257536][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.380136][ T6506] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 484.691269][T12117] kernel profiling enabled (shift: 9) [ 484.697914][T12117] nfs4: Unknown parameter 'no' [ 484.705880][ T28] audit: type=1400 audit(1781600515.361:892): avc: denied { lock } for pid=12112 comm="syz.4.2160" path="socket:[35331]" dev="sockfs" ino=35331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 484.730141][ T28] audit: type=1400 audit(1781600515.371:893): avc: denied { ioctl } for pid=12112 comm="syz.4.2160" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 484.884119][T12109] loop2: detected capacity change from 0 to 4096 [ 485.083254][T12109] EXT4-fs: Ignoring removed bh option [ 485.167789][T12115] loop7: detected capacity change from 0 to 512 [ 485.239843][T12109] EXT4-fs (loop2): stripe (13) is not aligned with cluster size (16), stripe is disabled [ 485.251288][T12115] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 485.338740][T12109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.648889][T12133] loop8: detected capacity change from 0 to 512 [ 486.669787][T12133] EXT4-fs: Ignoring removed nobh option [ 487.413875][ T6506] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 487.450083][T12140] tipc: New replicast peer: 172.30.0.5 [ 487.474604][T12140] tipc: Enabled bearer , priority 10 [ 487.486044][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.487018][T12140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2169'. [ 487.503340][T12133] EXT4-fs (loop8): orphan cleanup on readonly fs [ 487.503990][T12140] tipc: Disabling bearer [ 487.547306][T12133] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.2165: EA inode hash validation failed [ 487.560147][T12133] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #15: comm syz.8.2165: corrupted inode contents [ 487.586409][T12133] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #15: comm syz.8.2165: mark_inode_dirty error [ 487.589361][T12148] loop4: detected capacity change from 0 to 128 [ 487.604759][T12142] loop7: detected capacity change from 0 to 164 [ 487.618937][T12149] tipc: New replicast peer: 172.30.0.3 [ 487.624578][T12149] tipc: Enabled bearer , priority 10 [ 487.628085][T12133] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #15: comm syz.8.2165: corrupted inode contents [ 487.643270][T12149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2167'. [ 487.643296][T12149] tipc: Disabling bearer [ 487.647136][ C1] EXT4-fs (loop8): error count since last fsck: 2 [ 487.664829][ C1] EXT4-fs (loop8): initial error at time 1781600518: ext4_do_update_inode:5690: inode 15 [ 487.674723][ C1] EXT4-fs (loop8): last error at time 1781600518: ext4_dirty_inode:6587: inode 15 [ 487.676946][T12142] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 487.705111][T12148] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 487.712915][T12145] loop3: detected capacity change from 0 to 512 [ 487.726826][T12148] ext4 filesystem being mounted at /508/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.739174][T12133] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #15: comm syz.8.2165: mark_inode_dirty error [ 487.739528][T12145] EXT4-fs: Ignoring removed nobh option [ 487.771537][ T28] audit: type=1400 audit(1781600518.205:894): avc: denied { write } for pid=12146 comm="syz.4.2171" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 487.812633][T12133] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #15: comm syz.8.2165: mark inode dirty (error -117) [ 487.827859][T12152] tipc: Enabled bearer , priority 0 [ 487.835091][T12145] EXT4-fs (loop3): orphan cleanup on readonly fs [ 487.848698][T12152] syzkaller0: entered promiscuous mode [ 487.855702][T12152] syzkaller0: entered allmulticast mode [ 487.864019][T12133] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 487.868629][T12145] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.2170: EA inode hash validation failed [ 487.873190][T12133] EXT4-fs (loop8): 1 orphan inode deleted [ 487.873653][T12133] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 487.911491][T12145] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.2170: corrupted inode contents [ 487.925738][T12145] fserror_report: 5 callbacks suppressed [ 487.925817][T12145] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 487.934286][T12145] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #15: comm syz.3.2170: mark_inode_dirty error [ 487.955811][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 487.956144][ C0] EXT4-fs (loop3): initial error at time 1781600518: ext4_do_update_inode:5690: inode 15 [ 487.956420][ C0] EXT4-fs (loop3): last error at time 1781600518: ext4_do_update_inode:5690: inode 15 [ 487.991271][T12145] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 487.993591][T12145] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.2170: corrupted inode contents [ 487.999920][ T4463] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.009341][T12145] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 488.029726][T12145] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.2170: mark_inode_dirty error [ 488.053586][T12145] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 488.095254][T12145] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.2170: mark inode dirty (error -117) [ 488.119061][T12145] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 488.119673][T12145] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 488.137923][T12145] EXT4-fs (loop3): 1 orphan inode deleted [ 488.144222][T12145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 488.172860][ T4511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.640149][T12172] loop8: detected capacity change from 0 to 256 [ 488.770314][T12151] tipc: Resetting bearer [ 488.821767][T12174] loop7: detected capacity change from 0 to 164 [ 488.833367][T12174] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 489.056336][T12151] tipc: Disabling bearer [ 489.105573][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 489.985043][T12186] loop7: detected capacity change from 0 to 256 [ 490.015875][T12187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.058707][ T23] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 490.134996][T12187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.154721][ T23] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 490.353727][T12191] fido_id[12191]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 490.368433][T12195] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 490.657483][T12199] loop8: detected capacity change from 0 to 512 [ 490.664259][T12199] EXT4-fs: Ignoring removed nobh option [ 490.775517][T12199] EXT4-fs (loop8): orphan cleanup on readonly fs [ 490.797019][T12199] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.2184: EA inode hash validation failed [ 490.809780][T12199] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #15: comm syz.8.2184: corrupted inode contents [ 490.821659][T12199] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 490.822310][T12199] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #15: comm syz.8.2184: mark_inode_dirty error [ 490.842897][T12199] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 490.896887][ C1] EXT4-fs (loop8): error count since last fsck: 2 [ 490.912528][ C1] EXT4-fs (loop8): initial error at time 1781600521: ext4_do_update_inode:5690: inode 15 [ 490.922406][ C1] EXT4-fs (loop8): last error at time 1781600521: ext4_dirty_inode:6587: inode 15 [ 490.960581][T12199] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #15: comm syz.8.2184: corrupted inode contents [ 490.993471][T12199] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 491.006712][T12199] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #15: comm syz.8.2184: mark_inode_dirty error [ 491.088137][T12199] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 491.098559][T12199] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #15: comm syz.8.2184: mark inode dirty (error -117) [ 491.170203][T12199] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 491.194333][T12199] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 491.216198][T12199] EXT4-fs (loop8): 1 orphan inode deleted [ 491.222653][T12199] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 491.251696][ T4463] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.261373][T12209] loop2: detected capacity change from 0 to 512 [ 491.299527][T12211] loop8: detected capacity change from 0 to 512 [ 491.317352][T12214] loop7: detected capacity change from 0 to 128 [ 491.325574][T12209] EXT4-fs: Ignoring removed nobh option [ 491.343113][T12214] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 491.368448][T12211] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 491.442485][T12214] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.479924][ T28] audit: type=1400 audit(1781600521.713:895): avc: denied { write } for pid=12213 comm="syz.7.2189" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 491.552982][T12209] EXT4-fs (loop2): orphan cleanup on readonly fs [ 491.565642][T12204] loop3: detected capacity change from 0 to 512 [ 491.588849][T12209] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2186: EA inode hash validation failed [ 491.601599][T12209] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.2186: corrupted inode contents [ 491.643008][T12204] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 491.656234][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 491.656395][ C1] EXT4-fs (loop2): initial error at time 1781600521: ext4_do_update_inode:5690: inode 15 [ 491.656651][ C1] EXT4-fs (loop2): last error at time 1781600521: ext4_do_update_inode:5690: inode 15 [ 491.689184][T12209] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #15: comm syz.2.2186: mark_inode_dirty error [ 491.717006][T12209] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.2186: corrupted inode contents [ 491.758068][T12209] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.2186: mark_inode_dirty error [ 491.808969][T12209] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.2186: mark inode dirty (error -117) [ 491.834048][T12221] random: crng reseeded on system resumption [ 491.852989][T12209] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 491.862112][T12209] EXT4-fs (loop2): 1 orphan inode deleted [ 491.868442][T12209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 492.107813][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.177106][ T28] audit: type=1400 audit(1781600522.367:896): avc: denied { bind } for pid=12228 comm="syz.2.2192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 492.332058][ T6506] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 492.357822][T12234] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 492.388440][ T4562] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 492.401555][ T4562] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 492.531727][ T4511] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 492.942668][T12245] loop3: detected capacity change from 0 to 256 [ 494.400532][T12250] loop2: detected capacity change from 0 to 512 [ 494.438999][T12250] EXT4-fs: Ignoring removed nobh option [ 494.650959][ T4463] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 495.014670][T12250] EXT4-fs (loop2): orphan cleanup on readonly fs [ 495.096970][T12250] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2198: EA inode hash validation failed [ 495.150899][T12258] loop7: detected capacity change from 0 to 512 [ 495.157659][T12258] EXT4-fs: Ignoring removed nobh option [ 495.170041][T12258] EXT4-fs (loop7): orphan cleanup on readonly fs [ 495.177451][T12250] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.2198: corrupted inode contents [ 495.192586][T12260] loop3: detected capacity change from 0 to 512 [ 495.199466][T12260] EXT4-fs: Ignoring removed nobh option [ 495.207390][T12260] EXT4-fs (loop3): orphan cleanup on readonly fs [ 495.221297][T12260] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.2201: EA inode hash validation failed [ 495.236870][T12256] loop8: detected capacity change from 0 to 512 [ 495.253223][T12258] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.2202: EA inode hash validation failed [ 495.253535][T12250] fserror_report: 5 callbacks suppressed [ 495.253634][T12250] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 495.268683][T12260] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.2201: corrupted inode contents [ 495.294546][T12260] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 495.295210][T12256] EXT4-fs: Ignoring removed mblk_io_submit option [ 495.310823][T12256] EXT4-fs: Ignoring removed nomblk_io_submit option [ 495.321275][T12258] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #15: comm syz.7.2202: corrupted inode contents [ 495.321715][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 495.341481][ C0] EXT4-fs (loop2): initial error at time 1781600525: ext4_do_update_inode:5690: inode 15 [ 495.352021][ C0] EXT4-fs (loop2): last error at time 1781600525: ext4_do_update_inode:5690: inode 15 [ 495.365397][T12260] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #15: comm syz.3.2201: mark_inode_dirty error [ 495.377197][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 495.377346][ C1] EXT4-fs (loop3): initial error at time 1781600525: ext4_do_update_inode:5690: inode 15 [ 495.377944][ C1] EXT4-fs (loop3): last error at time 1781600525: ext4_do_update_inode:5690: inode 15 [ 495.398964][T12250] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #15: comm syz.2.2198: mark_inode_dirty error [ 495.408743][T12260] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 495.409019][T12260] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.2201: corrupted inode contents [ 495.409050][T12260] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 495.409331][T12260] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.2201: mark_inode_dirty error [ 495.462526][T12260] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 495.462913][T12260] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.2201: mark inode dirty (error -117) [ 495.472075][T12260] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 495.472463][T12260] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 495.472515][T12260] EXT4-fs (loop3): 1 orphan inode deleted [ 495.472955][T12260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 495.515614][T12250] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 495.524736][T12250] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.2198: corrupted inode contents [ 495.545749][T12250] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 495.546119][T12258] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 495.547882][T12250] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.2198: mark_inode_dirty error [ 495.566970][T12256] EXT4-fs (loop8): 1 orphan inode deleted [ 495.576729][T12250] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 495.583940][T12258] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #15: comm syz.7.2202: mark_inode_dirty error [ 495.583978][T12256] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.615889][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 495.622242][T12250] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.2198: mark inode dirty (error -117) [ 495.626007][ C1] EXT4-fs (loop7): initial error at time 1781600525: ext4_do_update_inode:5690: inode 15 [ 495.626043][ C1] EXT4-fs (loop7): last error at time 1781600525: ext4_do_update_inode:5690: inode 15 [ 495.665860][ T4511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.706661][ T4463] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.726168][T12258] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #15: comm syz.7.2202: corrupted inode contents [ 495.760839][T12258] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3001: inode #15: comm syz.7.2202: mark_inode_dirty error [ 495.787424][T12250] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 495.802700][T12258] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3004: inode #15: comm syz.7.2202: mark inode dirty (error -117) [ 495.820560][T12250] EXT4-fs (loop2): 1 orphan inode deleted [ 495.831938][T12258] EXT4-fs warning (device loop7): ext4_evict_inode:287: xattr delete (err -117) [ 495.853367][T12273] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2203'. [ 495.857927][T12258] EXT4-fs (loop7): 1 orphan inode deleted [ 495.891595][T12273] unsupported nlmsg_type 40 [ 495.896477][T12275] ext4 filesystem being mounted at /513/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.941577][ T28] audit: type=1400 audit(1781600525.875:897): avc: denied { write } for pid=12274 comm="syz.4.2205" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 496.009206][ T28] audit: type=1400 audit(1781600525.931:898): avc: denied { write } for pid=12280 comm="syz.7.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 496.035293][ T5847] EXT4-fs unmount: 4 callbacks suppressed [ 496.035312][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.079811][T12281] set_capacity_and_notify: 1 callbacks suppressed [ 496.079832][T12281] loop7: detected capacity change from 0 to 512 [ 496.113321][T12278] loop8: detected capacity change from 0 to 512 [ 496.135273][T12283] loop2: detected capacity change from 0 to 512 [ 496.137683][T12278] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 496.149990][T12283] EXT4-fs: Ignoring removed mblk_io_submit option [ 496.161256][T12283] EXT4-fs: Ignoring removed nomblk_io_submit option [ 496.170713][T12281] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.2207: inode has both inline data and extents flags [ 496.192023][T12281] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2207: couldn't read orphan inode 15 (err -117) [ 496.200608][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 496.205959][T12281] loop7: lost filesystem error report for type 5 error -117 [ 496.210378][ C1] EXT4-fs (loop7): initial error at time 1781600526: ext4_orphan_get:1399: inode 15 [ 496.210418][ C1] EXT4-fs (loop7): last error at time 1781600526: ext4_orphan_get:1399 [ 496.219970][T12281] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.227103][ C1] [ 496.266118][ T28] audit: type=1400 audit(1781600526.193:899): avc: denied { write } for pid=12280 comm="syz.7.2207" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 496.297280][T12283] EXT4-fs (loop2): 1 orphan inode deleted [ 496.311982][ T6506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.323062][T12283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.361419][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.398766][T12291] Illegal XDP return value 4294967282 on prog (id 356) dev N/A, expect packet loss! [ 496.558840][T12297] netlink: 'syz.3.2213': attribute type 5 has an invalid length. [ 497.109940][ T4463] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 497.144170][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 497.203536][ T4563] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 497.230806][ T4563] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 497.497842][T12313] loop2: detected capacity change from 0 to 512 [ 497.528469][T12313] EXT4-fs: Ignoring removed nobh option [ 497.539232][T12311] loop8: detected capacity change from 0 to 512 [ 497.545991][T12311] EXT4-fs: Ignoring removed nobh option [ 497.578171][T12311] EXT4-fs (loop8): orphan cleanup on readonly fs [ 497.588462][T12311] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.2217: EA inode hash validation failed [ 497.601457][T12311] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #15: comm syz.8.2217: corrupted inode contents [ 497.616050][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 497.622722][ C1] EXT4-fs (loop8): initial error at time 1781600527: ext4_do_update_inode:5690: inode 15 [ 497.632726][ C1] EXT4-fs (loop8): last error at time 1781600527: ext4_do_update_inode:5690: inode 15 [ 497.649062][T12311] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #15: comm syz.8.2217: mark_inode_dirty error [ 497.651862][T12313] EXT4-fs (loop2): orphan cleanup on readonly fs [ 497.809146][T12313] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2218: EA inode hash validation failed [ 497.868803][T12311] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #15: comm syz.8.2217: corrupted inode contents [ 497.896877][T12311] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #15: comm syz.8.2217: mark_inode_dirty error [ 497.916826][T12322] loop7: detected capacity change from 0 to 256 [ 497.997559][T12323] loop3: detected capacity change from 0 to 256 [ 498.007874][T12313] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.2218: corrupted inode contents [ 498.058263][T12322] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 498.088347][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 498.094922][ C1] EXT4-fs (loop2): initial error at time 1781600527: ext4_do_update_inode:5690: inode 15 [ 498.105657][ C1] EXT4-fs (loop2): last error at time 1781600527: ext4_do_update_inode:5690: inode 15 [ 498.208585][T12311] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #15: comm syz.8.2217: mark inode dirty (error -117) [ 498.223573][T12313] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #15: comm syz.2.2218: mark_inode_dirty error [ 498.295806][T12313] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.2218: corrupted inode contents [ 498.308465][T12311] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 498.317768][T12311] EXT4-fs (loop8): 1 orphan inode deleted [ 498.324710][T12311] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 498.404545][T12313] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.2218: mark_inode_dirty error [ 498.455548][T12313] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.2218: mark inode dirty (error -117) [ 498.469066][T12313] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 498.490847][T12313] EXT4-fs (loop2): 1 orphan inode deleted [ 498.553759][T12313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 498.625941][ T4463] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.816709][T12331] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 498.876304][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.909301][T12335] loop7: detected capacity change from 0 to 128 [ 498.982503][T12335] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 499.002983][T12337] loop8: detected capacity change from 0 to 512 [ 499.050627][T12337] /dev/loop8: Can't open blockdev [ 499.066843][T12335] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.131626][ T28] audit: type=1400 audit(1781600528.878:900): avc: denied { write } for pid=12334 comm="syz.7.2225" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 499.153706][T12344] loop4: detected capacity change from 0 to 512 [ 499.207625][T12344] EXT4-fs: Ignoring removed mblk_io_submit option [ 499.214223][T12344] EXT4-fs: Ignoring removed nomblk_io_submit option [ 499.263567][T12344] EXT4-fs (loop4): 1 orphan inode deleted [ 499.342914][T12344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.472730][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.499850][T12354] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2230'. [ 499.922822][T12364] netlink: 'syz.4.2232': attribute type 39 has an invalid length. [ 499.951434][T12363] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2231'. [ 500.101907][T12368] EXT4-fs: Ignoring removed nobh option [ 500.109584][T12368] EXT4-fs (loop3): orphan cleanup on readonly fs [ 500.116860][T12368] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.2234: EA inode hash validation failed [ 500.125768][T12366] EXT4-fs: Ignoring removed nobh option [ 500.129574][T12368] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.2234: corrupted inode contents [ 500.130783][T12368] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #15: comm syz.3.2234: mark_inode_dirty error [ 500.160198][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 500.160258][ C1] EXT4-fs (loop3): initial error at time 1781600529: ext4_do_update_inode:5690: inode 15 [ 500.160619][ C1] EXT4-fs (loop3): last error at time 1781600529: ext4_do_update_inode:5690: inode 15 [ 500.189699][T12366] EXT4-fs (loop8): orphan cleanup on readonly fs [ 500.207159][T12368] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.2234: corrupted inode contents [ 500.214828][T12366] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.2233: EA inode hash validation failed [ 500.219907][T12368] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.2234: mark_inode_dirty error [ 500.220112][T12368] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.2234: mark inode dirty (error -117) [ 500.220300][T12368] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 500.220346][T12368] EXT4-fs (loop3): 1 orphan inode deleted [ 500.220901][T12368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 500.294710][ T4511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.308576][T12366] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #15: comm syz.8.2233: corrupted inode contents [ 500.323149][T12366] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #15: comm syz.8.2233: mark_inode_dirty error [ 500.335013][T12366] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #15: comm syz.8.2233: corrupted inode contents [ 500.347373][T12366] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #15: comm syz.8.2233: mark_inode_dirty error [ 500.359572][T12366] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #15: comm syz.8.2233: mark inode dirty (error -117) [ 500.372498][T12366] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 500.381588][T12366] EXT4-fs (loop8): 1 orphan inode deleted [ 500.387781][T12366] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 500.438235][ T6506] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 500.456225][T12378] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.2237: bad orphan inode 15 [ 500.466759][T12378] loop4: lost filesystem error report for type 5 error -117 [ 500.468538][T12378] ext4_test_bit(bit=14, block=5) = 0 [ 500.475927][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 500.475950][ C0] EXT4-fs (loop4): initial error at time 1781600530: ext4_orphan_get:1425 [ 500.475980][ C0] EXT4-fs (loop4): last error at time 1781600530: ext4_orphan_get:1425 [ 500.517700][T12378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.532617][ T4463] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.563283][T12382] tipc: Enabled bearer , priority 0 [ 500.579296][T12382] syzkaller0: entered promiscuous mode [ 500.588592][T12389] FAULT_INJECTION: forcing a failure. [ 500.588592][T12389] name failslab, interval 1, probability 0, space 0, times 0 [ 500.604427][T12382] syzkaller0: entered allmulticast mode [ 500.612224][T12389] CPU: 0 UID: 0 PID: 12389 Comm: syz.8.2241 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 500.612283][T12389] Tainted: [W]=WARN [ 500.612291][T12389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 500.612304][T12389] Call Trace: [ 500.612311][T12389] [ 500.612335][T12389] __dump_stack+0x1d/0x30 [ 500.612365][T12389] dump_stack_lvl+0x95/0xd0 [ 500.612392][T12389] dump_stack+0x15/0x1b [ 500.612417][T12389] should_fail_ex+0x25e/0x270 [ 500.612470][T12389] should_failslab+0x8c/0xb0 [ 500.612498][T12389] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 500.612528][T12389] ? __alloc_skb+0x2d6/0x690 [ 500.612563][T12389] ? tcp_current_mss+0x302/0x3e0 [ 500.612647][T12389] __alloc_skb+0x2d6/0x690 [ 500.612692][T12389] tcp_stream_alloc_skb+0x30/0x320 [ 500.612797][T12389] tcp_sendmsg_locked+0xd2f/0x2c70 [ 500.612842][T12389] ? avc_has_perm+0x101/0x190 [ 500.612913][T12389] ? __pfx_tcp_sendmsg+0x10/0x10 [ 500.612952][T12389] tcp_sendmsg+0x2f/0x50 [ 500.613046][T12389] inet_sendmsg+0x76/0xd0 [ 500.613118][T12389] ? __pfx_inet_sendmsg+0x10/0x10 [ 500.613143][T12389] ____sys_sendmsg+0x4e8/0x580 [ 500.613187][T12389] ___sys_sendmsg+0x195/0x1e0 [ 500.613228][T12389] ? terminate_walk+0x1d5/0x200 [ 500.613336][T12389] __sys_sendmmsg+0x185/0x320 [ 500.613390][T12389] __x64_sys_sendmmsg+0x57/0x70 [ 500.613459][T12389] x64_sys_call+0x27aa/0x3020 [ 500.613486][T12389] do_syscall_64+0x136/0x3c0 [ 500.613515][T12389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.613546][T12389] RIP: 0033:0x7f09634ece59 [ 500.613619][T12389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.613659][T12389] RSP: 002b:00007f0961f47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 500.613684][T12389] RAX: ffffffffffffffda RBX: 00007f0963765fa0 RCX: 00007f09634ece59 [ 500.613702][T12389] RDX: 0000000000000003 RSI: 0000200000002840 RDI: 0000000000000003 [ 500.613720][T12389] RBP: 00007f0961f47090 R08: 0000000000000000 R09: 0000000000000000 [ 500.613737][T12389] R10: 0000000000002090 R11: 0000000000000246 R12: 0000000000000001 [ 500.613783][T12389] R13: 00007f0963766038 R14: 00007f0963765fa0 R15: 00007ffe0dcaaf88 [ 500.613811][T12389] [ 500.635440][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.739143][T12385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.808209][T12387] netlink: 'syz.3.2242': attribute type 1 has an invalid length. [ 500.811211][T12385] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.835924][ T28] audit: type=1400 audit(1781600530.440:901): avc: denied { watch watch_reads } for pid=12386 comm="syz.3.2242" path="/399" dev="tmpfs" ino=2150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 500.901293][ T28] audit: type=1400 audit(1781600530.487:902): avc: denied { getopt } for pid=12386 comm="syz.3.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 500.966489][ T28] audit: type=1400 audit(1781600530.580:903): avc: denied { write } for pid=12384 comm="syz.2.2240" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 500.989502][ T28] audit: type=1400 audit(1781600530.580:904): avc: denied { append } for pid=12384 comm="syz.2.2240" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 501.117527][ T28] audit: type=1400 audit(1781600530.580:905): avc: denied { open } for pid=12384 comm="syz.2.2240" path="/326/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 501.141138][ T28] audit: type=1400 audit(1781600530.590:906): avc: denied { write } for pid=12384 comm="syz.2.2240" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 501.182565][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.356698][T12400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.368729][T12400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.649859][T12411] set_capacity_and_notify: 4 callbacks suppressed [ 501.649917][T12411] loop2: detected capacity change from 0 to 256 [ 501.843020][T12381] tipc: Resetting bearer [ 502.041836][T12381] tipc: Disabling bearer [ 502.151558][T12416] loop8: detected capacity change from 0 to 128 [ 502.205021][T12416] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 502.242114][T12416] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.365843][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 502.365861][ T28] audit: type=1400 audit(1781600531.899:910): avc: denied { write } for pid=12415 comm="syz.8.2249" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 502.536350][T12414] loop4: detected capacity change from 0 to 128 [ 502.663531][T12424] loop7: detected capacity change from 0 to 512 [ 502.680086][T12424] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 503.229736][T12414] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 503.310435][T12414] ext4 filesystem being mounted at /520/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 503.349572][ T4463] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 503.450383][ T28] audit: type=1400 audit(1781600532.881:911): avc: denied { write } for pid=12412 comm="syz.4.2248" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 503.527960][ T6506] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 503.534362][T12435] loop8: detected capacity change from 0 to 512 [ 503.591768][T12435] EXT4-fs: Ignoring removed nobh option [ 503.614271][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 503.660644][T12435] EXT4-fs (loop8): orphan cleanup on readonly fs [ 503.680339][T12435] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.2252: EA inode hash validation failed [ 503.693064][T12435] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #15: comm syz.8.2252: corrupted inode contents [ 503.704920][T12435] fserror_report: 26 callbacks suppressed [ 503.704940][T12435] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 503.776116][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 503.791798][ C1] EXT4-fs (loop8): initial error at time 1781600533: ext4_do_update_inode:5690: inode 15 [ 503.801694][ C1] EXT4-fs (loop8): last error at time 1781600533: ext4_do_update_inode:5690: inode 15 [ 503.813412][T12439] loop3: detected capacity change from 0 to 2048 [ 503.815825][T12444] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2256'. [ 503.834594][T12435] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #15: comm syz.8.2252: mark_inode_dirty error [ 503.846116][T12435] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 503.846691][T12435] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #15: comm syz.8.2252: corrupted inode contents [ 503.867763][T12435] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 503.919659][T12435] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #15: comm syz.8.2252: mark_inode_dirty error [ 503.949397][T12435] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 503.950817][T12435] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #15: comm syz.8.2252: mark inode dirty (error -117) [ 503.982221][T12439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.031868][T12435] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 504.042315][T12435] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 504.044548][T12439] EXT4-fs error (device loop3): ext4_ext_precache:648: inode #2: comm syz.3.2254: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 504.057945][T12435] EXT4-fs (loop8): 1 orphan inode deleted [ 504.104171][T12435] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 504.278889][T12439] EXT4-fs (loop3): Remounting filesystem read-only [ 504.392840][ T4463] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.436810][ T28] audit: type=1400 audit(1781600533.845:912): avc: denied { connect } for pid=12454 comm="syz.2.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 504.465554][T12460] netlink: 468 bytes leftover after parsing attributes in process `syz.2.2259'. [ 504.736686][T12460] bridge0: port 3(gretap0) entered blocking state [ 504.743372][T12460] bridge0: port 3(gretap0) entered disabled state [ 504.750447][T12460] gretap0: entered allmulticast mode [ 504.757904][T12460] gretap0: entered promiscuous mode [ 504.767057][T12460] bridge0: port 3(gretap0) entered blocking state [ 504.773624][T12460] bridge0: port 3(gretap0) entered forwarding state [ 505.174495][ T4511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.185263][ T28] audit: type=1400 audit(1781600533.845:913): avc: denied { bind } for pid=12454 comm="syz.2.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 506.151045][T12472] loop3: detected capacity change from 0 to 256 [ 506.733215][T12480] loop4: detected capacity change from 0 to 128 [ 506.757830][T12475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.795376][T12475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.029035][T12479] loop7: detected capacity change from 0 to 2048 [ 507.113852][ T28] audit: type=1400 audit(1781600536.333:914): avc: denied { getopt } for pid=12464 comm="syz.8.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 507.178527][T12479] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.194052][T12479] EXT4-fs error (device loop7): ext4_ext_precache:648: inode #2: comm syz.7.2266: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 507.211030][T12479] EXT4-fs (loop7): Remounting filesystem read-only [ 507.312792][ T6506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.503026][T12499] loop8: detected capacity change from 0 to 512 [ 507.539516][T12499] EXT4-fs: Ignoring removed nobh option [ 507.564225][T12506] loop2: detected capacity change from 0 to 2048 [ 507.574653][T12506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.591064][T12506] EXT4-fs error (device loop2): ext4_ext_precache:648: inode #2: comm syz.2.2271: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 507.613748][T12499] EXT4-fs (loop8): orphan cleanup on readonly fs [ 507.621987][T12506] EXT4-fs (loop2): Remounting filesystem read-only [ 507.632730][T12499] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.2270: EA inode hash validation failed [ 507.650343][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.655760][T12499] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #15: comm syz.8.2270: corrupted inode contents [ 507.674246][T12499] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 507.683885][T12499] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #15: comm syz.8.2270: mark_inode_dirty error [ 507.694456][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 507.694672][ C0] EXT4-fs (loop8): initial error at time 1781600536: ext4_do_update_inode:5690: inode 15 [ 507.694980][ C0] EXT4-fs (loop8): last error at time 1781600536: ext4_do_update_inode:5690: inode 15 [ 507.739119][T12499] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 507.743385][T12499] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #15: comm syz.8.2270: corrupted inode contents [ 507.767173][T12499] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 507.770010][T12499] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #15: comm syz.8.2270: mark_inode_dirty error [ 507.793991][T12499] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 507.795664][T12512] loop2: detected capacity change from 0 to 1764 [ 507.811745][T12499] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #15: comm syz.8.2270: mark inode dirty (error -117) [ 507.821420][ T28] audit: type=1400 audit(1781600537.006:915): avc: denied { view } for pid=12513 comm="syz.7.2273" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 507.834142][T12499] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 507.850237][T12499] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 507.876941][T12499] EXT4-fs (loop8): 1 orphan inode deleted [ 507.893814][T12499] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 508.034154][ T4463] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.051366][T12516] tipc: New replicast peer: 172.30.0.8 [ 508.069778][T12516] tipc: Enabled bearer , priority 10 [ 508.081003][T12516] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2275'. [ 508.090797][T12516] tipc: Disabling bearer [ 508.236575][T12524] loop7: detected capacity change from 0 to 2048 [ 508.306741][T12524] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.312029][ T4563] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 508.327915][T12524] EXT4-fs error (device loop7): ext4_ext_precache:648: inode #2: comm syz.7.2277: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 508.330934][T12521] tmpfs: Unknown parameter '' [ 508.356132][ T28] audit: type=1400 audit(1781600537.493:916): avc: denied { mounton } for pid=12519 comm="syz.8.2274" path="/syzcgroup/unified/syz8" dev="cgroup2" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 508.356584][T12524] EXT4-fs (loop7): Remounting filesystem read-only [ 508.397474][ T4563] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 508.414231][T12521] loop8: detected capacity change from 0 to 1024 [ 508.430689][T12521] EXT4-fs: Ignoring removed bh option [ 508.493936][T12521] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.508198][T12521] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 508.519677][ T28] audit: type=1400 audit(1781600537.624:917): avc: denied { write } for pid=12519 comm="syz.8.2274" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 508.526494][ T6506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.543016][ T28] audit: type=1400 audit(1781600537.624:918): avc: denied { read } for pid=12519 comm="syz.8.2274" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 508.588901][T12521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.597906][T12521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.721742][T12541] loop7: detected capacity change from 0 to 512 [ 508.734121][T12541] EXT4-fs: Ignoring removed mblk_io_submit option [ 508.741158][T12541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 508.762188][T12541] EXT4-fs (loop7): 1 orphan inode deleted [ 508.768616][T12541] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.800436][ T6506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.855480][T12545] loop7: detected capacity change from 0 to 2048 [ 508.880546][T12545] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.901424][T12545] EXT4-fs error (device loop7): ext4_ext_precache:648: inode #2: comm syz.7.2282: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 508.918780][T12545] EXT4-fs (loop7): Remounting filesystem read-only [ 508.943654][ T6506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.069663][T12554] loop7: detected capacity change from 0 to 512 [ 509.077742][T12554] EXT4-fs: Ignoring removed nobh option [ 509.111899][T12554] EXT4-fs (loop7): orphan cleanup on readonly fs [ 509.129857][T12554] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.2285: EA inode hash validation failed [ 509.161906][T12554] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 509.181103][T12554] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #15: comm syz.7.2285: corrupted inode contents [ 509.197068][T12554] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 509.197875][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 509.214342][ C0] EXT4-fs (loop7): initial error at time 1781600538: ext4_do_update_inode:5690: inode 15 [ 509.225161][ C0] EXT4-fs (loop7): last error at time 1781600538: ext4_do_update_inode:5690: inode 15 [ 509.242852][T12554] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #15: comm syz.7.2285: mark_inode_dirty error [ 509.256222][T12554] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 509.259024][T12554] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #15: comm syz.7.2285: corrupted inode contents [ 509.284167][T12554] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 509.286437][T12554] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3001: inode #15: comm syz.7.2285: mark_inode_dirty error [ 509.310852][T12554] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 509.312999][T12554] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3004: inode #15: comm syz.7.2285: mark inode dirty (error -117) [ 509.339732][T12554] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 509.341091][T12554] EXT4-fs warning (device loop7): ext4_evict_inode:287: xattr delete (err -117) [ 509.417433][T12554] EXT4-fs (loop7): 1 orphan inode deleted [ 509.498236][ T4463] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.540909][T12554] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 509.576951][T12559] loop3: detected capacity change from 0 to 1024 [ 509.643587][T12561] tipc: New replicast peer: 172.30.0.9 [ 509.687861][T12561] tipc: Enabled bearer , priority 10 [ 509.705056][T12559] EXT4-fs (loop3): blocks per group (131072) and clusters per group (8192) inconsistent [ 509.751030][T12564] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2287'. [ 509.960122][T12564] tipc: Disabling bearer [ 509.983130][ T6506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.145760][T12571] FAULT_INJECTION: forcing a failure. [ 510.145760][T12571] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 510.206495][T12571] CPU: 0 UID: 0 PID: 12571 Comm: syz.7.2291 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 510.206539][T12571] Tainted: [W]=WARN [ 510.206616][T12571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 510.206634][T12571] Call Trace: [ 510.206643][T12571] [ 510.206654][T12571] __dump_stack+0x1d/0x30 [ 510.206681][T12571] dump_stack_lvl+0x95/0xd0 [ 510.206702][T12571] dump_stack+0x15/0x1b [ 510.206722][T12571] should_fail_ex+0x25e/0x270 [ 510.206812][T12571] should_fail+0xb/0x20 [ 510.206837][T12571] should_fail_usercopy+0x1a/0x20 [ 510.206862][T12571] _copy_from_user+0x1c/0xb0 [ 510.206926][T12571] __sys_bpf+0x183/0x7e0 [ 510.206967][T12571] __x64_sys_bpf+0x41/0x50 [ 510.207002][T12571] x64_sys_call+0x10cb/0x3020 [ 510.207026][T12571] do_syscall_64+0x136/0x3c0 [ 510.207070][T12571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.207093][T12571] RIP: 0033:0x7fa811fece59 [ 510.207185][T12571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.207210][T12571] RSP: 002b:00007fa810a3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 510.207237][T12571] RAX: ffffffffffffffda RBX: 00007fa812265fa0 RCX: 00007fa811fece59 [ 510.207277][T12571] RDX: 0000000000000048 RSI: 0000200000000380 RDI: 0000000000000000 [ 510.207291][T12571] RBP: 00007fa810a3f090 R08: 0000000000000000 R09: 0000000000000000 [ 510.207309][T12571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.207326][T12571] R13: 00007fa812266038 R14: 00007fa812265fa0 R15: 00007fff2a5b55f8 [ 510.207350][T12571] [ 510.490425][T12574] EXT4-fs: Ignoring removed mblk_io_submit option [ 510.510850][T12574] EXT4-fs: Ignoring removed nomblk_io_submit option [ 510.576187][T12574] EXT4-fs (loop7): 1 orphan inode deleted [ 510.585562][T12574] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.599930][T12582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.625356][T12582] EXT4-fs error (device loop2): ext4_ext_precache:648: inode #2: comm syz.2.2294: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 510.658146][T12582] EXT4-fs (loop2): Remounting filesystem read-only [ 510.861807][T12569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.904202][T12569] EXT4-fs error (device loop3): ext4_ext_precache:648: inode #2: comm syz.3.2290: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 510.938568][T12569] EXT4-fs (loop3): Remounting filesystem read-only [ 510.963473][ T6506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.975766][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.987546][ T4511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.021580][ T4563] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 511.113970][ T4563] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 511.116356][T12590] EXT4-fs: Ignoring removed nobh option [ 511.175180][T12595] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 511.229879][T12595] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 511.247014][T12590] EXT4-fs (loop4): orphan cleanup on readonly fs [ 511.325631][T12590] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.2299: EA inode hash validation failed [ 511.352436][T12595] EXT4-fs (loop2): failed to open journal device unknown-block(0,3) -6 [ 511.353780][T12597] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 511.381593][T12590] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.2299: corrupted inode contents [ 511.406969][T12590] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 511.407746][T12590] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #15: comm syz.4.2299: mark_inode_dirty error [ 511.418098][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 511.418287][ C0] EXT4-fs (loop4): initial error at time 1781600540: ext4_do_update_inode:5690: inode 15 [ 511.418532][ C0] EXT4-fs (loop4): last error at time 1781600540: ext4_do_update_inode:5690: inode 15 [ 511.489952][T12590] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 511.491929][T12590] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.2299: corrupted inode contents [ 511.548052][T12590] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 511.576826][T12590] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.2299: mark_inode_dirty error [ 511.600072][T12590] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 511.601700][T12590] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.2299: mark inode dirty (error -117) [ 511.660807][T12590] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 511.800651][T12590] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 511.833454][ T28] audit: type=1400 audit(1781600540.701:919): avc: denied { setopt } for pid=12607 comm="syz.8.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 512.176101][T12590] EXT4-fs (loop4): 1 orphan inode deleted [ 512.183136][T12590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 512.387326][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.397568][ T6506] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 512.447639][T12619] tipc: Enabled bearer , priority 0 [ 512.575114][T12624] tipc: Enabled bearer , priority 0 [ 512.705859][T12621] set_capacity_and_notify: 6 callbacks suppressed [ 512.705888][T12621] loop4: detected capacity change from 0 to 512 [ 512.762896][T12621] EXT4-fs: Ignoring removed mblk_io_submit option [ 512.786511][T12621] EXT4-fs: Ignoring removed nomblk_io_submit option [ 512.833609][T12621] EXT4-fs (loop4): 1 orphan inode deleted [ 512.861391][T12621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.005786][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.006637][ T28] audit: type=1400 audit(1781600541.861:920): avc: denied { create } for pid=12630 comm="syz.8.2307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 513.022610][T12631] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2307'. [ 513.035504][ T28] audit: type=1400 audit(1781600541.871:921): avc: denied { ioctl } for pid=12630 comm="syz.8.2307" path="socket:[36282]" dev="sockfs" ino=36282 ioctlcmd=0x8994 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 513.107423][T12633] loop4: detected capacity change from 0 to 2048 [ 513.137116][T12637] loop8: detected capacity change from 0 to 512 [ 513.149803][T12637] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 513.161762][T12637] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.2310: invalid indirect mapped block 4294967295 (level 0) [ 513.177191][T12637] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.2310: invalid indirect mapped block 4294967295 (level 1) [ 513.191358][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 513.191398][ C1] EXT4-fs (loop8): initial error at time 1781600542: ext4_free_branches:1023: inode 16 [ 513.191438][ C1] EXT4-fs (loop8): last error at time 1781600542: ext4_free_branches:1023: inode 16 [ 513.193186][T12633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.200596][T12637] EXT4-fs (loop8): 1 orphan inode deleted [ 513.217121][T12633] EXT4-fs error (device loop4): ext4_ext_precache:648: inode #2: comm syz.4.2308: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 513.226272][T12637] EXT4-fs (loop8): 1 truncate cleaned up [ 513.260328][T12637] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.274332][T12633] EXT4-fs (loop4): Remounting filesystem read-only [ 513.301519][T12618] tipc: Disabling bearer [ 513.312825][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2310'. [ 513.338176][ T28] audit: type=1400 audit(1781600542.170:922): avc: denied { write } for pid=12636 comm="syz.8.2310" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 513.361720][ T28] audit: type=1400 audit(1781600542.189:923): avc: denied { mounton } for pid=12636 comm="syz.8.2310" path="/376/file0/file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 513.398912][ T28] audit: type=1400 audit(1781600542.189:924): avc: denied { mount } for pid=12636 comm="syz.8.2310" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 513.445423][T12623] tipc: Disabling bearer [ 513.460668][ T4463] EXT4-fs error (device loop8): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 513.520990][T12653] loop3: detected capacity change from 0 to 512 [ 513.612662][T12662] loop7: detected capacity change from 0 to 128 [ 513.645656][T12662] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.684116][ T28] audit: type=1400 audit(1781600542.488:925): avc: denied { write } for pid=12660 comm="syz.7.2319" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 513.708186][T12661] loop2: detected capacity change from 0 to 512 [ 513.720585][T12661] EXT4-fs: Ignoring removed mblk_io_submit option [ 513.727091][T12661] EXT4-fs: Ignoring removed nomblk_io_submit option [ 513.767922][T12661] EXT4-fs (loop2): 1 orphan inode deleted [ 513.862210][T12671] loop2: detected capacity change from 0 to 2048 [ 513.885815][ T2982] ================================================================== [ 513.893981][ T2982] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 513.902052][ T2982] [ 513.904454][ T2982] write to 0xffff88810833d4b0 of 8 bytes by task 9195 on cpu 0: [ 513.912115][ T2982] dentry_unlink_inode+0x65/0x260 [ 513.913500][T12671] EXT4-fs error (device loop2): ext4_ext_precache:648: inode #2: comm syz.2.2321: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 513.917202][ T2982] d_delete+0x164/0x180 [ 513.917244][ T2982] d_delete_notify+0x32/0x100 [ 513.917269][ T2982] vfs_unlink+0x287/0x490 [ 513.917288][ T2982] filename_unlinkat+0x1dc/0x410 [ 513.917314][ T2982] __se_sys_unlink+0x2b/0xe0 [ 513.917340][ T2982] __x64_sys_unlink+0x1f/0x30 [ 513.917367][ T2982] x64_sys_call+0x2eb6/0x3020 [ 513.917400][ T2982] do_syscall_64+0x136/0x3c0 [ 513.917432][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.917461][ T2982] [ 513.917470][ T2982] read to 0xffff88810833d4b0 of 8 bytes by task 2982 on cpu 1: [ 513.917493][ T2982] step_into_slowpath+0x12c/0x4c0 [ 513.917525][ T2982] path_lookupat+0x2eb/0x4c0 [ 513.917556][ T2982] filename_lookup+0x18f/0x390 [ 513.917588][ T2982] do_readlinkat+0x74/0x2f0 [ 513.917624][ T2982] __x64_sys_readlink+0x47/0x60 [ 513.917656][ T2982] x64_sys_call+0x2b51/0x3020 [ 513.917688][ T2982] do_syscall_64+0x136/0x3c0 [ 513.917712][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.917740][ T2982] [ 513.917745][ T2982] value changed: 0xffff88812d0b50d0 -> 0x0000000000000000 [ 513.917761][ T2982] [ 513.917767][ T2982] Reported by Kernel Concurrency Sanitizer on: [ 513.917787][ T2982] CPU: 1 UID: 0 PID: 2982 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 513.917829][ T2982] Tainted: [W]=WARN [ 513.917839][ T2982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 513.917857][ T2982] ================================================================== [ 514.084680][T12671] EXT4-fs (loop2): Remounting filesystem read-only [ 514.129725][ T36] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.183565][ T36] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.246828][ T36] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.311336][ T36] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.492827][ T28] audit: type=1400 audit(1781600543.255:926): avc: denied { read } for pid=3022 comm="dhcpcd" name="n62" dev="tmpfs" ino=18715 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 514.543183][ T36] bridge_slave_1: left allmulticast mode [ 514.543892][ T28] audit: type=1400 audit(1781600543.255:927): avc: denied { open } for pid=3022 comm="dhcpcd" path="/run/udev/data/n62" dev="tmpfs" ino=18715 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 514.560800][ T36] bridge_slave_1: left promiscuous mode [ 514.594227][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.601488][ T28] audit: type=1400 audit(1781600543.255:928): avc: denied { getattr } for pid=3022 comm="dhcpcd" path="/run/udev/data/n62" dev="tmpfs" ino=18715 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 514.629148][ T36] bridge_slave_0: left allmulticast mode [ 514.641126][ T36] bridge_slave_0: left promiscuous mode [ 514.651270][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.712338][ T28] audit: type=1400 audit(1781600543.451:929): avc: denied { write } for pid=12676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.762060][ T28] audit: type=1400 audit(1781600543.451:930): avc: denied { create } for pid=12676 comm="dhcpcd-run-hook" name="resolv.conf.eth11.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 514.787165][ T28] audit: type=1400 audit(1781600543.451:931): avc: denied { write } for pid=12676 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth11.link" dev="tmpfs" ino=18720 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 514.817049][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.827347][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.837442][ T36] bond0 (unregistering): Released all slaves [ 514.855271][ T36] bond1 (unregistering): Released all slaves [ 514.866238][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 514.889451][ T36] tipc: Left network mode [ 514.910811][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.928045][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.935674][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.960020][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.977064][ T36] veth1_macvtap: left promiscuous mode [ 514.992170][ T36] veth0_macvtap: left promiscuous mode [ 514.999332][ T36] veth1_vlan: left promiscuous mode [ 515.013623][ T36] veth0_vlan: left promiscuous mode [ 515.110689][ T36] team0 (unregistering): Port device team_slave_1 removed [ 515.121362][ T36] team0 (unregistering): Port device team_slave_0 removed [ 515.162659][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 515.307285][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 515.327241][ T36] IPVS: stop unused estimator thread 0... [ 515.451623][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14